Account Compromise Surged 389% in 2025, Says eSentire

Infosecurity Magazine

January 16, 2026 at 11:40 AM

Actively Exploited

Overview

A recent report from eSentire reveals a staggering 389% increase in account compromises in 2025, with credential theft responsible for 74% of all cyber threats observed during the year. This surge indicates that attackers are increasingly successful at stealing user credentials, which can lead to unauthorized access to accounts and sensitive information. The findings suggest that individuals and organizations need to prioritize security measures like multi-factor authentication and regular password updates to protect against these attacks. As cybercriminals refine their tactics, users must remain vigilant and proactive in securing their online accounts to mitigate these risks. This trend is particularly concerning as it points to a growing problem that can have serious repercussions for data privacy and security.

Key Takeaways

Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
Affected Systems: User accounts across various online services and platforms.
Action Required: Implement multi-factor authentication, regularly update passwords, and educate users about phishing and credential theft.
Timeline: Newly disclosed

Original Article Summary

An eSentire report showed credential theft accounted for 74% of all observed cyber threats in 2025

Impact

User accounts across various online services and platforms.

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Implement multi-factor authentication, regularly update passwords, and educate users about phishing and credential theft.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

Fake job recruiters hide malware in developer coding challenges

BleepingComputer

North Korean hackers are running a fake recruiter scheme aimed at JavaScript and Python developers, using enticing cryptocurrency-related coding challenges to lure victims. These challenges often contain hidden malware designed to compromise the developers' systems. This tactic exploits the growing interest in cryptocurrency and the remote job market, making it especially appealing to tech professionals looking for work. Developers who engage with these fake opportunities risk not only their personal data but also their work environments, as the malware can lead to further security breaches. Awareness of these scams is crucial for developers to protect themselves from potential attacks.

Feb 13, 2026

Disney settles California privacy violations with $2.75M penalty

SCM feed for Latest

Disney has agreed to a settlement of $2.75 million to address violations of the California Consumer Privacy Act. The issues arose from the company's inadequate measures to allow customers to opt out of data sharing. This settlement underscores the importance of compliance with privacy laws, particularly as consumer data protection becomes a growing concern. Affected consumers include those who interacted with Disney's online services, as their data may have been shared without proper opt-out mechanisms. The case serves as a reminder for companies to prioritize transparency and user control over personal information.

Feb 13, 2026

Qilin attack-related breach confirmed by Conpet

SCM feed for Latest

Conpet, Romania's national oil pipeline operator, has confirmed that its data was compromised due to a Qilin ransomware attack that targeted its IT infrastructure last week. This incident raises concerns about the security of critical infrastructure, as ransomware attacks can disrupt essential services and lead to significant operational challenges. While specific details about the type of data compromised haven't been disclosed, the breach highlights the ongoing risks that organizations in crucial sectors face from sophisticated cybercriminals. The attack underscores the need for robust security measures in protecting vital systems against ransomware threats. Stakeholders in the energy sector should take note and review their security protocols to prevent similar incidents.

Feb 13, 2026

Atlas Air dismisses Everest ransomware attack claims

SCM feed for Latest

Atlas Air, a major U.S. cargo airline, has publicly rejected claims made by the Everest ransomware group that it successfully breached the airline's systems and stole 1.2 terabytes of sensitive technical information, including data related to Boeing aircraft. The airline insists that its operations remain secure and that there has been no compromise of its data. The allegations by Everest raise concerns about the vulnerability of critical infrastructure in the aviation sector, particularly as ransomware attacks have become more frequent and sophisticated. If the claims were true, it could have serious implications for aviation safety and security. However, with Atlas Air's denial, the situation remains unclear, and further investigation may be necessary to determine the validity of the ransomware group's claims.

Feb 13, 2026

Report highlights supply chain attack threat

SCM feed for Latest

A recent report has pointed out the growing threat of supply chain attacks, which are increasingly becoming a common method for cybercriminals. These attacks have led to serious issues like data breaches, credential theft, and ransomware incidents, creating a self-reinforcing cycle that complicates cybersecurity efforts. Organizations that rely on third-party vendors or software are particularly vulnerable, as attackers exploit these connections to infiltrate systems. This situation emphasizes the need for companies to strengthen their supply chain security measures and ensure that their partners are also adhering to strong cybersecurity practices. As these attacks become more prevalent, the risk to sensitive data and operational integrity continues to rise, making it essential for businesses to be proactive in their defense strategies.

Feb 13, 2026

Attribution of sprawling cyberespionage campaign allegedly held back amid China retaliation fears

SCM feed for Latest

A recent cyberespionage campaign linked to the hacking group TGR-STA-1030 has raised concerns among cybersecurity experts. Researchers from Palo Alto Networks' Unit 42 have attributed these attacks to a state-aligned group from Asia, but they have refrained from directly naming China. This cautious approach stems from fears of potential retaliation against the cybersecurity firm or its clients. The implications of this incident are significant, as it reflects the ongoing geopolitical tensions and the risks faced by organizations that publicly attribute cyberattacks. Companies involved in cybersecurity need to be aware of the potential backlash from their research and may need to reconsider how they communicate findings in the future.

Feb 13, 2026