IT-Sentinel

> TODAY'S SUMMARY (97 articles)

Today's cybersecurity landscape reveals a range of significant threats and vulnerabilities. Companies are facing substantial losses, with token thefts related to illicit LLM charges costing over $100,000 daily. CISA has identified two critical vulnerabilities in Ivanti Connect Secure, urging immediate remediation. Google has disrupted the XCPE botnet, which was exploiting Android TV firmware. Meanwhile, a new AI-powered infostealer has emerged, effectively ranking stolen data by potential financial value. European supermarkets are grappling with a second wave of cyberattacks on their refrigeration systems, leading to widespread food spoilage. Additionally, the FBI has attributed the recent $6.3 billion Binance cryptocurrency heist to North Korean hackers, intensifying concerns over crypto security.

// AI-powered summary generated at 16:00

> CVE-2026-31671 xfrm_user: fix info leak in build_report()

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-26 08:05]

Information published.

> CVE-2022-2068 The c_rehash script allows command injection

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-26 08:05]

Information published.

> Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breach

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-04-26 08:00]

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines Boost Security has released SmokedMeat, an open-source framework that runs attack chains against CI/CD infrastructure so engin...

> CVE-2026-31670 net: rfkill: prevent unlimited numbers of rfkill events from being created

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-26 08:05]

Information published.

> CVE-2026-31642 rxrpc: Fix call removal to use RCU safe deletion

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-26 08:05]

Information published.

> Pre-Stuxnet Sabotage Malware ‘Fast16’ Linked to US-Iran Cyber Tensions

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-04-26 07:26]

What happened SentinelOne has uncovered Fast16, a Lua-based sabotage malware developed and deployed years before Stuxnet that was designed to tamper with high-precision calculation software used in civil engineering, physics, and physical process simulations. The malware was used in an attack in 200...

> CVE-2026-23394 af_unix: Give up GC if MSG_PEEK intervened.

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-26 08:05]

Information published.

> CVE-2026-23360 nvme: fix admin queue leak on controller reset

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-26 08:05]

Information published.

> California Engineer Identified in Suspected Shooting at White House Correspondents' Dinner

[SOURCE] Wired Security [LANGUAGE: EN] [DATE: 2026-04-26 03:26]

The 31-year-old engineer and self-described indie game developer is suspected of firing shots at the annual event attended by President Donald Trump, high-profile media figures, and US government officials.

> CVE-2026-31621 bnge: return after auxiliary_device_uninit() in error path