CenterPoint Energy, a Texas-based utility provider, has confirmed a data breach following claims by a hacker that they had stolen 7.49 million customer records. The company acknowledged that an unauthorized intruder accessed customer information.
Separately, the cloud photo and GIF sharing service Gyazo announced a data breach affecting 23 million user records. Details regarding the nature of the compromised data or the timeline of the incident were not immediately available.
In another incident, Revolut, a financial technology company, experienced a data leak. Initial investigations suggest this breach may be linked to compromised Italian government accounts, though Revolut has not confirmed this connection.
Further cybersecurity concerns emerged with a critical vulnerability identified in Check Point VPN products, which is reportedly under active exploitation. Users are urged to update their systems promptly to address these flaws. The U.S. CISA has also added several critical vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in Acronis Backup, Cisco ISE, Google Pixel, Cisco Secure Email Gateway, GitLab, JFrog Artifactory, and ConnectWise ScreenConnect.
Cisco specifically warned of ongoing exploitation of a critical zero-day vulnerability in its Secure Email Gateway. Additionally, a non-zero-day VPN flaw exposed Japan's government shared network platform, potentially compromising 246,000 personnel records.
A significant supply-chain attack targeting Brevo, a marketing automation platform, reportedly infected over 100,000 websites. This incident highlights the widespread impact that a single compromise within a software supply chain can have.
In other news, Google patched a zero-day vulnerability in Pixel modems that was exploited in targeted attacks. A bug in LiteSpeed Enterprise, used in shared hosting environments, was also found to potentially grant root access from a single tenant, posing a significant risk to hosted websites.
An exploit chain targeting both Chrome and Windows has been linked to two distinct espionage campaigns, indicating sophisticated threat actor activity. A flaw in Telegram Desktop could also turn old chat exports into data theft traps, while a malicious Twitch browser extension exposed 30,000 users' OAuth tokens to a Russian bot service.
Law enforcement agencies have taken action against cybercrime, with the FBI seizing several domains associated with DDoS-for-hire services as part of a crackdown on "booter" and "stresser" operations. This effort led to the takedown of NightmareStresser, a prominent DDoS-for-hire platform. Furthermore, a Conti hacker involved in malware development and victim attacks received a four-year prison sentence.
