Computer Security News and Insights
In April 2024, a credentials dump containing over 26 billion records — dubbed the "Mother of All Breaches" — surfaced on dark web forums. LinkedIn, Twitter, Dropbox, Adobe, and hundreds of other platforms were represented. Within weeks, threat actors were using those credentials in automated stuffing attacks against small and
Your Employees' Passwords Are Probably Already There In 2023, the FBI's Internet Crime Complaint Center received over 880,000 complaints with potential losses exceeding $12.5 billion — and a significant share of that activity traces back to credentials and data traded on dark web marketplaces. If you&
In January 2024, a massive dataset known as the "Mother of All Breaches" surfaced containing 26 billion records — credentials scraped, aggregated, and repackaged from hundreds of previous data breaches. Usernames. Passwords. Email addresses. All of it sitting on dark web forums, available to anyone willing to pay. If
A Single Password Got Them Into the Colonial Pipeline In May 2021, a single compromised password on an inactive VPN account gave the DarkSide ransomware group access to Colonial Pipeline's network. There was no multi-factor authentication on that account. The attackers didn't need a sophisticated zero-day
A Single Stolen Password Cost One Company $60 Million In 2023, MGM Resorts lost an estimated $100 million after a threat actor used social engineering to take over an employee's account through a help desk call. The attackers didn't hack a firewall. They didn't
A Single Stolen W-2 Cost This Company $1.6 Million In 2023, a mid-size manufacturing firm in Ohio lost control of every employee's W-2 data after one payroll clerk fell for a CEO impersonation email. The threat actor filed fraudulent tax returns before anyone noticed. The cleanup — credit
In 2019, Microsoft published a study that changed how I talk to every client about security: enabling multi-factor authentication blocks 99.9% of automated account compromise attacks. That single stat should end every debate about whether two-factor authentication benefits are worth the minor inconvenience. Yet here we are in 2026,
When the Colonial Pipeline attack shut down fuel distribution across the U.S. East Coast in 2021, news anchors fumbled through terms like "ransomware," "threat actor," and "zero trust" as if reading a foreign language. Millions of viewers had no idea what any of
During a breach investigation last year, I watched a CFO stare blankly at an incident responder who kept saying "the threat actor used credential stuffing to pivot laterally after compromising an MFA-gapped endpoint." The CFO's response: "Can someone please speak English?" That moment cost
In 2023, the FBI's Internet Crime Complaint Center (IC3) received over 880,000 complaints with potential losses exceeding $12.5 billion — a 22% increase from the year before. A massive share of those incidents started with a single piece of malicious software landing on someone's machine.
