Researchers Track 2.9 Billion Compromised Credentials

KELA's "State of Cybercrime 2026" reports a sharp escalation in 2025 cyber threats: nearly 2.9 billion compromised credentials (including ~347M from infostealers), macOS infostealer infections jumping to over 70,000, a 45% rise in ransomware victims to 7,549 attributed to 147 groups, 238 vulnerabilities added to CISA's KEV, a 400% increase in DDoS activity, emergence of supply-chain compromises (OAuth and open-source worms), and accelerating use of AI to create autonomous, agentic malicious workflows.