IT-Sentinel

> TODAY'S SUMMARY (103 articles)

Today's cybersecurity landscape highlights several critical threats and trends. A US government IT worker pleaded guilty to leaking Top Secret files, underscoring insider threats. A phishing campaign leveraging Google Calendar invites has emerged, successfully bypassing multi-factor authentication (MFA). Additionally, Russian hackers, linked to APT29, are exploiting n-day vulnerabilities in iOS and Android devices through compromised websites. There are warnings about unpatched vulnerabilities in SonicWall's end-of-life software, and a significant cyberattack has disrupted the French blood service's temperature controls. Finally, a major security flaw in WordPress has been actively exploited, prompting alerts from CISA. Organizations should prioritize patching vulnerabilities and enhancing employee training to mitigate risks.

// AI-powered summary generated at 16:00

> CVE-2026-68096 audit: fix recursive locking deadlock in audit_dupe_exe()

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-11 08:09]

Information published.

> CVE-2026-68185 LoongArch: Move jump_label_init() before parse_early_param()

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-11 08:09]

Information published.

> Only Half of UK Manufacturers Have a Cyber Incident Response Plan

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2026-08-11 08:00]

Make UK reveals major cyber resilience gaps as 30% of UK manufacturers report recent cyber incidents

> CVE-2026-68338 net/packet: avoid fanout hook re-registration after unregister

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-11 08:09]

Information published.

> CVE-2026-68145 iomap: fix out-of-bounds bitmap_set() with zero-length range

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-11 08:09]

Information published.

> Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-08-11 06:55]

Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular network the local grid operator uses to reach remote equipment. The plant supplies heat to roughly 50,000 residents. Recovery began at about 7:...

> CVE-2026-68366 usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-11 08:09]

Information published.

> CVE-2026-68234 drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-11 08:09]

Information published.

> GPT-5.6-Cyber refuses security researchers’ requests far less often

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-08-11 06:32]

GPT-5.6-Cyber is a new OpenAI model built on GPT-5.6 Sol, trained to find zero-day vulnerabilities and build exploit chains, with fewer refusals on higher-risk, dual-use work. Model is available only through Daybreak Red, the higher tier of OpenAI’s vetted access program for cybersecurity profession...

> CVE-2026-68176 tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-11 08:09]

Information published.

> CVE-2026-15534 Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch