Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Topic: Vulnerability Clear all filters
↑
  1. Reported 70Vulnerability
    Published 4 Nov 2026, 08:27 UTC

    Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million

    Source: SecurityWeek
  2. Reported 70Vulnerability
    Published 4 Nov 2026, 07:46 UTC

    Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction

    Source: The Hacker News
    Impact Everyday lifeVendor Google
    CVE-2026-58868
  3. Unverified 30Vulnerability
    Published 4 Nov 2026, 05:28 UTC

    Finding 40+ Vulnerabilities in Healthcare Software Serving More Than 100 Million Patients

    Source: r/netsec
    Impact Everyday life
  4. Confirmed 100Vulnerability
    Published 3 Nov 2026, 21:32 UTC

    CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

    Source: AWS Security Bulletins
    CVE-2026-119084
  5. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:58 UTC

    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115413
  6. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:54 UTC

    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-121652
  7. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:26 UTC

    CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

    Source: AWS Security Bulletins
    CVE-2026-119922
  8. Reported 70Vulnerability
    Published 3 Nov 2026, 15:59 UTC

    Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

    Source: The Hacker News
    Vendor Barracuda
    CVE-2026-116606
  9. Reported 70Vulnerability
    Published 3 Nov 2026, 15:35 UTC

    LLMjacking Emerges as Thriving Cybercriminal Enterprise

    Source: Dark Reading
  10. Confirmed 100Vulnerability
    Published 31 Oct 2026, 05:21 UTCUpdated 2 days ago

    Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

    3 sources: AWS Security Bulletins, Fortinet PSIRT, The Hacker News
    Impact Everyday lifeVendor Linux
    CVE-2026-98432
  11. Unverified 30Vulnerability
    Published 3 Nov 2026, 10:19 UTC

    A primer on TETRA mission-critical radio network authentication flaws

    Source: r/netsec
    Impact Everyday life
  12. Reported 70Vulnerability
    Published 3 Nov 2026, 08:31 UTC

    Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets

    Source: The Hacker News
  13. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:43 UTC

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
  14. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:40 UTC

    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-105811
  15. Reported 60Vulnerability
    Published 2 Nov 2026, 20:20 UTC

    What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

    Source: Microsoft Security Blog
  16. Confirmed 100Vulnerability
    Published 2 Nov 2026, 19:19 UTC

    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-120497
  17. Confirmed 100Vulnerability
    Published 2 Nov 2026, 16:40 UTC

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Source: AWS Security Bulletins
    Impact Everyday lifeVendor AWSVendor Apache
    CVE-2026-119301
  18. Reported 70Vulnerability
    Published 2 Nov 2026, 11:50 UTC

    Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

    Source: The Hacker News
  19. Reported 70Vulnerability
    Published 2 Nov 2026, 11:30 UTC

    Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy

    Source: The Hacker News
  20. Unverified 30Vulnerability
    Published 2 Nov 2026, 09:30 UTC

    Remote code execution on Linux systems with multipath TCP

    Source: r/netsec
    Vendor Linux
  21. Unverified 30Vulnerability
    Published 2 Nov 2026, 09:11 UTC

    WordPress pingback and Brotli RCE

    Source: r/netsec
    Vendor WordPress
  22. Unverified 30Vulnerability
    Published 1 Nov 2026, 10:15 UTC

    Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide

    Source: r/netsec
    CVE-2026-69836
  23. Reported 70Vulnerability
    Published 1 Nov 2026, 08:51 UTC

    CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

    Source: The Hacker News
  24. Reported 70Vulnerability
    Published 31 Oct 2026, 05:33 UTC

    A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

    Source: The Hacker News
  25. Confirmed 100Vulnerability
    Published 30 Oct 2026, 18:18 UTC

    CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    Source: AWS Security Bulletins
    CVE-2026-119117
← NewerOlder →