Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byTopic: Vulnerability Clear all filters
  1. Confirmed 100Vulnerabilityyesterday

    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-121652
  2. Confirmed 100Vulnerabilityyesterday

    CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

    Source: AWS Security Bulletins
    CVE-2026-119922
  3. Reported 70Vulnerabilityyesterday

    Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

    Source: The Hacker News
    Vendor Barracuda
    CVE-2026-116606
  4. Reported 70Vulnerabilityyesterday

    LLMjacking Emerges as Thriving Cybercriminal Enterprise

    Source: Dark Reading
  5. Confirmed 100Vulnerability2 days ago

    Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

    3 sources: AWS Security Bulletins, Fortinet PSIRT, The Hacker News
    Vendor Linux
    CVE-2026-98432
  6. Reported 70Vulnerability2 days ago

    Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets

    Source: The Hacker News
  7. Confirmed 100Vulnerability2 days ago

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
  8. Confirmed 100Vulnerability2 days ago

    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-105811
  9. Reported 60Vulnerability2 days ago

    What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

    Source: Microsoft Security Blog
  10. Confirmed 100Vulnerability2 days ago

    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-120497
  11. Confirmed 100Vulnerability2 days ago

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Source: AWS Security Bulletins
    Vendor AWSVendor Apache
    CVE-2026-119301
  12. Reported 70Vulnerability3 days ago

    Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

    Source: The Hacker News
  13. Reported 70Vulnerability3 days ago

    Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy

    Source: The Hacker News
  14. Reported 70Vulnerability4 days ago

    CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

    Source: The Hacker News
  15. Reported 70Vulnerability5 days ago

    A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

    Source: The Hacker News
  16. Confirmed 100Vulnerability5 days ago

    CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    Source: AWS Security Bulletins
    CVE-2026-119117
  17. Confirmed 100Vulnerability5 days ago

    CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

    Source: AWS Security Bulletins
    CVE-2026-119086
  18. Confirmed 100Vulnerability5 days ago

    CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119116CVE-2026-119148
  19. Reported 70Vulnerability5 days ago

    L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara

    Source: Dark Reading
  20. Reported 70Vulnerability5 days ago

    TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them

    Source: The Hacker News
  21. Reported 70Vulnerability5 days ago

    Undead Software Projects Continue to Raise Security Risks

    Source: Dark Reading
  22. Confirmed 100Vulnerability6 days ago

    A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service

    Source: MS-ISAC Advisories
    Vendor Cisco
  23. Confirmed 100Vulnerability6 days ago

    A Vulnerability in Brotli Library Could Allow for Remote Code Execution

    Source: MS-ISAC Advisories
    Vendor GitLab
  24. Reported 70Vulnerability6 days ago

    Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched

    Source: The Register (Security)
    Vendor Microsoft
  25. Confirmed 100Vulnerability6 days ago

    Cisco Finesse Server-Side Request Forgery Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
← NewerOlder →