While the world scrolls headlines about ransomware gangs and high-profile leaks, a silent cyber tsunami is unfolding behind the scenes: a 16 billion record data breach — one of the largest in digital history — has surfaced, quietly dwarfing most breaches ever disclosed.
In an alarming discovery, the Cybernews research team found that since early this year, more than 30 separate databases, each containing tens of millions to over 3.5 billion login records, have been left exposed online. These records span everything from social media accounts and VPN credentials to developer logins and even government services.
BREAKING: First it was Israel and Iran trading missiles. Now it’s 16 billion passwords leaked in the largest breach in digital history.
Unlike old password dumps recycled endlessly by hackers, these datasets appear frighteningly fresh. Researchers say the bulk of the stolen credentials likely originate from infostealer malware — malicious programs that quietly pilfer saved usernames, passwords, cookies, and session tokens from infected devices.
“This is not just a leak — it’s a blueprint for mass exploitation,” Cybernews researchers warn. “With over 16 billion login records exposed, cybercriminals now have unprecedented access to personal credentials for account takeovers, identity theft, and sophisticated phishing.”
So how exactly did billions of records slip into the wild unnoticed? The answer lies in unsecured cloud storage and sloppy data management. The Cybernews team says most of the exposed troves were accessible for only short windows — often through misconfigured Elasticsearch servers or unsecured object storage buckets — but long enough for criminals and security professionals alike to scoop them up.
What’s really inside these billions of records?
According to early analyses, each record typically follows a clear pattern: a URL, a username, and a password — precisely how modern infostealers collect data before shipping it to criminal command centers. The records cover an astonishing range of services: Apple, Facebook, Google, GitHub, Telegram, and countless more.
Some datasets even hint at their origins in their filenames: for example, a massive database with over 455 million records was tagged with references to the Russian Federation, while another flagged the popular encrypted messaging app Telegram.
Unfortunately, the sheer volume and overlap of stolen credentials make it impossible to estimate exactly how many unique accounts or victims are affected. But one thing is clear: for hackers, these collections are treasure troves. With credential stuffing tools, even a success rate below 1% can yield millions of cracked accounts — opening doors to more sensitive data, bank accounts, and personal conversations.
so this “massive breach” seems like bullshit. seems like someone dumps of creds harvested with malware, and total records (not necessarily unique) is 18b. Also everyone involved in writing the article, and the “researchers” seem retarded pic.twitter.com/aiWuIMVrKz
These stolen credentials are cybercrime fuel: they can launch everything from targeted phishing campaigns and ransomware attacks to large-scale business email compromise (BEC) scams. For organizations lacking multi-factor authentication (MFA) and good password hygiene, the risk is multiplied.
“The inclusion of both old and recent infostealer logs — often with tokens, cookies, and metadata — makes this data particularly dangerous for companies and individuals who reuse passwords or don’t use MFA,” the researchers add.
As for the source? It remains murky. Some data may be collected by security analysts monitoring breaches, but experts say it’s highly likely that parts of these datasets were aggregated by cybercriminals themselves to sell or trade on underground forums.
How to protect yourself now
With billions of stolen logins circulating, protecting yourself comes down to digital hygiene: ✅ Use a password manager to generate unique, strong passwords for every account. ✅ Enable multi-factor authentication wherever possible. ✅ Regularly update passwords, especially for critical accounts like email and banking. ✅ Scan your devices for malware, particularly infostealers. ✅ Stay alert for phishing emails or suspicious login attempts.
While cybersecurity researchers race to shut down unsecured servers and monitor these leaks, this mega-breach is a sobering reminder: even if you’ve never been “hacked,” your credentials may already be floating somewhere in a criminal’s massive stolen database.
ServiceNow’s acquisition of Armis marks the company’s biggest deal to date as cybersecurity consolidation accelerates.
ServiceNow has agreed to acquire cybersecurity startup Armis for $7.75 billion, marking the largest acquisition in ServiceNow’s history as it accelerates its expansion into security and artificial intelligence.
The Santa Clara, California–based company will pay all cash for the San Francisco–based firm, according to a statement released Tuesday, confirming an earlier report by Bloomberg News. The transaction is expected to close in the second half of 2026, subject to regulatory approvals and customary closing conditions.
Market reaction and deal financing
ServiceNow shares slipped about 1.3% in early premarket trading in New York following the announcement. The stock had closed up roughly 0.9% on Monday, valuing the company at approximately $163 billion.
ServiceNow said it plans to fund the acquisition through a combination of cash on hand and debt, underscoring its confidence in Armis’ long-term growth and strategic value.
What Armis brings to ServiceNow
Founded by veterans of Israeli military cyber intelligence, Armis specializes in identifying, monitoring and securing connected devices across complex digital environments. Its platform is widely used in sectors including healthcare, financial services, manufacturing, and defense, where visibility into unmanaged or vulnerable devices is critical.
Earlier this month, Armis CEO Yevgeny Dibrov said the company had reached $300 million in annual recurring revenue, up from $200 million a year earlier. Despite the rapid growth, Armis had been planning a public listing in 2026, a goal now superseded by the ServiceNow deal.
ServiceNow’s broader AI and security push
ServiceNow has been steadily transforming itself into a dominant enterprise workflow and automation platform. In March, the company agreed to acquire AI startup Moveworks for $2.85 billion, a move aimed at building autonomous AI tools capable of completing workplace tasks without human intervention.
“ServiceNow is building the security platform of tomorrow,” said Amit Zavery, the company’s president, chief operating officer, and chief product officer.
“Together with Armis, we will deliver an industry-defining cybersecurity shield that provides real-time, end-to-end proactive protection across all technology estates,” Zavery said.
Cybersecurity dealmaking accelerates
The Armis acquisition comes amid a surge in large cybersecurity transactions, driven by growing enterprise demand and the rising use of AI to detect and counter hacking threats.
In recent months:
Alphabet agreed to buy cloud security firm Wiz for $32 billion
Palo Alto Networks struck a deal to acquire CyberArk for about $25 billion
Armis itself was acquired in 2020 by Insight Partners in a deal valued at $1.1 billion, alongside investors including CapitalG. Private equity firm Thoma Bravo had also explored a potential investment, with Armis executives previously saying they were evaluating multiple offers.
What’s next
Once completed, the acquisition is expected to significantly strengthen ServiceNow’s security portfolio, positioning the company as a key player in AI-powered enterprise cybersecurity at a time when digital infrastructure risks are multiplying.
Disney’s partnership with OpenAI signals how major studios may integrate AI into content, merchandising, and fan engagement
When Disney announced a three-year alliance with OpenAI, including a reported $1 billion investment and licensing its iconic characters for use in AI-generated images and short videos, the deal left many observers puzzled. After all, recent content partnerships between OpenAI and platforms like Reddit have raised uncomfortable questions about whether the money is worth the long-term competitive and brand risks.
But Disney’s deal makes far more sense when viewed through a lens the company understands better than almost anyone: merchandising.
For decades, Disney has mastered the art of turning intellectual property into obsession, engagement, and spending. Toys, backpacks, lunchboxes, theme parks, movies, cruise lines — all are part of a tightly controlled ecosystem designed to keep fans immersed. With OpenAI, Disney isn’t abandoning that playbook. It’s updating it.
Instead of plastic figurines, the new merchandise is synthetic content — AI-generated images and videos created by fans themselves using ChatGPT and Sora, OpenAI’s text-to-video generator. Anyone can now generate Disney-adjacent creative output, but under rules that Disney helps define.
AI as the Next Merchandising Channel
At first glance, allowing fans to generate content featuring Disney characters may appear risky, especially for a company long known as a highly curated, “predator-free” brand sanctuary in an internet dominated by chaotic user-generated content — or what critics increasingly call “AI slop.”
Yet this is precisely why Disney’s approach stands out.
Rather than fighting AI outright, Disney is licensing its characters under controlled conditions, positioning itself inside the technology rather than outside it. In doing so, it gains something arguably more valuable than licensing fees: influence over how its IP is used.
OpenAI has publicly committed to “responsible use” of Disney’s content, reducing the risk of beloved characters being placed in offensive, bizarre, or legally risky scenarios — or interacting with rival corporate IPs in ways Disney cannot control.
At the same time, Disney has made it clear it will aggressively defend its characters elsewhere. The company recently sent a letter to Google demanding it stop using Disney characters in AI-generated content without permission. The message is clear: AI use is allowed — but only on Disney’s terms.
Strategic Upside Beyond Licensing
Beyond brand protection, the OpenAI alliance offers Disney several strategic advantages.
First, by taking an equity stake, Disney is effectively hitching its future to the first major AI mover in consumer-facing generative technology. If OpenAI becomes as foundational as search or social media, Disney isn’t just a customer — it’s a stakeholder.
Second, Disney gains access to OpenAI’s tools, opening new creative and operational possibilities across film, television, marketing, and theme park experiences. In an industry under constant pressure to produce more content faster, AI-assisted workflows could become a competitive necessity.
There is also a discovery angle. If fans create something genuinely magical using Disney IP, the company can surface that work on its streaming platforms or internal creative pipelines. Just as YouTube became a feeder system for Hollywood talent, AI could quietly become a testing ground for future Pixar, Marvel, or animation concepts.
Engagement Over Everything
Critics will argue that Disney is aligning itself with what many still see as the entertainment industry’s newest villain. And history suggests that user-generated ecosystems inevitably produce strange, uncomfortable, or downright bizarre content.
But Disney’s calculus is simple: engagement beats purity.
Even if some brand dilution occurs, the upside of keeping millions of users actively interacting with Disney characters — thinking about them, remixing them, and emotionally investing in them — far outweighs the risks. Every AI-generated image or short video becomes another touchpoint in the Disney funnel, nudging users toward movies, merchandise, theme parks, and subscriptions.
As the company has proven time and again, Disney doesn’t need to control every moment — it just needs to own the ecosystem those moments live in.
A Template for Future AI Deals
Ultimately, Disney’s OpenAI alliance may become the template for how major IP holders navigate the AI era. Rather than blocking generative tools outright or selling content libraries cheaply, Disney is treating AI as the next distribution and merchandising layer.
The pipeline that once ran from movies to toys to theme parks now runs through algorithms, prompts, and synthetic media. AI is no longer outside the business. It is part of the machine.
And if Disney’s history is any guide, once the House of Mouse embraces a platform, it rarely lets go.
After Losing Over $70 Billion, Mark Zuckerberg Finally Admits His Biggest Bet Is “Not Working” – Meta Plans Massive Cuts to Metaverse Budget
Meta’s multibillion-dollar Metaverse dream faces a harsh reset as Zuckerberg prepares to slash Reality Labs spending by 30% and shift focus toward AI superintelligence
After years of mounting losses, Meta prepares to slash Metaverse spending as Zuckerberg pivots the company toward AI superintelligence.
It has taken more than $70 billion in losses, multiple years of market skepticism, slow hardware adoption, and declining enthusiasm from consumers — but Mark Zuckerberg finally seems to be acknowledging what analysts have been predicting for months: Meta’s Metaverse gamble is not working as expected.
A new report from Bloomberg reveals that Meta is preparing to cut Reality Labs’ budget by nearly 30%, marking the most significant shift in strategy since the company rebranded from Facebook to Meta in 2021. These cuts are part of Meta’s 2026 annual budget plans, discussed at a series of executive meetings held last month at Zuckerberg’s Hawaii compound.
The move represents a dramatic retreat from the vision that defined Zuckerberg’s ambitions for the future — a world of interconnected virtual experiences accessed through VR headsets, smart glasses, and immersive environments.
Reality Labs: A Costly Dream That Failed to Take Off
Reality Labs, the division responsible for Meta’s Metaverse ambitions, includes:
VR hardware such as the Quest headsets
Ray-Ban smart glasses developed with EssilorLuxottica
Horizon Worlds, Meta’s VR social platform
Upcoming AR glasses
Despite years of R&D and aggressive marketing, the Metaverse never reached mainstream adoption. Sales remained modest, interest faded, and Horizon Worlds failed to retain users beyond niche gaming communities.
Industry analysts say the lack of traction is undeniable. The Metaverse that Zuckerberg promised — a bustling, interconnected digital universe — simply hasn’t materialized.
The financial impact has been staggering: $70+ billion in operating losses across four years, making it one of the most expensive product bets in tech history.
Not surprisingly, Meta’s stock jumped 4% after news of the possible budget cuts, signaling investor relief. As analyst Craig Huber put it: “Smart move, just late… This is a major shift to align costs with a revenue outlook that never matched management’s expectations.”
With cuts as deep as 30%, layoffs are expected as soon as January, especially within the VR division.
A Company Pivoting Hard Toward AI Superintelligence
Meta’s Metaverse retreat isn’t happening in isolation — it comes at a time when the company is fighting to stay competitive in the global AI arms race.
After its Llama 4 model received a lukewarm response, Meta has ramped up spending and reorganized its AI divisions under the new Superintelligence Labs.
Key highlights of Meta’s AI pivot:
Up to $72 billion committed in capital spending for AI initiatives this year
Aggressive hiring across Silicon Valley, with multimillion-dollar offers made directly by Zuckerberg
Plans to invest $600 billion in U.S. infrastructure and jobs over the next three years, largely for AI data centers
A renewed push to build the compute infrastructure needed for future superintelligent systems
Zuckerberg openly stated during an earnings call that Meta is “front-loading capacity” to prepare for an AI-driven future.
Even Reality Labs is being reimagined through the AI lens — especially after Zuckerberg hired Alan Dye, a longtime Apple design executive, to lead a new creative studio within the division.
In a post on Threads, Zuckerberg said: “We’re entering a new era where AI glasses and other devices will change how we connect with technology and each other.”
This statement alone signals how deeply AI will shape Meta’s hardware roadmap beyond the Metaverse.
The Irony: Meta Was Renamed for a Vision That Is Now Shrinking
When Facebook became Meta in October 2021, the reasoning was clear: the company wanted to symbolize its commitment to building the Metaverse.
Three years later, that same division is facing massive cuts.
The rebranding — once touted as the gateway to the “next chapter of the internet” — now represents one of the most expensive strategic misfires in tech history.
What Comes Next for Meta?
If the proposed budget cuts go through:
VR development may significantly slow down
Horizon Worlds could receive limited investment
AR glasses may remain in early stages
Meta will prioritize AI innovation over virtual reality
This shift doesn’t necessarily mean Meta is abandoning the Metaverse entirely — but it is no longer the company’s primary bet.
Zuckerberg’s new focus is clear: AI superintelligence, compute hardware, and next-generation devices powered by AI.
And while the Metaverse may have faded from the spotlight, Meta’s aggressive push into AI signals a new chapter — one where Zuckerberg hopes the investment will pay off sooner rather than later.
To provide the best experiences, Daily Global Diary uses technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.