#credential-theft — Public Fediverse posts

Over 2.8 billion credentials stolen in 2025 as ransomware evolves #CyberSecurity #CredentialTheft

https://betanews.com/article/over-2-8-billion-credentials-stolen-in-2025-as-ransomware-evolves/

‘Invisible’ credential theft campaign targets senior executives #CyberSecurity #CredentialTheft

https://betanews.com/article/invisible-credential-theft-campaign-targets-senior-executives/

🚨 Oh no, another package bites the dust! The "LiteLLM" Python library reveals its true colors as a master of deception, stealing credentials faster than a ninja in a bank vault 🏴‍☠️. Who would have thought that installing a package could turn into an episode of "Catch Me If You Can"? 🎭
https://github.com/BerriAI/litellm/issues/24512 #LiteLLM #PythonLibrary #CredentialTheft #CyberSecurity #SoftwareRisks #CatchMeIfYouCan #HackerNews #ngated

https://winbuzzer.com/2026/02/06/cve-2026-0391-microsoft-edge-android-ui-spoofing-xcxwbn/

CVE-2026-0391: Edge Android Flaw Enables Spoofing Attacks

#MicrosoftEdge #Security #Cybersecurity #Microsoft #Android #WebBrowsers #Phishing #CredentialTheft #ZeroDayVulnerabilities #Chromium

Cyble Detects Phishing Campaign Using Telegram Bots to Siphon Corporate Credentials https://thecyberexpress.com/phishing-telegram-bots-steal-credentials/ #CentralEuropeCyberThreats #ThreatIntelligenceNews #PhishingCampaign2025 #SelfContainedMalware #EmailSecurityBypass #ThreatIntelligence #TelegramBotMalware #JavaScriptmalware #MicrosoftPhishing #TelegramAPIAbuse #CredentialTheft #InvoicePhishing #FirewallDaily #AdobePhishing #Cybleresearch #PressRelease #ThreatActors #HTMLPhishing #RFQPhishing

Nikkei's latest breach shows one stolen credential on Slack can expose 17,000 lives. Are we really secure in our daily digital chats? Read more on this eye-opening incident.

https://thedefendopsdiaries.com/nikkei-data-breach-highlights-risks-of-communication-platforms-and-importance-of-proactive-security/

#databreach
#cybersecurity
#slacksecurity
#credentialtheft
#infosec
#proactivesecurity
#communicationplatforms
#nikkei

Is your browser really safe? Hackers are outsmarting traditional sandboxes with crafty extensions and clever credential theft. It’s time to rethink security and add extra layers of protection.

https://thedefendopsdiaries.com/browser-sandboxing-evolving-threats-and-the-need-for-multi-layered-security/

#browsersecurity
#sandboxing
#cyberthreats
#credentialtheft
#maliciousextensions

#sicherheit geht uns alle an:
Welche Punkte/Regelungen/Belohnungen erwartet ihr in der #responsibledisclosure Policy von einer Seite wie LinuxNews.de? Bin da aktuell etwas planlos…

Hashtags damit wir volle Kanne in der #itsecurity Bubble einschlagen: #cybersecurity #cybersec #opsec #security #databreach #hackerangriff #hacker #itsec #credentialtheft #digitalsafety #digitalesicherheit #threatintelligence

Malware on tap? Atroposia lets even novice hackers rent a toolkit that bypasses Windows defenses, steals credentials, and even targets crypto. How safe are we when cybercrime is just a subscription away?

https://thedefendopsdiaries.com/atroposia-the-rise-of-subscription-based-malware-and-its-implications/

#atroposia
#malwareasaservice
#cybercrime
#remotetrojan
#credentialtheft

Heard the buzz about a massive Gmail breach? It's actually a mix-up of old, recycled data—not a fresh hack. Curious about the real story and how to stay secure?

https://thedefendopsdiaries.com/debunking-the-gmail-data-breach-panic-what-really-happened/

#gmailbreach
#databreach
#cybersecurity
#credentialtheft
#infosec

Microsoft Teams users, beware – ransomware gangs are using ultra-smart phishing, bots, and loopholes in third-party apps to breach your defenses. Is your organization ready for this new wave of attacks?

https://thedefendopsdiaries.com/ransomware-threats-targeting-microsoft-teams-attack-vectors-and-defense-strategies/

#ransomware
#microsoftteams
#cybersecurity
#phishing
#credentialtheft

One stolen password turned PowerSchool into a digital disaster: millions of student and teacher records, ruthless extortion, and a multi-million-dollar fallout. How safe are we really?

https://thedefendopsdiaries.com/inside-the-powerschool-breach-lessons-from-a-credential-compromise/

#powerschoolbreach
#credentialtheft
#databreach
#cybersecurity
#edtechsecurity

SonicWall’s VPN breach shows how stolen credentials can blow open account security in just days. Is your organization ready to fend off smarter, faster cyberattacks?

https://thedefendopsdiaries.com/sonicwall-vpn-breach-highlights-growing-threat-of-credential-based-attacks/

#sonicwall
#vpnsecurity
#credentialtheft
#cyberattack
#multifactorauthentication

Meldepflicht: Über 150 Cyberangriffe beim Bacs gemeldet - inside-it.ch https://www.inside-it.ch/meldepflicht-uber-150-cyberangriffe-beim-bacs-gemeldet-20250929 #KRITIS #Hacking #dDoS #CredentialTheft #CredentialStuffing #Ransomware #Malware #DataLeak #Datenleck #Datenschutz #privacy

How the "Kim" dump exposed North Korea's credential theft playbook

https://dti.domaintools.com/inside-the-kimsuky-leak-how-the-kim-dump-exposed-north-koreas-credential-theft-playbook/

#HackerNews #KimDump #NorthKorea #CredentialTheft #CyberSecurity #HackerNews #Kimsuky

Google warns that mass data theft hitting Salesloft AI agent has grown bigger - Google is advising users of the Salesloft Drift AI chat agen... - https://arstechnica.com/security/2025/08/google-warns-that-mass-data-theft-hitting-salesloft-ai-agent-has-grown-bigger/ #credentialtheft #salesloftdrift #chatagents #salesforce #security #biz⁢ #ai

🖥️ VNC might be convenient for legacy systems, but it's just as convenient for attackers...
 
Unencrypted traffic makes it easy to intercept credentials. Some setups don’t require a password at all. And even when passwords are used, they’re often weakly stored and easily cracked.
 
Attackers might not even need to log in, just sniff the traffic and capture screens or keystrokes without being noticed.
 
To prove the point, our Kieran built a Python script (VncCrack.py) that cracks VNC passwords in plaintext using intercepted traffic.
 
📌Check it out in action in our latest blog post: https://www.pentestpartners.com/security-blog/vnc-rdp-for-all-to-see/

#CyberSecurity #PenTesting #VNC #LegacySecurity #DFIR #NetworkSecurity #CredentialTheft

Microsoft 365 credential theft is evolving quickly!

Attackers are no longer just stealing your login—they’re using your own AI tools like Microsoft Copilot to accelerate fraud from inside your environment.

Our 4-minute video breaks down how threat actors are targeting Microsoft 365 accounts and weaponizing Copilot, Teams, SharePoint, and more to perform rapid reconnaissance, commit fraud, and exploit centralized trust systems.

Watch now to learn:

▪ How Copilot can be used against you
▪ Real phishing tactics mimicking Microsoft 365, Adobe & DocuSign
▪ Why SSO, OAuth, and poor access controls can make attacks worse
▪ What your organization must do to stay ahead

Watch the video! https://youtu.be/zaBwxy1Gjhc

#Microsoft365 #CredentialTheft #Cybersecurity #CoPilot #ZeroTr #Cyberaware #Cyber #SMB #CEO #CISO #CIO #Phishing #CloudSecurity #AI #M365 #Riskmanageemnt

*Politically hacking the smart toilet screens in the resort-town airport. #InternetOfThings #credentialtheft #hack #digitaloutsideofhome #TwentyTwenties

https://thethaiger.com/news/phuket/phuket-airport-scrambles-to-explain-cyberattack-on-digital-screen

Credential theft escalates as threat actors use stealthier tactics #CyberSecurity #CredentialTheft

https://betanews.com/2025/04/17/credential-theft-escalates-as-threat-actors-use-stealthier-tactics/

Unauthorised network access remains a significant threat, especially for organisations lacking robust network security controls. Attackers can capture privileged credentials from automated tasks and vulnerability scanners if these tasks are configured with an excessive scope or are insufficiently protected by network or host controls...

Read our latest blog, "Watch where you point that cred," by Tom Thomas-Litman, for insights and recommendations for securing internal networks: https://www.pentestpartners.com/security-blog/watch-where-you-point-that-cred-part-1/

#CyberSecurity #Infosec #NetworkSecurity #VulnerabilityScanning #CredentialTheft #Honeypots #LeastPrivilege #RiskMitigation

FlowerStorm PaaS Platform Attacking Microsoft Users With Fake Login Pages https://gbhackers.com/flowerstorm-microsoft-phishing/ #CyberSecurityNews #CredentialTheft #PhishingAttacks #cybersecurity #CyberCrime #Microsoft #Phishing

🚨 Security Alert! 🚨 A recent attack has compromised 16 Chrome extensions, exposing over 600,000 users to data theft! 🛡️ Cyberhaven was among the first affected, with malicious code stealing sensitive information. This highlights the vulnerabilities of browser extensions. Stay safe and review your installed extensions! 🔍✨ #CyberSecurity #ChromeExtensions #DataProtection #PhishingAttack #CredentialTheft https://thehackernews.com/2024/12/16-chrome-extensions-hacked-exposing.html #newz

Yearlong supply-chain attack targeting security pros steals 390K credentials - A sophisticated and ongoing supply-chain attack operating for the past yea... - https://arstechnica.com/security/2024/12/yearlong-supply-chain-attack-targeting-security-pros-steals-390k-credentials/ #supplychainattacks #credentialtheft #cryptomining #security #biz⁢ #github #npm

I'd love to see Flare go the next step and automatically enroll compromised credentials into a passwordless authentication mechanism.

#security #cybersecurity #CredentialTheft #IdentitySecurity #Authentication #IAM #Funding #Passwordless
https://techcrunch.com/2024/12/11/flare-raises-30m-to-thwart-info-stealers-like-those-used-on-snowflake-customers/
3/3

Roblox Developers Under Attack Via Weaponized npm Packages https://cybersecuritynews.com/roblox-developers-under-attack/ #CyberSecurityNews #cybersecuritynews #CredentialTheft #RobloxSecurity #NPMMalware #Malware #Threats

OilRig Hackers Exploiting Microsoft Exchange Server To Steal Login Details https://gbhackers.com/oilrig-hackers-microsoft-exchange-attack/ #MicrosoftExchangeVulnerability #CVE/vulnerability #CyberSecurityNews #CredentialTheft #CyberEspionage #Microsoft