IT-Sentinel

> Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-09-15 06:11]

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-76461, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of insuffi...

> CV : comment sortir du lot quand on est développeur full-stack, SRE, architecte Cloud ?

[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-09-15 06:10]

Découvrez les indispensables d’un CV informatique : sections clés, exemples concrets et conseils pour sortir du lot face aux autres candidats. Le post CV : comment sortir du lot quand on est développeur full-stack, SRE, architecte Cloud ? a été publié sur IT-Connect.

> China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-09-15 05:31]

A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor called GRIMWEDGE. Volexity, which is tracking the threat cluster under the moniker UTA0560, said th...

> Product showcase: mSecure makes one vault do more than remember passwords

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-09-15 05:30]

mSecure is a password manager and data vault for storing credentials and other sensitive information. It is available for iOS, Android, macOS, and Windows, with data synchronization across supported devices. The app uses AES-256 encryption and a zero-knowledge architecture. The company does not stor...

> Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-09-15 05:18]

An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges. The post Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation appeared first on SecurityWeek.

> PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting

[SOURCE] CrowdStrike [LANGUAGE: EN] [DATE: 2026-09-15 05:00]

> Your employees are already using AI tools you never approved

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-09-15 05:00]

Seventy-four percent of respondents report departmental or scaled AI adoption at their organizations, including within individual teams or departments, across business functions, and as part of processes and operations, according to the latest OneTrust 2026 AI-Ready Governance Report. The remaining...

> The latest AI doomsayer is China’s intelligence boss

[SOURCE] The Register Security [LANGUAGE: EN] [DATE: 2026-09-15 04:56]

Beijing’s response is to ‘firmly grasp technological sovereignty’ and broad regulations

> Most chief audit executives can’t tell you what AI is worth yet

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-09-15 04:30]

Auditors are using AI in their daily work, and their departments have mostly left them to figure it out alone. 93% of audit leaders and auditors report some level of AI use, while 15% say their department has deployed formal use cases and runs them routinely in audits, according to Gartner. Chief au...

> ISC Stormcast For Tuesday, September 15th, 2026 https://isc.sans.edu/podcastdetail/10094, (Tue, Sep 15th)

[SOURCE] SANS ISC [LANGUAGE: EN] [DATE: 2026-09-15 02:25]

> Supreme Court denies Trump request to allow USPS mail ballot changes

[SOURCE] CyberScoop [LANGUAGE: EN] [DATE: 2026-09-15 02:15]

One justice said the attempt to change the rules ahead of the 2026 elections would be "arbitrary and capricious” and violated the Administrative Procedures Act. The post Supreme Court denies Trump request to allow USPS mail ballot changes appeared first on CyberScoop.

> Chromium CVE-2026-87658: Information leak in Extensions