LastPass 2022: The Dev-Environment Breach That Came Back
August’s ‘contained’ developer-account compromise returned in December as stolen vault backups. Inside the two-act breach.
Plex’s 15M Credential Leak: When Your Forum Post Becomes a Combo List
A forums database with bcrypt hashes and salts hit a criminal forum. The real blast radius was everywhere else users reused passwords.
Leaked password reused key opens every door
Your Password After the Breach: Inside the Combo-List Economy
Your leaked row enters an industrial pipeline within hours: deduped into combo lists, tested against banks, inboxes and corporate SSO, cross-joined with infostealer logs, and resold — often before the breached company finishes its investigation. Attackers do not want your data; they want your password against everywhere you reuse it.