Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDay: 2026-10-23 Date: 30d Clear all filters
  1. Confirmed 100Exploited14 h ago

    PHP2Shell: What to know about two critical PHP flaws

    2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  2. Reported 70Breach / leak12 days ago

    Trust Is Not What It Seems — and Fraudsters Are Counting on It

    Source: Dark Reading
  3. Reported 70Other12 days ago

    There's a third PHP2Shell bug, but it won't get an emergency fix

    Source: The Register (Security)
  4. Reported 70Vulnerability12 days ago

    Exposed to PHP2Shell? Cyber Experts Weigh in With Advice

    Source: Dark Reading
  5. Reported 70Other12 days ago

    Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack

    Source: The Register (Security)
  6. Confirmed 100Vulnerability12 days ago

    CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115845
  7. Reported 60Vulnerability12 days ago

    Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

    Source: Microsoft Security Blog
  8. Confirmed 100Vulnerability12 days ago

    CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server

    Source: AWS Security Bulletins
    CVE-2026-115812CVE-2026-115813
  9. Reported 70Threat actor12 days ago

    AI Tools Are Generating Massive Attacks for Little Cost

    Source: Dark Reading
  10. Reported 70Other13 days ago

    Why Caribbean Threats Cascade Into Global Cyber-Risk

    Source: Dark Reading
  11. Reported 70Other13 days ago

    Cyber Insurance's New Reality: Underwriting Isn't Enough

    Source: Dark Reading
  12. Reported 60Malware13 days ago

    Infostealer riding the AI Train

    Source: Check Point Research
    Impact Everyday life
  13. Confirmed 100Exploited13 days ago

    CVE-2026-110447 (Collabora Collabora Online – Built-in CODE Server) added to CISA Known Exploited Vulnerabilities

    Source: CISA Known Exploited Vulnerabilities
    Vendor Collabora
    CVE-2026-110447
  14. Reported 70Vulnerability13 days ago

    AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack

    Source: Dark Reading
    Vendor Microsoft
  15. Reported 70Policy / law13 days ago

    Torvalds: AI is fine for competent devs, but spare us the 'drive-by' patches

    Source: The Register (Security)
  16. Reported 70Breach / leak13 days ago

    State Bank of India Suffers a Customer PII Data Leak

    Source: Dark Reading
    Country IndiaImpact Everyday life