Enzoic

More than 86,000 FortiGate devices across 194 countries were identified as compromised in the FBI's FortiBleed advisory. Leaked credentials and password spraying played a role. hubs.ly/Q04Cc1-Q0 #CredentialSecurity #Cybersecurity

Attackers can move from stolen credentials to authenticated access in as little as one minute. As the window between credential theft and data exfiltration shrinks, early detection becomes critical. hubs.ly/Q04CV6680 #CredentialSecurity #Cybersecurity

42% of organizations reported an increase in malicious insider incidents, according to Mimecast. Enzoic CEO Mike Greene examines how layoffs, workforce changes, and credential exposure can increase security risks. hubs.ly/Q04CV68d0 #InsiderThreats #CredentialSecurity

Among the fastest 25% of intrusions, time to data theft dropped from 285 minutes to 72 minutes, according to Unit 42. Less time to respond means greater urgency to reduce credential risk. hubs.ly/Q04Cc0_40 #CredentialSecurity #Cybersecurity

SafePay is among the most active ransomware groups, according to a joint international advisory. Password guessing remains one of its attack methods, reinforcing the importance of strong password security. hubs.ly/Q04Cb-5Z0 #PasswordSecurity #Ransomware #Cybersecurity

A password as simple as “123456” was reportedly linked to a breach affecting 8.8 million people in Denmark. A reminder of why password screening matters. hubs.ly/Q04CbZwJ0 #PasswordSecurity #Cybersecurity

An exposed vendor access key put the data of 238,000+ Denver Health Medical Plan members at risk. A reminder that credential security extends beyond passwords to third-party access and exposed secrets. hubs.ly/Q04Cnzvr0 #HealthcareSecurity #CredentialSecurity

A new FBI/CISA advisory reports that SafePay ransomware has affected at least 600 organizations. Compromised credentials, brute-force attacks and VPN access are among its entry points, reinforcing the importance of proactive credential security. hubs.ly/Q04Cn4p10

A compromised login allowed attackers to access California student records for months. The incident highlights the risks of credentials that remain usable after compromise. hubs.ly/Q04CbY7m0 #CredentialSecurity #Cybersecurity

The next step in credential security isn't another point-in-time check. It's moving from reactive password hygiene toward continuous visibility, active-credential screening, automated remediation, broader identity coverage, and clear ownership. hubs.ly/Q04sYhtv0

Stolen employee passwords helped attackers access French tax systems. Compromised credentials remain a risk as long as they still work. hubs.ly/Q04zWHKG0 #CredentialSecurity #Cybersecurity

The ASOS breach shows how stolen employee credentials can open the door to third-party platforms. Attackers don't always need to exploit a vulnerability. hubs.ly/Q04zWd2d0 #IdentitySecurity #Cybersecurity

Credential risk doesn't stop with employee accounts. Contractors, third parties, service accounts, SaaS applications, and customer accounts can all provide valuable access. Monitoring coverage should follow the risk attached to an identity. hubs.ly/Q04sTgjg0

For #CybersecurityAwarenessMonth, Enzoic's Amos Struthers shares insights with @vmblog on infostealer logs, access brokers, and the growing market for stolen credentials. Read more: hubs.ly/Q04zYd4j0

Stolen credentials are fueling global attacks. The FBI warns that leaked passwords and password spraying are helping attackers gain network access. hubs.ly/Q04zW6h70 #CredentialSecurity #Cybersecurity

How many risky passwords are hiding in your Active Directory? Run a free password audit to identify compromised, weak, reused and other risky passwords across your environment. hubs.ly/Q04yp2sX0 #ActiveDirectory #PasswordAudit #PasswordSecurity #Cybersecurity

What happens when attackers have a valid password and it still works? Enzoic CTO Ken O’Brien spoke about infostealers, credential exposure and why organizations need visibility into credentials after they’re created. hubs.ly/Q04yp1J60 #CredentialSecurity #IdentitySecurity

A password can be safe when it’s created and compromised tomorrow. That’s why password security shouldn’t stop at the password change. Continuous monitoring helps identify newly compromised passwords and credentials so organizations can respond. #PasswordSecurity

MFA is an essential security layer—but it doesn't eliminate credential exposure. Password fallback, MFA bypass techniques, unenrolled users, and stolen session material can all keep exposed credentials relevant. hubs.ly/Q04sY3qY0

As credential-based attacks grow, strong authentication and ongoing visibility into credential exposure are becoming a bigger part of the cyber risk conversation. hubs.ly/Q04yn1Yf0 #CyberInsurance #IdentitySecurity #CredentialSecurity #CyberRisk