# credential-based attacks

Published articles for credential-based attacks.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)

DevFeed: [Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)](<https://devfeed.tech/articles/threat-brief-mitigating-large-scale-credential-attacks-updated-august-18-7754.md>)

Original publisher: [Read original article](<https://unit42.paloaltonetworks.com/large-scale-credential-attacks/>)

Author: Unit 42

Published: 2026-08-18T19:05:33Z

Content type: article

Language: en

Sources: [Unit 42](<https://devfeed.tech/sources/unit-42.md>)

Topics: [Credential theft](<https://devfeed.tech/topics/credential-theft.md>), [password spraying](<https://devfeed.tech/topics/password-spraying.md>), [MFA](<https://devfeed.tech/topics/mfa.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>), [Incident response](<https://devfeed.tech/topics/incident-response.md>)

Tags: [credential-based-attacks](<https://devfeed.tech/tags/credential-based-attacks.md>), [credential-theft](<https://devfeed.tech/tags/credential-theft.md>), [general](<https://devfeed.tech/tags/general.md>), [high-profile-threats](<https://devfeed.tech/tags/high-profile-threats.md>), [identity](<https://devfeed.tech/tags/identity.md>), [incident](<https://devfeed.tech/tags/incident.md>), [incident-response](<https://devfeed.tech/tags/incident-response.md>), [mfa](<https://devfeed.tech/tags/mfa.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [password-spraying](<https://devfeed.tech/tags/password-spraying.md>), [thehatman](<https://devfeed.tech/tags/thehatman.md>)

### AI overview

This threat brief examines large-scale credential attacks, including password spraying campaigns and claimed credential theft from Microsoft Entra tenants. It provides guidance for identifying suspicious login activity, auditing remote access logs, and hardening internet-exposed edge devices.

### Source excerpt

In August 2026, the actor TheHatman claimed to have stolen large volume of credentials from organizations' Microsoft Entra tenants. We provide guidance on mitigating large-scale credential attacks. The post Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18) appeared first on Unit 42.