Glossary
Credential Stuffing
An automated attack that tries username and password pairs leaked from one breach against other websites, exploiting the fact that many people reuse passwords across services. It is highly effective at scale and is a primary reason security guidance discourages password reuse and recommends MFA.