IT-Sentinel

> TODAY'S SUMMARY (16 articles)

Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.

// AI-powered summary generated at 20:00

> CVE-2026-46086 net: bridge: use a stable FDB dst snapshot in RCU readers

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-28 08:09]

Information published.

> CVE-2026-46065 fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-28 08:09]

Information published.

> ESET Server Security for Microsoft Windows Server version 13 feature update

[SOURCE] ESET News [LANGUAGE: EN] [DATE: 2026-05-28 08:00]

A feature update of ESET Server Security for Microsoft Windows Server version 13.0.12005.0 has been released.

> CVE-2026-46098 net: caif: clear client service pointer on teardown

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-28 08:09]

Information published.

> CVE-2026-45842 slip: reject VJ receive packets on instances with no rstate array

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-28 08:09]

Information published.

> JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware

[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-05-28 07:54]

A new campaign orchestrated by a previously undocumented threat actor has targeted cryptocurrency organizations with an aim to facilitate digital asset theft using recruitment-themed social engineering and bespoke macOS malware. "These campaigns leveraged sophisticated social engineering techniques...

> CVE-2026-45949 hwrng: core - use RCU and work_struct to fix race condition

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-28 08:09]

Information published.

> CVE-2026-46044 ipmi:ssif: Clean up kthread on errors

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-28 08:09]

Information published.

> Supply Chain : le botnet Glassworm ciblant GitHub et VS Code a été démantelé !

[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-05-28 07:52]

L'infrastructure du botnet Glassworm a été démantelée grâce à une action menée conjointement par CrowdStrike, Google et The Shadowserver Foundation. Le post Supply Chain : le botnet Glassworm ciblant GitHub et VS Code a été démantelé ! a été publié sur IT-Connect.

> CVE-2026-46072 ntfs3: add buffer boundary checks to run_unpack()

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-28 08:09]

Information published.

> CVE-2026-45994 ibmasm: fix OOB reads in command_file_write due to missing size checks