Vuln exploitation just overtook credential abuse in the 2026 DBIR. So the password is dead?
86,000 cracked Fortinet credentials in FortiBleed say otherwise—no zero-day needed.
A ranking change isn't a risk change. My case for going passwordless:
https://securityboulevard.com/2026/06/credentials-lost-the-top-spot-they-didnt-lose-their-teeth/
Credentials Lost the Top Spot. They Didn’t Lose Their Teeth

The 2026 Verizon Data Breach Investigations Report delivered a finding that many security leaders read as a turning point: for the first time in the

Security Boulevard