CenterPoint Energy confirms customer data breach
CenterPoint Energy, a utility serving 7 million customers, has disclosed to regulators that hackers accessed some customer personal data through an external system. The company confirmed the breach after a dark web post appeared offering stolen data. CenterPoint says electric and gas service was not affected. The full scope of the breach, including how many customers are impacted, remains under investigation.
- Breach confirmed in SEC filing after dark web post
- Personal data from some customers obtained by hackers
- Electric and gas service not disrupted by the breach
- Scope of exposure and number affected under investigation
- Company reported the incident to law enforcement
Sources covering this
More in Cybersecurity
Microsoft releases record number of security patches
Microsoft released updates to fix at least 974 security vulnerabilities across Windows and other products, its largest patch release to date. The update includes critical flaws, some already being exploited, and over 100 rated as dangers that could let attackers seize control of systems. The unprecedented volume is partly due to the use of AI for vulnerability detection, but experts warn that rapid growth complicates efforts to test and deploy fixes.
OpenAI pledges $1 billion for AI cyber defense program
OpenAI has pledged $1 billion in credits to help organizations defending critical U.S. infrastructure—including water utilities, electric grids, local governments, banks, and nonprofits—access its AI-powered cybersecurity tools, training, and support. The "Daybreak for Frontline Defenders" initiative aims to help these sectors strengthen their defenses as AI-driven cyberattacks become more advanced. OpenAI says it will expand the program to partner countries in the coming weeks.
GitLab patches critical file-read issue as attacks begin
GitLab has fixed a severe vulnerability that allowed unauthenticated users to read sensitive files from its servers. Researchers report probing of the flaw started within hours of the disclosure. The bug affects several recent GitLab versions and potentially exposes secrets, credentials, and configuration data. A separate critical issue was also patched. Organizations are urged to apply the updates immediately or restrict public access.
Cisco warns of actively exploited email gateway flaw
Cisco has confirmed a critical vulnerability in its Secure Email Gateway is being exploited. The flaw, identified as CVE-2026-76461, allows remote attackers to run commands with root privileges by sending crafted emails. The issue affects both physical and virtual gateway devices running certain versions of AsyncOS, but not other Cisco products. Cisco has released patches and urged users to upgrade, as there are no workarounds.