IT-Sentinel

> TODAY'S SUMMARY (12 articles)

Today's cybersecurity landscape highlights several critical threats and trends. Cybercriminals are increasingly using DNS for data exfiltration, prompting organizations to enhance detection and prevention measures. A critical vulnerability (CVE-2026-108142) in Veeam Backup & Replication 13 has been patched, emphasizing the need for timely updates. Similarly, Microsoft Authenticator's AuthMask vulnerability (CVE-2026-80097) allowed unauthorized access to Microsoft 365 accounts, necessitating user vigilance. Meanwhile, a significant number of data breach victims were affected through third-party vendors, underscoring supply chain risks. Additionally, an offensive AI agent, dubbed "Skynet," has been developed to exploit unprotected AI models, marking a worrying trend in cyberattacks. Lastly, NIST is pushing for a transition to post-quantum cryptography, reflecting the urgency of preparing for future threats.

// AI-powered summary generated at 08:00

> Your MFA isn’t broken — it’s being bypassed, and your employees can’t tell the difference

[SOURCE] CSO Online [LANGUAGE: EN] [DATE: 2026-03-19 09:00]

Multi-factor authentication was supposed to be the solution. For years, security teams have told employees that MFA would keep them safe. Password stolen? No problem — attackers still need that second factor. But adversary-in-the-middle (AiTM) phishing has changed everythin...

> Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-03-19 08:57]

Amazon found evidence that the FMC software vulnerability has been exploited since late January, and found links to Russia. The post Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks appeared first on SecurityWeek.

> Russia establishes Vienna as key western spy hub targeting NATO

[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2026-03-19 08:38]

Russia uses Vienna as its largest Western spy hub, monitoring NATO and other sensitive communications via diplomatic sites and satellite dishes. Western intelligence reports that Russia has transformed Vienna into its largest Western spy hub, steadily expanding surveillance over the past two years....

> Dormant Accounts Leave Manufacturing Orgs Open to Attack

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-03-19 08:25]

While companies use "perp walks" for terminated employees, 48% of manufacturers fail to revoke digital access within 24 hours. Explore the growing risk of dormant accounts, the 74% automation gap in provisioning, and why experts like Darren Guccione and James Maude call overprivileged identities a...

> Arcjet enables inline defense against prompt injection in production AI systems

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-19 08:20]

Arcjet has released AI Prompt Injection Protection, a new capability designed to stop prompt injection attacks before they reach production AI models. The feature detects hostile prompts at the application boundary and gives developers a decision point inside the request lifecycle where malicious in...

> Keysight SBOM Manager simplifies global cybersecurity compliance and software transparency

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-19 08:14]

Keysight Technologies has launched Keysight SBOM Manager, a new solution designed to help organizations meet growing global cybersecurity and software transparency requirements, led by the European Union’s Cyber Resilience Act (CRA). The solution provides a unified approach to generating, managing,...

> Apple a corrigé une faille sur iOS et macOS, et c’est invisible grâce à cette nouveauté

[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-03-19 08:12]

Apple a déployé son premier correctif via la fonctionnalité "Background Security Improvements" pour la CVE-2026-20643. C'est transparent pour les utilisateurs. Le post Apple a corrigé une faille sur iOS et macOS, et c’est invisible grâce à cette nouveauté a été publié sur IT-Connect.

> Samba 4.24.0 ships Kerberos hardening and a CVE fix for domain encryption defaults

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-19 08:13]

Samba 4.24.0 arrived carrying a set of Kerberos security changes aimed at Active Directory deployments. The release fixes a vulnerability, extends audit coverage for sensitive AD attributes, and introduces configuration options to counter two related Kerberos impersonation techniques. A CVE drives t...

> CVE-2026-27459 pyOpenSSL DTLS cookie callback buffer overflow