Credentials

Cybernews researchers discovered 8.3TB of stolen credentials—usernames, passwords, session tokens—in an unprotected database. Data came from 36 sources including infostealer logs and Telegram channels.

Flare research finds enterprise identity compromise doubled in 2025, with Microsoft Entra ID appearing in 79% of logs. Session cookies enable MFA bypass at scale.