Hackers abuse stolen Entra ID and Azure DevOps credentials to hit 27 organizations
Attackers abused stolen Microsoft Entra ID app credentials and Azure DevOps federated identities to reach 27 MSPs and their customers since November 1, 2026.
Stories per day · 30 days
2 RSS
Relateddata-breach3japan2nikkei2azure1charges1cloud1cybercrime-marketplace1entra-id1fbi1indexing-as-a-service1m3651malicious-plugins1msp1north-macedonia1olvx1pii1ransomware1supply-chain1
9 stories, newest first · one card per story
Stories tagged #stolen-credentials
Lab 1 says median breach now exposes 542 other organizations
Across 2,089 datasets, median leak size rose to 29.8GB, and private keys appeared in about 15% of incidents.
1
Stolen TeamUpdraft keys used to backdoor connected WordPress sites
Patchstack saw attacks from October 18 using UpdraftCentral keys to install at least 99 malicious plugin variants and create admin accounts.
Nikkei says cloud breach leaked about 1.83 million records
Attackers used stolen credentials on October 7; about 150,000 records held identifying data and no card data was included.
1
Nikkei discloses third breach in a month, 1.83 million records exposed
Stolen credentials opened a development system on October 7; 150,000 records held identifiers and no card data was exposed.
1
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
North Macedonia charged the alleged OLVX marketplace operator after an April takedown and FBI-backed investigation.
2
OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks
OpenAI fired three safety researchers who said the company put corporate interests ahead of AI risk.
Co-Creator of Dark Web Marketplace “Empire Market” Sentenced to 40 Years in Prison
Empire Market co-creator Raheim Hamilton was sentenced to 40 years over a $430 million dark-web market.
2
Stolen passwords are exposing America’s water providers to hackers
SpyCloud research found infostealer malware stole credentials from 1,787 US water providers, including 250 with operational-network and remote-access exposure.
1