Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDay: 2026-10-23 Clear all filters
↑
  1. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTCUpdated 16 h ago

    PHP2Shell: What to know about two critical PHP flaws

    2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  2. Reported 70Breach / leak
    Published 23 Oct 2026, 20:57 UTC

    Trust Is Not What It Seems — and Fraudsters Are Counting on It

    Source: Dark Reading
  3. Reported 70Other
    Published 23 Oct 2026, 20:04 UTC

    There's a third PHP2Shell bug, but it won't get an emergency fix

    Source: The Register (Security)
  4. Reported 70Vulnerability
    Published 23 Oct 2026, 19:41 UTC

    Exposed to PHP2Shell? Cyber Experts Weigh in With Advice

    Source: Dark Reading
  5. Reported 70Other
    Published 23 Oct 2026, 19:14 UTC

    Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack

    Source: The Register (Security)
  6. Confirmed 100Vulnerability
    Published 23 Oct 2026, 19:09 UTC

    CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115845
  7. Reported 60Vulnerability
    Published 23 Oct 2026, 18:12 UTC

    Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

    Source: Microsoft Security Blog
  8. Confirmed 100Vulnerability
    Published 23 Oct 2026, 17:47 UTC

    CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server

    Source: AWS Security Bulletins
    CVE-2026-115812CVE-2026-115813
  9. Reported 70Threat actor
    Published 23 Oct 2026, 17:26 UTC

    AI Tools Are Generating Massive Attacks for Little Cost

    Source: Dark Reading
  10. Reported 70Other
    Published 23 Oct 2026, 14:00 UTC

    Why Caribbean Threats Cascade Into Global Cyber-Risk

    Source: Dark Reading
  11. Reported 70Other
    Published 23 Oct 2026, 13:30 UTC

    Cyber Insurance's New Reality: Underwriting Isn't Enough

    Source: Dark Reading
  12. Reported 60Malware
    Published 23 Oct 2026, 13:00 UTC

    Infostealer riding the AI Train

    Source: Check Point Research
    Impact Everyday life
  13. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTC

    CVE-2026-110447 (Collabora Collabora Online – Built-in CODE Server) added to CISA Known Exploited Vulnerabilities

    Source: CISA Known Exploited Vulnerabilities
    Vendor Collabora
    CVE-2026-110447
  14. Reported 70Vulnerability
    Published 23 Oct 2026, 11:38 UTC

    AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack

    Source: Dark Reading
    Vendor Microsoft
  15. Reported 70Policy / law
    Published 23 Oct 2026, 11:31 UTC

    Torvalds: AI is fine for competent devs, but spare us the 'drive-by' patches

    Source: The Register (Security)
  16. Reported 70Breach / leak
    Published 23 Oct 2026, 03:30 UTC

    State Bank of India Suffers a Customer PII Data Leak

    Source: Dark Reading
    Country IndiaImpact Everyday life