Cybernews researchers found an exposed database with 24 billion credential records, raising fresh risks from password reuse and credential stuffing.