A Running List of 2026’s Biggest Data Breaches
Chinese PII, FortiBleed, Klue, and more – SpyCloud tracks 2026’s confirmed data breaches as they happen, and helps you check your own exposure.
Chinese PII, FortiBleed, Klue, and more – SpyCloud tracks 2026’s confirmed data breaches as they happen, and helps you check your own exposure.
The 2026 SpyCloud Identity Threat Report surveyed 750 security leaders on identity-based events, non-human identity risk, and the visibility and remediation gaps that separate resilient programs.
Phishing-as-a-service kits like Tycoon 2FA and Kali365 now steal live sessions and OAuth tokens instead of passwords, letting attackers bypass MFA entirely – here’s a breakdown of 2026’s most active kits and how to stop them.
Session hijacking attacks bypass MFA, passkeys, and passwordless authentication entirely – attackers don’t crack passwords or intercept authentication codes. Whether the session token was pulled off an infected device by malware or intercepted mid-login by a phishing kit, the result is the same.
How the 10 top identity threat protection platforms compare on exposure data, response speed, and automation.
NEW RESEARCH: Over 2/3 of orgs had an identity event last year – NHIs were the top cause. Read on →