
Stolen passwords are exposing America’s water providers to hackers
SpyCloud research found infostealer malware stole credentials from 1,787 US water providers, including 250 with operational-network and remote-access exposure.
9 stories, newest first · one card per story

SpyCloud research found infostealer malware stole credentials from 1,787 US water providers, including 250 with operational-network and remote-access exposure.

Phishers target Revolut customers with smishing and fake video identity checks days after a breach enabled by impersonating Italian law enforcement.

Commentary on AI-accelerated credential theft cites Google's report of a six-hour multi-agent cloud attack and urges device trust and zero-trust identity controls.
Enzoic promotes an eBook on identity-first threat intelligence addressing infostealer-driven credential exposure across AD and IAM.

Hacker News ThreatsDay digest: malicious browser extensions, AI-agent intrusions, NCSC shadow AI warning, M&A wire fraud, and 119,000-domain fake shops.
Huntress explains how attackers steal credentials through phishing, AitM, infostealers, and dumping, then use them for lateral movement, BEC, and ransomware.
Huntress compiles 2026 password statistics showing 94% of 19 billion leaked passwords were reused and 37% of identity threats used stolen credentials.

A threat actor used multiple infostealers to harvest session data and hijack Claude accounts belonging to an unknown number of users.

OpenAI's Computer History feature for macOS ChatGPT logs app and website activity into memories, raising prompt injection and infostealer privacy risks.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views