At least one password cracked in nearly half of environments

At least one password hash was successfully cracked in 46% of environments, according to a study released by Picus Security.

The study also found that data exfiltration attempts were only stopped 3% of the time, down from 9% in 2024.

These trends combined show how quickly a single compromised credential can open the door to lateral movement and large-scale data theft. With infostealer malware tripling in prevalence and attackers increasingly bypassing defenses using valid logins, the Picus researchers said organizations face escalating risk from persistent and nearly invisible threats.

Read more at SC World