CenterPoint Energy Data Breach Impacts 1 Million Texans
CenterPoint Energy has notified Texan authorities that the personal information of over 1 million individuals was compromised in a data breach. The notice came one month after the Houston-based public utility told the SEC that customer information had been stolen from its systems. Just days before its initial disclosure, a hacker boasted on a known cybercrime forum that it had obtained nearly 7.5 million user records from CenterPoint Energy. READ MORE...
Hacker targets Ivanti Connect Secure in chained exploitation
A suspected criminal hacker is targeting Ivanti Connect Secure customers through a complex exploit chain that combines three high-severity vulnerabilities, according to a report Tuesday by Volexity, a Virginia-based cybersecurity firm. The chain combines an authentication-bypass vulnerability with remote code execution and privilege-escalation flaws to achieve root-level code execution (RCE), according to researchers. READ MORE...
ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
Industrial giants Siemens, Schneider Electric, and Rockwell Automation have published ICS security advisories this Patch Tuesday. Siemens published 17 new advisories this Patch Tuesday. The company has released patches for some of the vulnerabilities, while for others it has shared mitigations until permanent fixes become available. The company addressed critical vulnerabilities in some Simatic S7-1500 CPUs, Industrial Edge devices, and the Ruggedcom Crossbow Station Access Controller (SAC). READ MORE...
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. Tracked as CVE-2026-76519, this vulnerability stems from a relative path traversal weakness in SEG's Advanced Malware Protection (AMP) feature, caused by improper handling of email attachments. Threat actors can exploit this issue by sending an email with a maliciously crafted attachment through an unpatched device. READ MORE...
AdFection: How mercenary spyware invades victims' devices through targeted advertising
That online ad you saw for earbuds, a drone or bubble gum-scented car air freshener may have been a gateway for mercenary spyware that can infect your device without you ever having to click on it. The Citizen Lab at the University of Toronto on Thursday said it was revealing the first details of zero-click spyware being delivered through targeted advertising, which it's calling AdFection. The likely goal is large-scale tracking and surveillance, enabled by accident by major players like Google. READ MORE...
Jev and other decision models can still be tricked with prompt injection
Some of the excitement about decision models follows from TypeSafe AI's claim that its Jev decision model cannot hallucinate and that "the model never makes type errors." Yet decision models, which answer questions with a set of probabilities and a confidence score rather than freeform text, can still get things wrong and can still be exploited through injection. These vulnerabilities don't erase the potential advantages of a model that returns decision probabilities instead of a text answer. READ MORE...
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. The vulnerability affects the PAN-OS management interface and lets authenticated attackers with network access execute code as root on vulnerable devices. Palo Alto Networks confirmed in a security advisory published Wednesday that it has seen limited exploitation of the flaw in attacks. READ MORE...
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
With no prompt, no click, and no sandbox defenses, a high-severity bug in Anthropic's Claude Code Desktop lets an adversary steal deeply sensitive files from software developer machines. It's patched now, but it wasn't easy. The first fix for the vulnerability, dubbed "SneakPeek," was bypassed by Noma researchers who first discovered the bug. That sent Anthropic's team back into the code to make deeper architectural fixes. Anthropic and Noma collaborated on the disclosure and fix. READ MORE...
- ...in 1878, Thomas A. Edison founds the Edison Electric Light Co.
- ...in 1938, musician and activist Fela Kuti, who helped popularize Pan-African music and the Afrobeat genre, is born in Abeokuta, Nigeria.
- ...in 1969, rallies against the war in Vietnam draw over 2 million demonstrators across the US, a quarter million of them in the nation's capital.
- ...in 2003, China launches its first manned space mission, Shenzhou 5.
