Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDay: 2026-11-02 Topic: Vulnerability Clear all filters
Report / PDF
  1. Confirmed 100Vulnerability2 days ago

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
  2. Confirmed 100Vulnerability2 days ago

    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-105811
  3. Reported 60Vulnerability2 days ago

    What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

    Source: Microsoft Security Blog
  4. Confirmed 100Vulnerability2 days ago

    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-120497
  5. Confirmed 100Vulnerability2 days ago

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Source: AWS Security Bulletins
    Impact Everyday lifeVendor AWSVendor Apache
    CVE-2026-119301
  6. Reported 70Vulnerability3 days ago

    Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

    Source: The Hacker News
  7. Reported 70Vulnerability3 days ago

    Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy

    Source: The Hacker News