IT-Sentinel

> TODAY'S SUMMARY (110 articles)

Today's cybersecurity landscape highlights several significant threats and trends. Cybercriminals are increasingly targeting everyday users with spyware, indicating a shift towards more indiscriminate attacks. Additionally, vulnerabilities in widely used platforms like SAP and Google Chrome have been actively exploited, with SAP releasing critical patches for multiple flaws. The Russian state-linked Turla group continues to pose a threat, using advanced tools like "Cereal" to intercept emails from government servers. Meanwhile, supply chain attacks remain a concern, evidenced by the recent Qubole incident, which compromised numerous organizations' credentials. Overall, the rise in cloud vulnerabilities and the exploitation of AI in cyberattacks are emerging as critical areas for organizations to address.

// AI-powered summary generated at 16:00

> CVE-2025-38643 wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:02]

Information published.

> CVE-2025-58436 OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:01]

Information published.

> The Browser Defense Playbook: Stopping the Attacks That Start on Your Screen

[SOURCE] Palo Alto Unit 42 [LANGUAGE: EN] [DATE: 2025-12-03 00:00]

85% of daily work occurs in the browser. Unit 42 outlines key security controls and strategies to make sure yours is secure. The post The Browser Defense Playbook: Stopping the Attacks That Start on Your Screen appeared first on Unit 42.

> CVE-2025-61915 OpenPrinting CUPS vulnerable to stack based out-of-bound write

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:01]

Information published.

> CVE-2025-66221 Werkzeug safe_join() allows Windows special device names

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:01]

Information published.

> Russia Wants This Mega Missile to Intimidate the West, but It Keeps Crashing

[SOURCE] Wired Security [LANGUAGE: EN] [DATE: 2025-12-03 00:00]

One of Vladimir Putin’s favorite sabers to rattle seems to have lost its edge.

> CVE-2022-24736 A Malformed Lua script can crash Redis

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:01]

Information published.

> CVE-2022-24735 Lua scripts can be manipulated to overcome ACL rules in Redis

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:01]

Information published.

> [webapps] MobileDetect 2.8.31 - Cross-Site Scripting (XSS)