Topic: credential hygiene

MFA Bypass Leads to Major Infostealer Attack on 50 Firms

January 9, 2026

80%

MFA Bypass Leads to Major Infostealer Attack on 50 Firms

A major data breach affecting around 50 global companies was enabled by the lack of multi-factor authentication (MFA), allowing an attacker to use stolen credentials for cloud file-sharing platforms. The attacker, using credentials harvested by infostealer malware, accessed accounts where passwor...

Hackers Ditch Encryption, Focus on Data Theft and Extortion

Cybercriminals are increasingly shifting from ransomware to "encryptionless" extortion, stealing and threatening to release data without locking files, which bypasses traditional defenses. The primary attack methods involve exploiting unpatched software vulnerabilities and supply chain weaknesses...

Kraken Ransomware Evolves With Advanced Benchmarking

In August 2025, the Kraken ransomware group emerged as a sophisticated threat, using SMB vulnerabilities for initial access, Cloudflare for persistence, and SSHFS for data exfiltration before deploying cross-platform malware. Kraken's ransomware features an advanced benchmarking process to optimi...