#passwords,


French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks

Sep 29, 2026 // 20:50

An attacker used stolen passwords of staff at France’s tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June […]

Over 16,000 Supabase databases expose PII, passwords, auth tokens

Sep 29, 2026 // 13:17

Researchers found more than 16,000 misconfigured Supabase databases exposing readable tables with personally identifiable information, passwords, or authentication tokens. Based on the analysis of table […]

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

Sep 24, 2026 // 23:39

Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to […]

Rogue external MFA providers can steal passwords during logins

Sep 23, 2026 // 00:56

Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users’ passwords during legitimate login attempts. […]

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

Sep 21, 2026 // 17:22

Cybersecurity researchers have disclosed details of a new campaign dubbed TASK#STOMP that delivers a PowerShell backdoor designed to harvest sensitive data from compromised hosts. The […]

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords

Sep 17, 2026 // 18:51

The Iran-linked “hacktivist” persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a Delphi-based utility known as CRUDEEXCLUDE. […]

Snowflake ends service-account passwords. Now comes the hard part

Aug 27, 2026 // 00:57

Written by: Ido Shlomo, Co-founder and CTO, Token Security Connor Moucka did not exploit a vulnerability in Snowflake. He and his co-conspirators used valid customer […]

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

Aug 25, 2026 // 01:33

Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that’s used to deliver next-stage payloads and likely sell access to ransomware groups. […]

Laser Attack Resets Tangem Wallet Passwords on Cards That Can’t Be Patched

Jul 10, 2026 // 17:55

Researchers at Ledger’s Donjon security team have shown that a precisely timed laser pulse, aimed at the chip inside a Tangem crypto wallet card, can reset the […]

PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

Jul 3, 2026 // 11:27

Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a series of clever tricks to infect systems and siphon sensitive data. […]

1 2 Next