You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
credential security
About this tag
Credential security on WindowsForum.com covers the protection of authentication data against theft, exposure, and misuse. Discussions include CISA advisories on default credentials and hard-coded secrets in industrial systems, AI-assisted remote access tools that keep secrets out of language models, and large-scale credential leaks exposing millions of username-password pairs. Recurring themes are the risks of weak or default credentials, the importance of credential hygiene, and strategies to safeguard login information across enterprise and consumer environments.
CISA published advisory ICSA-26-148-01 on May 28, 2026, warning that MacGregor’s Voyage Data Recorder G4e is affected by multiple credential and access-control weaknesses that could let an attacker gain administrator access to the maritime device. The advisory is narrow in product scope but...
IT administrators are increasingly pairing so‑called Agent Mode AI with remote access tools to turn large language models (LLMs) from passive advisers into hands‑on operators — and Devolutions’ recent integration of the Model Context Protocol (MCP) into Remote Desktop Manager (RDM) illustrates a...
A massive, unprotected trove of stolen credentials believed to contain roughly 149.4 million unique username–password pairs — including tens of millions tied to major email and social platforms — was discovered by security researcher Jeremiah Fowler and remained publicly accessible for weeks...