The Verification Step Is the New ATO Battleground in 2026
For years, account takeover (ATO) followed a predictable script. Attackers bought stolen credentials in bulk, ran them through automated tools,...
stolen
U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case
A U.S. government entity paid about $1 million to keep stolen files from being leaked, according to a new case study...
24B Records Exposed in Massive Leak of Emails, Passwords, and Login Data
A massive collection of stolen login credentials containing roughly 24 billion records was briefly exposed online, according to cybersecurity researchers...
Nintendo Alleged Data Breach: Threat Actor Demands $2M Ransom
Nintendo is facing a potential incident after a threat actor claimed to have stolen nearly a decade’s worth of internal...
Google Chrome’s New Feature Takes Aim at Cookie Theft, Account Hijacking
Google Chrome is making stolen login cookies a lot less useful. Google has begun rolling out Device Bound Session Credentials,...
MyPillow listed on ransomware gang’s leak site, but denies it has been breached
The Play ransomware gang is claiming to have stolen data from US pillow manufacturer MyPillow, making off with private and...
Defenders fall behind, as AI rewrites the rules of a data breach
For almost 20 years, stolen credentials have been the most common route for attackers into organizations, according to the Verizon...
What It Costs to Hire a Hacker on the Dark Web in 2026
The dark web continues to fuel a growing underground economy where cybercriminals buy and sell stolen data, malicious tools, and...
Thousands of Facebook accounts stolen by phishing emails sent through Google
The post Thousands of Facebook accounts stolen by phishing emails sent through Google appeared first on Malwarebytes. Researchers have uncovered...
What Makes Credential Stuffing Difficult to Detect?
Credential stuffing is a cyberattack where attackers use stolen usernames and passwords, often obtained from data breaches or bought on...
GrafanaGhost: The AI That Leaked Everything Without Being Hacked
Image: Prostock-studio/Adobe No credentials were stolen. No alerts were triggered. And yet, the data slipped out anyway. On April 7,...
Russian authorities arrest alleged LeakBase admin behind stolen data marketplace
Russian authorities arrest alleged LeakBase admin behind stolen data marketplace Pierluigi Paganini March 26, 2026 Russian authorities arrested the alleged...
Your tax forms sell for $20 on the dark web
Tax season is also peak season for identity theft. Criminals use stolen personal data to file fake tax returns...
Where Multi-Factor Authentication Stops and Credential Abuse Starts
Organizations typically roll out multi-factor authentication (MFA) and assume stolen passwords are no longer enough to access systems. In Windows...
Hackers sell stolen Eurail traveler information on dark web
Hackers sell stolen Eurail traveler information on dark web Pierluigi Paganini February 17, 2026 Eurail B.V. revealed that traveler data...
