Data Breach at CenterPoint Energy Exposes Over 1 Million Texans' Personal Information
PremiumCenterPoint Energy breach exposed names, addresses, SSNs and driver license numbers of roughly one million Texas residents.
§Source · SecurityWeek
SecurityWeek
Every dispatch we have aggregated from SecurityWeek.
All dispatchesToday
Wednesday, October 14
Ahold Delhaize Cyberattack Spurs System Shutdowns to Safeguard Operations
Ahold Delhaize disconnected systems after a cyber incident disrupted operations across stores in multiple countries.
AI Models Poised to Self-Replicate on IoT Devices, Study Finds
Anthropic research shows cheap IoT devices can run AI models that may self-replicate, creating decentralized AI botnets.
Massive Crypto Theft Tied to Ledger Signer Tampering
Hardware implant on Ledger Signer stolen user data and enabled attackers to drain wallets, linked to an $86 million heist.
Monday, October 12
Critical AhsayCBS Vulnerabilities Lead to Remote Code Exploitation
PremiumAttackers exploit unpatched AhsayCBS vulnerabilities CVE-2026-105133 and CVE-2026-105134 to bypass auth and inject OS commands.
Midnight Mimosa Malware Pre-installed on Budget Android Devices Worldwide
PremiumMidnight Mimosa malware found preinstalled on low-cost Android devices across 150+ countries, enabling persistent control and spying.
Friday, October 9
Wednesday, October 7
MALFEX Malware Campaign Exploits NPM Packages with Over 40,000 Downloads
MALFEX campaign published eight malicious NPM packages since 2023, accumulating ~40,000 downloads and supply-chain compromise risk.
FBI Apprehends Key Figure in ATM Malware Operation
FBI arrests alleged Ploutus ATM malware developer Canelon Aguirre, linked to Tren de Aragua ATM jackpotting campaigns.
Monday, October 5
AI Agents Target Government Websites in US and Canada with SQL Injections
PremiumResearchers found AI agents performing automated SQL injection against U.S. Department of Education and Library and Archives Canada websites.
Fortra Addresses Critical Vulnerabilities in BoKS With Urgent Patches
PremiumFortra released patches for BoKS vulnerabilities that could allow authentication bypass, shell execution, and memory corruption.
Friday, October 2
US Treasury Targets ATM Malware Mastermind and Network
PremiumUS Treasury blacklists a key ATM malware developer tied to Tren de Aragua's jackpotting and laundering network.
International Crackdown Disables KillSec Ransomware Group
PremiumInternational police seized KillSec leak site and data, secured 110TB, and identified an alleged teenage administrator.
AI-Driven Hack Exploits Zammad Zero-Day Vulnerabilities in DIVD Breach
PremiumDIVD says chained Zammad zero-days enabled session hijack, RCE, and privilege escalation to root in its AI-driven breach.
Zimbra Users Urged to Update Amid Exploitation of Critical Vulnerability
PremiumCritical Zimbra OS command-injection CVE-2026-73570 exploited via crafted emails without user interaction before disclosure.
Monday, September 28
Emerging x47.c Botnet Utilizes AI to Drain API Credits
Premiumx47.c Windows botnet uses xAI Grok to orchestrate actions and steal API credits, enabling persistent malicious automation.
Salesforce Agentforce Vulnerabilities Expose CRM Data to Exploits
PremiumThree Salesforce Agentforce vulnerabilities ('SalesBleed') enabled zero-click CRM data exfiltration and phishing vector creation.
Microsoft SharePoint Vulnerability Under Active Exploitation
PremiumMicrosoft SharePoint CVE-2026-65660 is being exploited in active attacks; CISA added it to the KEV catalog.
Friday, September 25
Get these articles delivered to your inbox.
Subscribe free