IT-Sentinel

> TODAY'S SUMMARY (157 articles)

Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.

// AI-powered summary generated at 20:00

> To counter cookie theft, Chrome ships device-bound session credentials

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-04-10 09:21]

Cookie theft follows a well-established pattern. Infostealer malware infiltrates a device, extracts authentication cookies, and exfiltrates them to an attacker-controlled server. Because cookies often have extended lifetimes, attackers can access accounts without passwords, then bundle and sell the...

> Critical Marimo Flaw Exploited Hours After Public Disclosure

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-04-10 09:12]

Within nine hours, a hacker built an exploit from the unauthenticated bug’s advisory and started using it in the wild. The post Critical Marimo Flaw Exploited Hours After Public Disclosure appeared first on SecurityWeek.

> The cyber winners and losers in Trump’s 2027 budget

[SOURCE] CSO Online [LANGUAGE: EN] [DATE: 2026-04-10 09:01]

Federal cybersecurity spending will decline in 2027 under Donald Trump’s proposed budget, with uneven shifts across agencies, as some see sizable increases while others face sharp reductions. According to the Office of Management and Budget (OMB) crosscut tables released wi...

> CMMC compliance in the age of AI

[SOURCE] CSO Online [LANGUAGE: EN] [DATE: 2026-04-10 09:00]

Cybersecurity Maturity Model Certification 2.0 (CMMC 2.0) is pushing federal contractors to demonstrate, not just assert, that they can protect sensitive government data. Eligibility for contracts now depends on the ability to show how controlled unclassified information (CUI)...

> Recovery scammers hit you when you’re down: Here’s how to avoid a second strike

[SOURCE] ESET Blog [LANGUAGE: EN] [DATE: 2026-04-10 09:00]

If you’ve been the victim of fraud, you’re likely already a lead on a ‘sucker list’ – and if you’re not careful, your ordeal may be about to get worse.

> EngageLab SDK flaw opens door to private data on 50M Android devices

[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2026-04-10 08:41]

A flaw in EngageLab SDK exposed up to 50M Android users, including 30M crypto wallets, letting apps bypass security and access private data. Microsoft researchers found a critical flaw in EngageSDK that lets apps bypass Android sandbox protections and access private data. The flaw put millions of us...

> Little Snitch for Linux shows what your apps are connecting to

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-04-10 08:36]

Network monitoring on Linux has long been a gap for users who want per-process visibility into outbound connections. Existing tools either operate at the command line or were designed for server security rather than desktop privacy. Objective Development, the Austrian company behind the macOS firewa...

> La DINUM passe de Windows à Linux : les autres ministères doivent préparer leur plan

[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-04-10 08:36]

L'État français a décidé de passer à l'action : la DINUM va effectuer une migration de Windows vers Linux pour les postes de ses agents, soit au moins 200 PC. Le post La DINUM passe de Windows à Linux : les autres ministères doivent préparer leur plan a été publié sur IT-Connect.

> Apiiro CLI turns AI coding assistants into full-stack security engineers

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-04-10 08:33]

The Apiiro CLI brings the Apiiro platform to your terminal and to your AI coding assistants, giving them six native security capabilities: scanning, risk management, remediation, an AI security analyst (via Apiiro Guardian Agent), AI Threat Modeling, and prompt enrichment. It installs in seconds on...

> AI Agents: Who’s There? What Are They Doing? Most Security Teams Don’t Know

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-04-10 08:27]

No one seems to know what AI agents are doing, even the companies that keep them. MIND research underscores that AI Agents have gotten away from security teams and getting a fix on their identities and activities requires operational and cultural shifts. The post AI Agents: Who’s There? What Are T...

> CVE-2026-23405 apparmor: fix: limit the number of levels of policy namespaces