Inside a 24 Billion Credential Leak: Passwords, Exploits, and How Attackers Connected Them, Part 2
Proofpoint, Tuesday, October 6th, 2026
Proofpoint finds a 24 billion credential leak was paired with CVE data to form an attacker 'targeting engine.'
Proofpoint examines the exposed database of 24 billion credentials that Cybernews found in June 2026, whose data cluster also held about 9,500 documents with CVE records tied to active code repositories.
Proofpoint calls that combination a targeting engine pairing stolen credentials with exploitable systems, and it argues for prioritizing patches by observed exploitation rather than CVSS.
Citing about 40,000 new CVEs and a 43-day average patch lag for critical known-exploited flaws, the post promotes Proofpoint Active Exploits Protection, which draws on telemetry from more than 3 million organizations.