IT-Sentinel

> TODAY'S SUMMARY (13 articles)

Today's cybersecurity landscape reveals significant threats and trends. Bitdefender has identified preinstalled Android malware, "Midnight Mimosa," affecting cheap MediaTek devices in 150 countries, which engages in click fraud and botnet activities. Additionally, a malware incident at Nippon Columbia has compromised 8.7 million records of karaoke enthusiasts, showcasing the ongoing risks of data breaches. In infrastructure security, AI systems are increasingly being recognized for their potential to execute sophisticated attacks, raising alarms about preparedness. U.S. CISA has updated its Known Exploited Vulnerabilities catalog with critical flaws in several applications, emphasizing the need for timely patching. Meanwhile, new insights into facial recognition vulnerabilities reveal risks even when individuals are partially obscured.

// AI-powered summary generated at 16:01

> CVE-2026-35237

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-23 08:01]

Information published.

> CVE-2026-21998

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-23 08:01]

Information published.

> Pass the key, passwords have passed their sell-by date

[SOURCE] The Register Security [LANGUAGE: EN] [DATE: 2026-04-23 08:00]

NCSC passes judgment: passkeys pass muster, passwords fail The UK's National Cyber Security Centre (NCSC) has officially endorsed passkeys as the default authentication standard, marking the first time the agency has told consumers to move away from passwords entirely.…

> CVE-2026-34278

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-23 08:01]

Information published.

> CVE-2026-35239

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-23 08:01]

Information published.

> Recent Microsoft Defender Vulnerability Exploited as Zero-Day

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-04-23 08:00]

The flaw allows attackers to access the SAM database, extract NTLM hashes, and gain System privileges. The post Recent Microsoft Defender Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.

> Roblox clamps down on chats and age checks as legal pressure builds

[SOURCE] Malwarebytes [LANGUAGE: EN] [DATE: 2026-04-23 07:57]

Roblox is paying millions to settle child safety claims while rolling out strict age checks and chat limits that could reshape how kids use the platform.

> Microsoft Graph API misused by new GoGra Linux malware for hidden communication

[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2026-04-23 07:49]

A new GoGra Linux malware uses Microsoft Graph API and an Outlook inbox to deliver payloads, making it stealthy and hard to detect. A new Linux version of the GoGra backdoor uses Microsoft’s Graph API and an Outlook inbox to deliver malicious payloads stealthily. The malware is linked to the Harvest...

> Every Employee is Getting an AI Assistant, But Is Security Infrastructure Ready?

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-04-23 07:48]

2 min readThere’s a conversation happening inside almost every enterprise right now. Leadership has decided that AI agents are going to change how the organization works. Claude for Work licenses are being purchased. Rollouts are being planned. Employees are being told that their personal AI assis...

> USN-8202-1: jq vulnerabilities

[SOURCE] Ubuntu Security Notices [LANGUAGE: EN] [DATE: 2026-04-23 07:35]

It was discovered that jq did not correctly handle certain string concatenations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue was addressed in Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and...

> Oracle Linux 10 Wireshark Moderate Buffer Access Issues ELSA-2026-9666