Exposed Passwords on Endpoints Are More Common Than You Think

Huntress reports that an assessment of over 2 million managed endpoints found plaintext password files on about 1.6% of systems—more than 32,000 endpoints—creating significant risk of credential theft and account takeover. The post urges use of password managers, MFA, security awareness training, and environment monitoring, and announces a new Managed EDR “Credential Reports” feature that alerts partners to files likely containing exposed passwords, with default opt-in beginning 11/8.