IT-Sentinel

> TODAY'S SUMMARY (22 articles)

Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Fireworks AI has reported a breach stemming from a third-party cloud hack, emphasizing the risks associated with relying on external providers. France has attributed a cyberattack that affected supermarket refrigeration systems to Iranian operatives, signaling geopolitical tensions in cyberspace. Meanwhile, CISA has warned of active exploitation of multiple security flaws in key software, including OpenSSH and IBM products. Additionally, N-able has taken its N-central Cloud offline after the disclosure of 33 zero-day vulnerabilities. On the consumer side, a data breach at Iris Ohyama may expose personal information of 7.7 million individuals. Lastly, Google has issued a security update for Chrome, addressing the eighth actively exploited zero-day this year.

// AI-powered summary generated at 08:00

> Le scanner Trivy piraté une seconde fois : attention au vol de secrets

[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-03-20 08:07]

Le jeudi 19 mars 2026, une version malveillante de Trivy a été publiée par les pirates : v0.69.4. Elle contenait un script permettant de voler des secrets. Le post Le scanner Trivy piraté une seconde fois : attention au vol de secrets a été publié sur IT-Connect.

> International joint action disrupts world’s largest DDoS botnets

[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2026-03-20 08:05]

Authorities from the United States, Germany, and Canada have taken down Command and Control (C2) infrastructure used by the Aisuru, KimWolf, JackSkid, and Mossad botnets to infect Internet of Things (IoT) devices. [...]

> CVE-2006-10003 XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:04]

Information published.

> CVE-2006-10002 XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:04]

Information published.

> Semgrep Multimodal brings AI reasoning and rule-based analysis to code security

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-20 07:47]

Semgrep announced Semgrep Multimodal, a system that combines AI reasoning with rule-based analysis for detection, triage, and remediation. Its detection finds up to 8x more true positives while cutting noise by 50% compared to foundation models alone, and has already discovered dozens of zero-days a...

> CVE-2026-23227 drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:04]

Information published.

> CVE-2026-23213 drm/amd/pm: Disable MMIO access during SMU Mode 1 reset

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:04]

Information published.

> ConductorOne unveils AI Access Management to accelerate secure, compliant AI adoption

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-20 07:39]

ConductorOne has announced its AI Access Management product extension, a unified control plane for managing access to AI tools, agents, and MCP connections across the enterprise. The platform enables organizations to accelerate AI adoption while maintaining full visibility, policy enforcement, and c...

> CVE-2026-23221 bus: fsl-mc: fix use-after-free in driver_override_show()

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:04]

Information published.

> CVE-2026-23214 btrfs: reject new transactions if the fs is fully read-only

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:04]

Information published.

> Why MCP Gateways are a Bad Idea (and What to Do Instead)

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-03-20 07:33]

MCP Gateways are the wrong abstraction for AI security. Discover why runtime hooks and MCP registries offer a superior, context-aware defense against data leaks and unauthorized tool calls in modern agentic architectures. The post Why MCP Gateways are a Bad Idea (and What to Do Instead) appeare...

> CVE-2026-23208 ALSA: usb-audio: Prevent excessive number of frames