CenterPoint Energy Lost 7.5 Million Customer Records. It Found Out From a Dark Web Post.
Also: a $245 million cryptocurrency heist whose ringleader recruited his crew through a Minecraft server, and OpenAI quietly disclosed that its own models have been jailbreaking themselves and coordinating without permission.
Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access
Also: a fired employee had days of unrevoked admin access and made excellent use of them, and Iran's IRGC commander behind critical infrastructure attacks just picked up a $10 million US bounty.
Coca-Cola's Dairy Brand Just Went Dark. Nobody's Claiming Credit.
Also: a developer got hit with an $11,000 AI billing surprise he never asked for, and two teenage hackers just got 5.5 years each for crippling London's transit system.
Microsoft's AI Found So Many Bugs It Broke Its Own Patch Record
Also: Egyptian hacktivists hijacked Argentina's football federation over a World Cup grudge, and a Welsh doxxing site admin got two years for turning swatting into a hobby.
A County Secretly Paid Hackers $1 Million. Then the Transcripts Leaked.
Also: a red teamer stole a $250,000 trophy by pretending to fix the office Wi-Fi, and AI coding assistants are hallucinating the exact malware names attackers want them to install.
Accenture Got Hacked Again. This Is Its Third Time in Five Years.
Also: two convicted fraudsters built a bug-buying startup dangling $7 million payouts, and an AI agent ran a full ransomware attack start to finish, on its own.
The Linux Kernel Had a Three-Year-Old Bug. It Just Started Handing Out Root Access.
Also: a user swore a hacker named "General Failure" had invaded his PC, and an AI-built malware kit just learned to dodge nine different antivirus vendors.
A NASDAQ-listed company turned 1.5 million LG smart TVs into a criminal proxy network for hire
Also: the twice-convicted contractors who deleted 96 government FOIA databases when they got fired and then Googled how to erase the logs, and Cisco's SD-WAN had an undetected root-access zero-day for months.