CenterPoint Energy confirms customer data stolen in cyberattack

BleepingComputer security feed covering active exploitation, ransomware activity, malware campaigns, data breaches, exposed credentials, supply-chain/plugin attacks, zero-days, and security update issues. Key high-risk items include exploitation of a critical VMware vCenter RCE vulnerability by ransomware gangs, an actively exploited Cisco Secure Email Gateway zero-day enabling root command execution, WordPress WooCommerce plugin exploitation to upload PHP backdoors, and campaigns stealing cloud credentials from exposed Vite development servers. Other reports cover BambooToken MQTT-based cross