Stolen Credentials

Verizon 2026 DBIR: Vulnerability Exploitation Leaps Ahead of Stolen Credentials as #1 Initial Breach Cause

May 22, 2026

For the first time in its publication history of nearly 20 years, Verizon's annual Data Breach Investigations Report (DBIR) is tracking vulnerability exploitation as the leading initial access method for attackers. Stolen credentials had been the #1 method for the entirety of the report's history up to this year.

Cisco bug on a computer chip showing stolen credentials for telecoms hack

Cyber Security News

Researchers Find Salt Typhoon Exploited One Known Cisco Bug, But Mostly Accessed Telecoms Via Stolen Employee Credentials

February 25, 2025

Talos confirms that at least one known Cisco bug, CVE-2018-0171, was likely to have been actively exploited by Salt Typhoon. But the researchers say that the primary approach was to target legitimate existing credentials, likely through a variety of methods.

Hands on keyboard and person icon showing stolen credentials from Git config files

Cyber Security News

Hacking Campaign Scanned Exposed Git Config Files, Made Off With 15,000 Stolen Credentials

November 7, 2024

The campaign was conducted by malicious hackers who sold the stolen credentials off, with much of the info being put to use in spam and phishing campaigns. The attack simply made use of open-source tools to scan IP ranges for potentially vulnerable Git config files.

Hacker typing password on laptop showing data leak

Cyber Security News

“Mother of All Breaches” Data Leak Pulls Together 26 Billion Records From Thousands of Prior Breaches

January 26, 2024

The 1.2 terabyte MOAB file is broken up into over 3,800 folders, each one representing a prior data leak that saw personal information or credentials make their way to the open internet. In total there are over 26 billion records.

Hacker typing in login screen showing stolen credentials

Cyber Security Insights

Why Does Every Hack Involve Stolen Credentials? Because It Works Every Time

August 9, 2022

Digital transformation, hybrid work, third-party partnerships, and other factors have weakened security controls. It’s now more likely than not that the adversary is already hiding within the network, and equally as likely that they got in with stolen, now compromised, credentials.

Stolen Credentials

Verizon 2026 DBIR: Vulnerability Exploitation Leaps Ahead of Stolen Credentials as #1 Initial Breach Cause

Researchers Find Salt Typhoon Exploited One Known Cisco Bug, But Mostly Accessed Telecoms Via Stolen Employee Credentials

Hacking Campaign Scanned Exposed Git Config Files, Made Off With 15,000 Stolen Credentials

“Mother of All Breaches” Data Leak Pulls Together 26 Billion Records From Thousands of Prior Breaches

Why Does Every Hack Involve Stolen Credentials? Because It Works Every Time

Apple Steps Up Release of Security Updates in Response to AI Hacking Threats

Several ISPs and Millions of Customers Compromised in KDDI’s Email System Data Breach

Security Breach at Tata Electronics Affects Apple, Tesla, and Other Technology Giants

Hackers Breach Brazil’s Emergency Alert System, Triggering Millions of False Alerts