Friday , May 9 2025

AI can crack half of common passwords in less than a minute

A new study by a cybersecurity firm has revealed that most commonly used passwords are vulnerable to artificial intelligence (AI) tools and can be cracked almost instantly.

AI chatbots like ChatGPT have made it easier to perform tasks just by sending prompts. However, it seems these large tools are also very good at creating fresh cybersecurity concerns.

Microsoft Patches Four Critical Azure and Power Apps Vulns

Microsoft has fixed critical vulnerabilities in its core cloud services, including Azure Automation, Azure Storage, Azure DevOps, and Microsoft Power...
Read More
Microsoft Patches Four Critical Azure and Power Apps Vulns

Qilin Ransomware topped April 2025 with 45+ data leak disclosures

The cyber threat landscape is rapidly changing, with a notable increase in ransomware activity in April 2025, driven by the...
Read More
Qilin Ransomware topped April 2025 with 45+ data leak disclosures

SonicWall Patches 3 Flaws in SMA 100 Devices

SonicWall has released patches for three security flaws in SMA 100 Secure Mobile Access appliances that could allow remote code...
Read More
SonicWall Patches 3 Flaws in SMA 100 Devices

Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed

From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors,...
Read More
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed

Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA

Cisco has issued a security advisory for a critical vulnerability in its IOS XE Software for Wireless LAN Controllers (WLCs)....
Read More
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA

CVE-2025-29824
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day

Attackers linked to the Play ransomware operation deployed a zero-day privilege escalation exploit during an attempted attack against an organization...
Read More
CVE-2025-29824  Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day

Hacker exploited Samsung MagicINFO 9 Server RCE flaw

Hackers are exploiting an unauthenticated remote code execution vulnerability in the Samsung MagicINFO 9 Server to take control of devices...
Read More
Hacker exploited Samsung MagicINFO 9 Server RCE flaw

CISA adds Langflow flaw to its KEV catalog

CISA added the Langflow vulnerability, CVE-2025-3248 (CVSS score 9.8), to its Known Exploited Vulnerabilities catalog. Langflow is a popular tool...
Read More
CISA adds Langflow flaw to its KEV catalog

Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers

Google has released its monthly Android security updates, addressing 46 vulnerabilities, including one that has been actively exploited. CVE-2025-27363 (CVSS...
Read More
Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers

UAP hosted “UAP Cyber Siege 2025”, A national level cybersecurity competition

The Cyber Security Club, representing the Department of Computer Science and Engineering at the University of Asia Pacific (UAP), has...
Read More
UAP hosted “UAP Cyber Siege 2025”, A national level cybersecurity competition

According to a report by Home Security Heroes, a cybersecurity company, AI can easily crack most commonly used passwords and thus pose a huge threat to people who do not bother with more intricate combinations.

For an experiment, the firm used an AI-powered password cracker, dubbed PassGAN – a shortened version of the words “Password” and “Generative Adversarial Networks” (GAN).

In all, more than 15 million commonly used passwords were checked, and the results are disturbing – though not entirely surprising.

The study has revealed that a shocking 51% of common passwords can be cracked in under a minute. This means over half of common passwords are completely insecure. Besides, 61% of passwords can be cracked in under an hour, 71% in a day, and 81% in a month.

password-list
Your passwords are not safe if they’re not complicated enough. Courtesy of Home Security Heroes.

Passwords with up to seven characters can be cracked in under six minutes, even if they incorporate symbols. A password with six characters – including those that use combinations of numbers, upper and lowercase letters, and symbols – can be cracked instantly.

So what’s safe? As per the study, passwords with more than 18 characters are ideal against AI tools – even if only numbers are used. But if you use a password this long and include numbers, lower and uppercase letters, and symbols, it would take the AI tool six quintillion (six billion billion) years to crack it.

PassGAN is a deep-learning tool for password guessing, developed by Stevens Institute of Technology in New Jersey, and the New York Institute of Technology, in 2017.

Researchers first trained a GAN to rapidly learn all the most common human password strategies – dictionary words, numerical sequences, and the like – from databases of tens of millions of known, leaked, common and complex passwords, and simple variations of them. Cybernews also has a database of suchlike available.

Researchers then took the project a notch higher, freeing up the network to create its own rules and patterns, if it so chose, from that training data.

That’s precisely what the AI did, autonomously learning the distribution of real passwords from actual leaks – thus eliminating the need for manual password analysis.

Despite security experts recommending strong and unique passwords, along with two-factor authentication and password managers, people continue using weak codes that even a novice cybercriminal could hack in a couple of moments. Never mind a dedicated AI program.

Check Also

Protect AI

Palo Alto Networks to Acquire AI Security Firm “Protect AI”

On Monday, Palo Alto Networks confirmed it is acquiring the US-based AI security company Protect …

Leave a Reply

Your email address will not be published. Required fields are marked *