#Credentials
All CosmicBytez Labs articles tagged #Credentials, across news, security advisories, how-to guides, and projects.
- News
DreamHost Confirms Data Breach Exposed FTP Logins and Webmail Sessions
Attackers had about two months of access to DreamHost's File Manager server and stole FTP/SFTP credentials and some webmail session data.
- News
26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
A researcher scanned 7.25 million public Gitee repos and found 26,400 live credentials, led by Alibaba Cloud keys and AI service tokens.
- Security
CVE-2026-66902: Google::Auth Perl Library RCE via Credential JSON Injection
Google::Auth for Perl versions before 0.06 passes attacker-controlled commands from external_account credentials JSON directly to system(), enabling...
- News
Amadey and StealC Malware Networks Disrupted, 27 Million Stolen Credentials Recovered
A coordinated law enforcement operation backed by Bitdefender, Bitsight, ESET, and Microsoft has dismantled the infrastructure powering Amadey and StealC,...
- News
CISA Warns Fortinet Users to Secure Devices After FortiBleed Credential Leak
Nearly 74,000 Fortinet firewall and VPN credentials were exposed in the FortiBleed data leak, prompting CISA to urge immediate device hardening and...
- News
FortiBleed Leak Exposes Fortinet VPN Credentials for 73,000 Devices
A data leak dubbed FortiBleed has exposed configuration files and VPN credentials for 73,932 Fortinet firewall URLs, putting organizations worldwide at...
- News
DORA and Operational Resilience: Credential Management as a
Article 9 of DORA makes authentication and access control a legal obligation for EU financial entities. With stolen credentials now the single largest...
- News
The Hidden Cost of Recurring Credential Incidents
IBM's 2025 Cost of a Data Breach Report puts the average breach at $4.4 million — but that headline figure understates the true damage when credential...