Picus Security Finds 46% of Enterprise Passwords Vulnerable to Cracking — 2X Increase From 2024
August 11, 2025
More Than 160 Million Attack Simulations in Live Production Environments Reveal Valid Credentials Are Easy to Steal and Nearly Impossible to Stop Picus Blue Report Exec Summary The Picus Security Blue Report offers deep insight into prevention capabilities and weaknesses in enterprise security. Notably, in 46% of environments, at least one password hash was successfully cracked, and data exfiltration attempts were only stopped 3% of the time. Attacks using valid credentials were successful 98% of the time. Issues with Detection The Picus Blue Report found that discovery techniques like system network configuration discovery and process discovery scored below 12% in