#Credential-minesPosts

All cybersecurity articles tagged with #credential-mines from the MINE2 expert team.

13 Posts

Tag: #Credential-mines

THREAT INTELLIGENCEAPR 10, 2026• 11 min read

One Token, Dozens of Victims: How the Anodot SaaS Integration Breach Rewrites the Third-Party Risk Playbook

ShinyHunters breached Anodot — a single SaaS analytics integration provider — and used stolen OAuth authentication...

mine2 team

→

THREAT INTELLIGENCEAPR 9, 2026• 14 min read

13 Million Tickets, One Request: How the Adobe BPO Breach Exposes the Third-Party Credential Blind Spot

A threat actor known as Mr. Raccoon allegedly walked into Adobe's support ticketing system through an Indian BPO...

mine2 team

→

THREAT INTELLIGENCEAPR 8, 2026• 11 min read

18,000 Routers, 120 Countries: How APT28's DNS Hijacking Campaign Renders Your M365 Credentials Worthless

Russia's GRU-backed APT28 (Forest Blizzard) compromised 18,000 SOHO routers across 120 countries to silently intercept...

mine2 team

→

THREAT INTELLIGENCEAPR 7, 2026• 12 min read

100 Million Downloads, One Poisoned Package: How the Axios npm Attack Proves Developer Credentials Are the New Crown Jewels

In a three-hour window on March 31, 2026, North Korean threat actor UNC1069 poisoned the Axios npm package — present in...

mine2 team

→

THREAT INTELLIGENCEAPR 6, 2026• 13 min read

Cisco IMC CVSS 9.8 Authentication Bypass: When Attackers Own Your Hardware and EDR Sees Nothing

CVE-2026-20093 allows unauthenticated attackers to seize full hardware-level control of Cisco UCS servers — bypassing...

mine2 team

→

THREAT INTELLIGENCEAPR 6, 2026• 12 min read

React2Shell CVE-2025-55182: 766 Next.js Hosts Breached in Automated Credential-Theft Wave

A CVSS 10.0 pre-auth RCE vulnerability in React Server Components has enabled an automated campaign to compromise 766...

mine2 team

→

THREAT INTELLIGENCEAPR 2, 2026• 12 min read

The Service Account Blind Spot: How FortiGate Intrusions Expose the Lateral Movement Crisis

SentinelOne's analysis of March 2026 FortiGate intrusions reveals a brutal playbook: attackers decrypt service account...

mine2 team

→

THREAT INTELLIGENCEMAR 31, 2026• 13 min read

FortiClient EMS Under Fire: CVE-2026-21643 Turns Endpoint Management Into an Attacker's Credential Goldmine

A single unauthenticated HTTP request is all it takes — CVE-2026-21643 lets attackers inject SQL into FortiClient EMS...

mine2 team

→

THREAT INTELLIGENCEMAR 30, 2026• 12 min read

Langflow Under Siege: AI Pipeline RCE Exploited in 20 Hours Exposes the Hidden Credential Crisis in ML Infrastructure

CVE-2026-33017 turned every unpatched Langflow instance into an open door — unauthenticated RCE with a single HTTP...

mine2 team

→

THREAT INTELLIGENCEMAR 29, 2026• 14 min read

The Infostealer Epidemic: 642 Million Stolen Credentials Are Already Inside Your Enterprise

SpyCloud's 2026 Identity Exposure Report reveals 642.4 million exposed credentials harvested from 13.2 million...

mine2 team

→

THREAT INTELLIGENCEMAR 27, 2026• 14 min read

When Defenders' Tools Become Attack Vectors: The Management Platform Exploitation Crisis

CVE-2026-22719 in VMware Aria Operations hit CISA's KEV catalog in March 2026 — one entry in a growing catalog of...

mine2 team

→

THREAT INTELLIGENCEMAR 26, 2026• 14 min read

The AI Agent Credential Heist: How TeamPCP Weaponized LiteLLM to Loot Cloud Environments

In 72 hours, TeamPCP compromised Trivy, Checkmarx, and LiteLLM — a package downloaded 3.4 million times daily —...

mine2 team

→

PRIVILEGED ACCESS-SECURITYMAR 25, 2026• 13 min read

When Your PAM Becomes the Attack Vector: How BeyondTrust's Exploitation Exposed Every Privileged Credential

CVE-2026-1731 (CVSS 9.9) let unauthenticated attackers drain entire credential vaults from 75% of Fortune 100...

mine2 team

→

Ready to Secure Your Network?

Transform your cybersecurity posture with MINE2's advanced cyber deception platform. Detect threats before they become breaches.

Get Live Demo Contact Sales