24 Billion Stolen Credentials. The Lesson? The Browser Is Cybercrime's Favorite Endpoint.
Barracuda Networks, Friday, August 21st, 2026
Barracuda argues a 24 billion record credential dump shows infostealers have turned browsers into gateways to business systems.
Barracuda examines the discovery of a database containing 24 billion stolen records and argues the story is about more than passwords.
The company says the trove reveals how infostealer malware, browser sessions and digital identities are reshaping the threat landscape. Because browsers hold saved credentials and live session tokens, compromising one gives attackers access that survives a password reset.
The post frames the browser as cybercrime's favorite endpoint and the practical gateway into business systems. It closes with what defenders should change given that session theft, not password guessing, is now the primary path in.