Brief

A new dataset containing 124 million unique passwords and 56 million email addresses has been added to the Have I Been Pwned (HIBP) database. This compilation originates from hundreds of millions of records gathered by infostealer malware, rather than a single new breach. Such datasets are concerning as they can be used for credential stuffing attacks, where cybercriminals attempt to use stolen credentials across multiple platforms. HIBP advises users to check their credentials, change any compromised passwords immediately, and enable two-factor authentication and password managers where possible. AI