IT-Sentinel

> TODAY'S SUMMARY (83 articles)

Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.

// AI-powered summary generated at 16:00

> Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs

[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-07-20 09:07]

A solo Russian-speaking threat actor known as "bandcampro" outsourced a chunk of their operations to Google's open-source Gemini CLI artificial intelligence (AI) and commandeered a live botnet. The findings come from an analysis of 200 Gemini CLI session logs between March 19 and April 21, 2026, wh...

> CVE-2026-45784 rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:40]

Information published.

> CVE-2026-62389 ws < 8.21.1 Default maxFragments Allows Memory Exhaustion DoS

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:40]

Information published.

> The Windows 10 hangover is becoming a security problem

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-07-20 08:37]

Windows 11 now runs on 78.8% of Windows devices after Microsoft ended support for Windows 10 on 14 October 2025, according to Lansweeper. Windows 10 still accounts for 16.9% of devices and no longer receives security updates, leaving newly discovered vulnerabilities unpatched. “There’s a temporary b...

> AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion Campaign

[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2026-07-20 08:21]

Hugging Face says an autonomous AI agent breached part of its production infrastructure and accessed internal data and service credentials. Hugging Face is one of the world’s leading open-source AI companies. It provides a platform where developers and organizations can build, share, and deploy mach...

> Chrome 150 Update Patches Severe Memory Safety Bugs

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-07-20 08:12]

The fresh security update resolves six critical and high-severity use-after-free vulnerabilities. The post Chrome 150 Update Patches Severe Memory Safety Bugs appeared first on SecurityWeek.

> CVE-2026-53398 NFSD: Fix SECINFO_NO_NAME decode error cleanup

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:08]

Information published.

> CVE-2026-63827 apparmor: fix use-after-free in rawdata dedup loop

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:08]

Information published.

> Faille dans 7-Zip : pourquoi vous devriez installer la version 26.02 sans attendre

[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-07-20 07:46]

La version 26.02 de 7-Zip corrige CVE-2026-14266, un débordement de tampon dans le décodage XZ. Faute de mise à jour automatique, l'installation reste manuelle. Le post Faille dans 7-Zip : pourquoi vous devriez installer la version 26.02 sans attendre a été publié sur IT-Connect.

> CVE-2026-63795 9p: avoid putting oldfid in p9_client_walk() error path

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:08]

Information published.

> CVE-2026-53381 virtiofs: fix UAF on submount umount

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:08]

Information published.

> X open source : Elon Musk promet d’ouvrir tout le code du réseau social

[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-07-20 07:29]

Elon Musk annonce que le code de X va passer en open source, mais sans spécifier de calendrier, et juste après le scandale Grok Build, prudence ! Le post X open source : Elon Musk promet d’ouvrir tout le code du réseau social a été publié sur IT-Connect.

> CVE-2026-63808 exfat: fix potential use-after-free in exfat_find_dir_entry()

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:08]

Information published.

> CVE-2026-63831 mac802154: llsec: add skb_cow_data() before in-place crypto