🎯 Credential Stuffing

The items that name it 8

• Passkeys Are Better Than Passwords. But They Are Not Enough.
  articleas techniques2026-10-30

  Named as an attack that passkeys address because there is no reusable password to replay against other services.

• Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
  articleas techniques2026-10-30

  Alpine Linux observed automated login attempts using passwords compromised in other leaks, and reset all passwords

• Unwrapping Retail Peak Season Cyber Threats
  articleas techniques2026-10-28

  Automated scripts using stolen credential databases against mobile app and web login APIs for account takeover

• In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
  articleas techniques2026-10-09

  Domino's customer accounts accessed using email/password pairs leaked in unrelated breaches.

• FortiBleed Attackers Locking Victims Out of Fortinet Devices
  articleas classification.key entities2026-10-08
• Update on Security at METR
  writeupas techniques2026-08-31It is written here as Credential stuffing (T1110.004).

  Attackers used it against METR's authentication providers in May 2026

• Opening the Black Box: Agentless Threat Detection for Virtual Appliances
  writeupas techniques2026-07-22

  Using leaked or reused username-password pairs to authenticate as legitimate users on internet-facing VPN and admin login portals, instead of exploiting a software vulnerability

• Agentless Threat Detection: Illuminating Cloud Blind Spots
  articleas techniques2026-07-21

  Coordinated campaigns using botnets to target exposed FortiGate admin panels