Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
CVE-2026-20131