IT-Sentinel

> This month in security with Tony Anscombe – April 2026 edition

[SOURCE] ESET Blog [LANGUAGE: EN] [DATE: 2026-04-30 09:00]

Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 - here's some of what made the headlines this month

> It’s Not the Computer, Stupid. It’s the Information in It. Two Recent Indictments Stretch the Limits of “Theft” of Information.

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-04-30 08:57]

The legal system persists in framing "computer crime" through the archaic lens of tangible property—theft and conversion—despite the fact that information is non-rivalrous and easily duplicated without depriving the original owner of possession. Recent federal indictments, such as the Van Dyke and...

> CVE-2019-1543 ChaCha20-Poly1305 with long nonces

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-30 08:54]

Information published.

> CVE-2019-1551 rsaz_512_sqr overflow bug on x86_64

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-30 08:53]

Information published.

> Britain's £6B armoured sickener Ajax cleared for duty despite injuring troops

[SOURCE] The Register Security [LANGUAGE: EN] [DATE: 2026-04-30 08:45]

Investigation finds no single cause for soldiers falling ill, just bad bolts, cold air, and apparently the soldiers themselves Britain's notorious Ajax armored vehicles are being accepted back from the manufacturer after investigations found no single cause for the symptoms plaguing crews, meaning s...

> CVE-2026-31420 bridge: mrp: reject zero test interval to avoid OOM panic

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-30 08:53]

Information published.

> CVE-2026-34477 Apache Log4j Core: verifyHostName attribute silently ignored in TLS configuration, allowing hostname verification bypass

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-30 08:53]

Information published.

> Wasn’t Visibility Supposed to Fix This?

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-04-30 08:35]

Exposure management needs more than visibility. Learn how context, workflows and execution drive real vulnerability remediation. The post Wasn’t Visibility Supposed to Fix This? appeared first on Security Boulevard.

> CVE-2025-15504 lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereference

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-30 08:52]

Information published.

> CVE-2026-3298 Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-30 08:52]

Information published.

> Sandhills Medical Says Ransomware Breach Affects 170,000

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-04-30 08:35]

It took the healthcare organization nearly one year to publicly disclose a data breach after it was targeted by Inc Ransom. The post Sandhills Medical Says Ransomware Breach Affects 170,000 appeared first on SecurityWeek.

> CVE-2026-41305 PostCSS has XSS via Unescaped </style> in its CSS Stringify Output

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-30 08:52]

Information published.

> CVE-2017-3731 Truncated packet could crash via OOB read

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-30 08:51]

Information published.

> Oracle Linux 8 PackageKit Significant Upgrade CVE-2026-41651 Details