IT-Sentinel

> FBI Warns of Surge in Hacker-Enabled Cargo Theft

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-05-01 08:11]

A new alert from the FBI says criminal enterprises are hacking both brokers and carriers to steal cargo for resale. The post FBI Warns of Surge in Hacker-Enabled Cargo Theft appeared first on SecurityWeek.

> CVE-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-01 08:04]

Information published.

> CVE-2026-41526

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-01 08:03]

Information published.

> US ransomware negotiators get 4 years in prison over BlackCat attacks

[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2026-05-01 07:47]

Two former employees of cybersecurity incident response companies Sygnia and DigitalMint were sentenced to four years in prison each for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks. [...]

> CVE-2026-40356

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-01 08:03]

Information published.

> CVE-2026-40355

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-01 08:03]

Information published.

> Debian DSA-6239-1 Chromium Critical Execution Risks And Denial Of Service

[SOURCE] LinuxSecurity - Debian [LANGUAGE: EN] [DATE: 2026-05-01 07:38]

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 147.0.7727.137-1~deb12u1.

> CVE-2026-31692 rtnetlink: add missing netlink_ns_capable() check for peer netns

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-01 08:02]

Information published.

> CVE-2026-31533 net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-01 08:01]

Information published.

> 1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, Intercom

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-05-01 07:33]

The compromised Lightning and Intercom packages have a combined monthly download count of nearly 10 million. The post 1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, Intercom appeared first on SecurityWeek.

> China Has its Sights Set on Scammers, Just Not Those Targeting Americans

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-05-01 07:19]

A new report from the U.S.-China Economic and Security Review Commission reveals that while China is aggressively prosecuting fraud targeting its own citizens, it continues to turn a blind eye to industrial-scale scam centers victimizing Americans. This selective enforcement has incentivized Chines...

> Chromium: CVE-2026-7351 Race in MHTML