| CenterPoint, Japan Digital Agency and Chrome Zero-Days

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Built for CISOs, security leaders, and executives, it delivers concise analysis of the threats shaping business risk. Today’s briefing:

1. 01

   CenterPoint Energy breach: The utility confirmed that stolen data was leaked online and is investigating the scope of the compromise. The incident highlights how attacks on critical infrastructure can trigger operational disruption, legal exposure, and reputational damage.

2. 02

   Japan Digital Agency breach: Attackers used a maintenance employee’s account and an unpatched VPN flaw to access more than 246,000 records containing personal and business contact information. The breach reinforces the risks of weak access controls and delayed vulnerability management in government services.

3. 03

   Chrome and Windows zero-days: Two China-linked espionage groups exploited the same browser and operating-system flaws against NGOs before patches reached users. The campaign shows how quickly zero-days can be copied and weaponized, especially when organisations lag on updates.

4. 04

   AI for cybercrime: Researchers found an underground service marketing uncensored AI capabilities, including malware-related assistance. Whether or not all claims are genuine, the model reflects the growing commoditisation of offensive tools and the lowering barrier to entry for attackers.

5. 05

   KREMLIN banking malware: A newly identified Brazilian campaign uses fake banking pages and malicious browser extensions to steal credentials, cookies, session tokens, and other sensitive data. With more than 1,500 systems exposed, the operation demonstrates how browser persistence can enable large-scale financial and identity theft.