# password spraying

Published articles for password spraying.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Password spraying campaign targets AWS root user accounts across 150+ organizations

DevFeed: [Password spraying campaign targets AWS root user accounts across 150+ organizations](<https://devfeed.tech/articles/password-spraying-campaign-targets-aws-root-user-accounts-across-150-organizations-8272.md>)

Original publisher: [Read original article](<https://securitylabs.datadoghq.com/articles/aws-root-user-bruteforce-campaign/>)

Author: Martin McCloskey

Published: 2026-08-31T00:00:00Z

Content type: article

Language: en

Sources: [Datadog Security Labs](<https://devfeed.tech/sources/datadog-security-labs.md>)

Topics: [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [Security](<https://devfeed.tech/topics/security.md>), [Threat Research](<https://devfeed.tech/topics/threat-research.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [IAM](<https://devfeed.tech/topics/iam.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [passwords](<https://devfeed.tech/topics/passwords.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-iam](<https://devfeed.tech/tags/aws-iam.md>), [iam](<https://devfeed.tech/tags/iam.md>), [identity](<https://devfeed.tech/tags/identity.md>), [password-spraying](<https://devfeed.tech/tags/password-spraying.md>), [research](<https://devfeed.tech/tags/research.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

Datadog Security Research describes a password spraying campaign that repeatedly targeted AWS root user accounts at more than 150 organizations between July 24 and August 23, 2026. The campaign used Chrome and Firefox user-agent fingerprints and proxy infrastructure; no successful authentications were observed, and the attackers' motive remains undetermined. The article explains the privileges and safeguards associated with AWS root users and recommends reducing reliance on persistent root credentials.

### Source excerpt

Datadog Security Research observed a password spraying campaign attempting to authenticate as the AWS root user across more than 150 organizations.

## Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)

DevFeed: [Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)](<https://devfeed.tech/articles/threat-brief-mitigating-large-scale-credential-attacks-updated-august-18-7754.md>)

Original publisher: [Read original article](<https://unit42.paloaltonetworks.com/large-scale-credential-attacks/>)

Author: Unit 42

Published: 2026-08-18T19:05:33Z

Content type: article

Language: en

Sources: [Unit 42](<https://devfeed.tech/sources/unit-42.md>)

Topics: [Credential theft](<https://devfeed.tech/topics/credential-theft.md>), [password spraying](<https://devfeed.tech/topics/password-spraying.md>), [MFA](<https://devfeed.tech/topics/mfa.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>), [Incident response](<https://devfeed.tech/topics/incident-response.md>)

Tags: [credential-based-attacks](<https://devfeed.tech/tags/credential-based-attacks.md>), [credential-theft](<https://devfeed.tech/tags/credential-theft.md>), [general](<https://devfeed.tech/tags/general.md>), [high-profile-threats](<https://devfeed.tech/tags/high-profile-threats.md>), [identity](<https://devfeed.tech/tags/identity.md>), [incident](<https://devfeed.tech/tags/incident.md>), [incident-response](<https://devfeed.tech/tags/incident-response.md>), [mfa](<https://devfeed.tech/tags/mfa.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [password-spraying](<https://devfeed.tech/tags/password-spraying.md>), [thehatman](<https://devfeed.tech/tags/thehatman.md>)

### AI overview

This threat brief examines large-scale credential attacks, including password spraying campaigns and claimed credential theft from Microsoft Entra tenants. It provides guidance for identifying suspicious login activity, auditing remote access logs, and hardening internet-exposed edge devices.

### Source excerpt

In August 2026, the actor TheHatman claimed to have stolen large volume of credentials from organizations' Microsoft Entra tenants. We provide guidance on mitigating large-scale credential attacks. The post Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18) appeared first on Unit 42.

## Phishing, privileges and passwords: Why identity is critical to improving cybersecurity posture

DevFeed: [Phishing, privileges and passwords: Why identity is critical to improving cybersecurity posture](<https://devfeed.tech/articles/phishing-privileges-and-passwords-why-identity-is-critical-to-improving-cybersecurity-posture-8337.md>)

Original publisher: [Read original article](<https://www.welivesecurity.com/en/business-security/phishing-privileges-passwords-identity-cybersecurity-posture/>)

Author: Phil Muncaster

Published: 2025-12-04T10:00:00Z

Content type: article

Language: en

Sources: [WeLiveSecurity](<https://devfeed.tech/sources/welivesecurity.md>)

Topics: [passwords](<https://devfeed.tech/topics/passwords.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Vishing](<https://devfeed.tech/topics/vishing.md>), [ransomware](<https://devfeed.tech/topics/ransomware.md>), [Social engineering](<https://devfeed.tech/topics/social-engineering.md>), [Critical Infrastructure](<https://devfeed.tech/topics/critical-infrastructure.md>)

Tags: [attacks](<https://devfeed.tech/tags/attacks.md>), [breach](<https://devfeed.tech/tags/breach.md>), [business-security](<https://devfeed.tech/tags/business-security.md>), [critical-infrastructure](<https://devfeed.tech/tags/critical-infrastructure.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [identity](<https://devfeed.tech/tags/identity.md>), [password-spraying](<https://devfeed.tech/tags/password-spraying.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [phishing](<https://devfeed.tech/tags/phishing.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

The article explains why identity has become the new network perimeter and why protecting credentials is central to cybersecurity. It examines ransomware incidents involving M&S and Co-op Group, credential theft through vishing, phishing, infostealer malware, password database breaches, brute-force attacks, credential stuffing, and password spraying.

### Source excerpt

Identity is effectively the new network boundary. It must be protected at all costs.