Monthly Buzz - September - Password Safe

Password Cracking 101: Attacks & Defenses Explained
 

What is Password Cracking?
 

Password cracking (also called password hacking) is an attack vector that involves hackers attempting to crack or determine a password for unauthorized authentication. Password hacking uses a variety of programmatic techniques, manual steps, and automation using specialized tools to compromise a password. These password cracking tools are referred to as ‘password crackers’. Increasingly, these tools are leveraging AI to improve password cracking speed and efficiency. Passwords can also be stolen via other tactics, such as by memory-scraping malware, shoulder surfing, third party breaches, and tools like Redline password stealer.
 

A password can refer to any string of characters or secret used to authenticate an authorized user to a resource. Passwords are typically paired with a username or other mechanism to provide proof of identity. This combination is referred to as credentials.
 

Compromised passwords are involved in most breaches today. According to IBM’s X-Force Threat Intelligence Index 2026, 32% of attacks observed used valid credentials to gain initial access. X-force also observed 300K ChatGPT credentials for sale on the dark web. Beyond initial access, credential-based attacks can be used to execute lateral movement, once a foothold is gained.
 

When a compromised account has privileges, the threat actor can easily circumvent other security controls, perform lateral movement, and compromise other passwords. This is why highly privileged credentials are the most important of all credentials to protect. With that said, almost any identity today will have some privilege escalation paths via various SaaS accounts, blurring the definition of what a privileged identity means today.
 

Continue Reading HERE

Customer Case Study

Karma Automotive Strengthens Support and Saves $600,000 in Labor Costs with BeyondTrust
 

Latest Available Versions:

BeyondInsight and Password Safe 26.2 - July, 2026
Password Safe Mobile app 1.6.0 - August, 2026
Password Safe Cloud Resource Broker 26.2.54.30001 – September 2026
 

Beekeepers Hot Topics:

Change Asset IP Address
Is there any way to change IP address of already onboarded assets to Beyondtrust password safe? everytime we have to delete the older asset and then re-onboard the asset.
 

Unable to Change Workgroup for Manually Added Some of Assets in Password Safe
In BeyondTrust Password Safe, Cloud  why are some manually added assets unable to change the assigned workgroup? The option appears unavailable & disabled.
 

Click here for the most popular articles In our Beekeepers Community 

Upcoming and In Case You Missed It Webinars:

Road Map: Password Safe - September, 2026
User Group: Q3 Password Safe User Group
Podcast: The Adventures of Alice & Bob: Cyber Security and the Art of story Telling

Webinars:
How Attackers Get In Without Hacking Your Password (Part 1)
Securing Critical National Infrastructure
Understanding Entra Privileged Identity Management, What PIM Covers and Where It Stops – October 1, 2026
Identity Visibility & Intelligence: The Missing Layer in Modern Identity Security – October 21, 2026
Battling Identity Security Blind Spots – November 10, 2026