Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 30d Topic: Vulnerability Clear all filters
↑
  1. Reported 70Vulnerability
    Published 26 Oct 2026, 08:00 UTC

    PHP2Shell: No login, no app code, no warning. What next?

    Source: The Register (Security)
  2. Confirmed 100Vulnerability
    Published 25 Oct 2026, 03:11 UTC

    CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-111943
  3. Reported 70Vulnerability
    Published 24 Oct 2026, 12:00 UTC

    The PHP Meltdown Shows How AI Makes Bugs More Exploitable

    Source: WIRED Security
  4. Reported 70Vulnerability
    Published 23 Oct 2026, 19:41 UTC

    Exposed to PHP2Shell? Cyber Experts Weigh in With Advice

    Source: Dark Reading
  5. Confirmed 100Vulnerability
    Published 23 Oct 2026, 19:09 UTC

    CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115845
  6. Reported 60Vulnerability
    Published 23 Oct 2026, 18:12 UTC

    Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

    Source: Microsoft Security Blog
  7. Confirmed 100Vulnerability
    Published 23 Oct 2026, 17:47 UTC

    CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server

    Source: AWS Security Bulletins
    CVE-2026-115812CVE-2026-115813
  8. Reported 70Vulnerability
    Published 23 Oct 2026, 11:38 UTC

    AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack

    Source: Dark Reading
    Vendor Microsoft
  9. Confirmed 100Vulnerability
    Published 22 Oct 2026, 20:40 UTC

    CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115417
  10. Confirmed 100Vulnerability
    Published 22 Oct 2026, 20:07 UTC

    CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server

    Source: AWS Security Bulletins
    CVE-2026-115419
  11. Reported 70Vulnerability
    Published 22 Oct 2026, 19:30 UTC

    Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour

    Source: Dark Reading
  12. Confirmed 100Vulnerability
    Published 22 Oct 2026, 19:03 UTCUpdated 14 days ago

    Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  13. Confirmed 100Vulnerability
    Published 22 Oct 2026, 19:03 UTC

    Multiple Cisco Products Snort 3 Security Hardening Release: October 2026

    Source: Cisco Security Advisories
    Vendor Cisco
    CVE-2026-20043
  14. Confirmed 100Vulnerability
    Published 22 Oct 2026, 18:56 UTC

    CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook

    Source: AWS Security Bulletins
    CVE-2026-115414
  15. Reported 60Vulnerability
    Published 22 Oct 2026, 18:04 UTC

    I had plans for that second

    Source: Cisco Talos
  16. Reported 60Vulnerability
    Published 22 Oct 2026, 17:15 UTC

    EMudhra Intermediate CA Certificates Compromised

    Source: Unit 42
  17. Confirmed 100Vulnerability
    Published 22 Oct 2026, 16:58 UTC

    CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing

    Source: AWS Security Bulletins
    CVE-2026-115416
  18. Reported 70Vulnerability
    Published 22 Oct 2026, 02:24 UTC

    Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

    Source: WIRED Security
← Newer