MEDIUMVulnerability
Global

Number Usage in Passwords: Take Two, (Thu, Apr 9th)

Thursday, April 9, 2026 at 12:58 AM UTC·Source: SANS ISC

Updated: Thursday, April 9, 2026 at 01:01 AM UTC

Executive Summary

In a previous diary [1], we looked to see how numbers were used within passwords submitted to honeypots. One of the items of interest was how dates, and more specifically years, were represented within the data and how that changed over time. It is often seen that years and seasons are used in passwords, especially when password change requirements include frequenty password changes. Som

Analysis

In a previous diary [1], we looked to see how numbers were used within passwords submitted to honeypots. One of the items of interest was how dates, and more specifically years, were represented within the data and how that changed over time. It is often seen that years and seasons are used in passwords, especially when password change requirements include frequenty password changes. Some examples we might see today:
Source Attribution

Originally published by SANS ISC on Apr 9, 2026.

Related Threats

CRITICALVulnerabilityNEW

OT Cybersec Sector Frets Anthropic Will Leave It Behind

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ot-cybersec-sector-frets-anthropic-will-leave-behind-image_small-3-a-31374.jpg" align=right hspace=4><b>Pure Play OT Security Firms Want A Seat At The Table</b><br>There's growing concern in the operational technology cybersecurity community that manufacturers and operators, and their security vendors, will be left out in the cold

Bank Info Security
MEDIUMVulnerability

Shaky Ceasefire Unlikely to Stop Cyberattacks From Iran-Linked Hackers for Long

Hackers vowed to revive its efforts against America when the time was right — demonstrating how digital warfare has become ingrained in military conflict. The post Shaky Ceasefire Unlikely to Stop Cyberattacks From Iran-Linked Hackers for Long appeared first on SecurityWeek .

SecurityWeek
CRITICALVulnerability

OCR Releases Risk Management Video

From HHS OCR: This video presentation is intended to raise awareness and provide practical education to HIPAA covered entities and business associates of the HIPAA Security Rule’s Risk Management requirement. Like risk analysis, effective risk management is an essential component of both HIPAA Security Rule compliance and broader cybersecurity preparedness. Risk management is a critical step not o

DataBreaches.net