IT-Sentinel

> TODAY'S SUMMARY (97 articles)

Today's cybersecurity landscape reveals a range of significant threats and vulnerabilities. Companies are facing substantial losses, with token thefts related to illicit LLM charges costing over $100,000 daily. CISA has identified two critical vulnerabilities in Ivanti Connect Secure, urging immediate remediation. Google has disrupted the XCPE botnet, which was exploiting Android TV firmware. Meanwhile, a new AI-powered infostealer has emerged, effectively ranking stolen data by potential financial value. European supermarkets are grappling with a second wave of cyberattacks on their refrigeration systems, leading to widespread food spoilage. Additionally, the FBI has attributed the recent $6.3 billion Binance cryptocurrency heist to North Korean hackers, intensifying concerns over crypto security.

// AI-powered summary generated at 16:00

> CVE-2026-31582 hwmon: (powerz) Fix use-after-free on USB disconnect

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-26 08:08]

Information published.

> CVE-2026-31676 rxrpc: only handle RESPONSE during service challenge

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-26 08:08]

Information published.

> Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breach

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-04-26 08:00]

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines Boost Security has released SmokedMeat, an open-source framework that runs attack chains against CI/CD infrastructure so engin...

> CVE-2026-31588 KVM: x86: Use scratch field in MMIO fragment to hold small write values

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-26 08:08]

Information published.

> CVE-2026-31677 crypto: af_alg - limit RX SG extraction by receive buffer budget

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-26 08:08]

Information published.

> Pre-Stuxnet Sabotage Malware ‘Fast16’ Linked to US-Iran Cyber Tensions

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-04-26 07:26]

What happened SentinelOne has uncovered Fast16, a Lua-based sabotage malware developed and deployed years before Stuxnet that was designed to tamper with high-precision calculation software used in civil engineering, physics, and physical process simulations. The malware was used in an attack in 200...

> CVE-2026-31675 net/sched: sch_netem: fix out-of-bounds access in packet corruption

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-26 08:08]

Information published.

> CVE-2026-31684 net: sched: act_csum: validate nested VLAN headers

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-26 08:08]

Information published.

> California Engineer Identified in Suspected Shooting at White House Correspondents' Dinner

[SOURCE] Wired Security [LANGUAGE: EN] [DATE: 2026-04-26 03:26]

The 31-year-old engineer and self-described indie game developer is suspected of firing shots at the annual event attended by President Donald Trump, high-profile media figures, and US government officials.

> CVE-2026-31580 bcache: fix cached_dev.sb_bio use-after-free and crash