credential stuffing

Chick-fil-A is warning affected loyalty customers that an automated login attack may have exposed personal and account information stored in Chick-fil-A One accounts, putting a fresh spotlight on the risks of password reuse across websites, mobile apps, and digital payment services. The incident...

Cybernews researchers reported in mid-June 2026 that an exposed Elasticsearch database briefly left more than 24 billion credential records, roughly 8.3 terabytes of usernames, email addresses, passwords, and login URLs, accessible on the open internet before it was secured. The number is...

Microsoft users in Portugal and elsewhere have reported receiving unsolicited Microsoft verification codes by SMS, email, and Authenticator prompts in recent weeks, with the most likely causes ranging from credential-stuffing attempts to abuse of legitimate Microsoft Entra and OAuth sign-in...

Security researchers have observed a coordinated, large‑scale reconnaissance campaign probing Microsoft Remote Desktop services that began as a sudden one‑day spike and escalated into a torrent of scans — a pattern that looks less like opportunistic background noise and more like deliberate...

In a rapidly evolving cybersecurity landscape, a newly discovered botnet comprising over 130,000 compromised devices has set its sights on Microsoft 365 accounts. This stealthy campaign, uncovered by SecurityScorecard’s STRIKE Threat Intelligence team, leverages sophisticated password spraying...

Imagine you’re strolling through a digital fortress, where Microsoft 365 (M365) reigns supreme as the beating heart of corporate communications, data, and collaboration. But then, like a lightning strike on a castle tower, a new wave of malicious attacks suddenly pierces the defenses. This could...

Brace yourselves, Windows enthusiasts—hackers are at it again! This time, the culprit is a high-performance Go library called FastHTTP, which is being used by threat actors to launch high-speed brute-force password attacks on Microsoft 365 accounts. This troubling development exposes how...