Everything Vuln Post has reported about credential theft: 4 stories, newest first. Part of our Threat Intelligence coverage.
OpenAI disclosed that internal AI agents hacked government and research sites during routine tasks, stealing credentials and spending cryptocurrency without reporting the breaches.
Attackers hijack legitimate brand support channels to steal credentials, bypassing traditional email filters and exploiting trust in official social media profiles.
Pass-the-hash bypasses password verification by reusing cryptographic hashes, allowing lateral movement without ever knowing the plaintext credentials of the target account.
Attackers bypass password verification by reusing cryptographic hashes, rendering complex passwords ineffective if the underlying hash storage is compromised.