IT-Sentinel

> TODAY'S SUMMARY (22 articles)

Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Fireworks AI has reported a breach stemming from a third-party cloud hack, emphasizing the risks associated with relying on external providers. France has attributed a cyberattack that affected supermarket refrigeration systems to Iranian operatives, signaling geopolitical tensions in cyberspace. Meanwhile, CISA has warned of active exploitation of multiple security flaws in key software, including OpenSSH and IBM products. Additionally, N-able has taken its N-central Cloud offline after the disclosure of 33 zero-day vulnerabilities. On the consumer side, a data breach at Iris Ohyama may expose personal information of 7.7 million individuals. Lastly, Google has issued a security update for Chrome, addressing the eighth actively exploited zero-day this year.

// AI-powered summary generated at 08:00

> CVE-2025-68190 drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-11 08:43]

Information published.

> CVE-2025-40139 smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-11 08:42]

Information published.

> Canvas System Is Online After a Cyberattack Disrupted Thousands of Schools

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-05-11 08:35]

Tens of thousands of students studying for final exams around the world have regained access to a key online learning system after a cyberattack had earlier knocked it offline. The post Canvas System Is Online After a Cyberattack Disrupted Thousands of Schools appeared first on SecurityWeek.

> CVE-2025-40146 blk-mq: fix potential deadlock while nr_requests grown

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-11 08:42]

Information published.

> CVE-2025-40168 smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-11 08:42]

Information published.

> Taiwan's train cyber-trauma reveals a global system that’s coming off the tracks

[SOURCE] The Register Security [LANGUAGE: EN] [DATE: 2026-05-11 08:30]

That’s not a radio. THIS is a radio

> CVE-2025-40170 net: use dst_dev_rcu() in sk_setup_caps()

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-11 08:42]

Information published.

> CVE-2025-40158 ipv6: use RCU in ip6_output()

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-11 08:42]

Information published.

> New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-05-11 08:15]

Also called Copy Fail 2 and tracked as CVE-2026-43284 and CVE-2026-43500, the exploit was disclosed before a patch was released. The post New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks appeared first on SecurityWeek.

> CVE-2025-40180 mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-11 08:42]

Information published.

> CVE-2026-31712 ksmbd: require minimum ACE size in smb_check_perm_dacl()