Security Signal

Cyber news feed: exploited in the wild

Stories about vulnerabilities attackers are using now, including new entries in CISA’s Known Exploited Vulnerabilities catalogue.

Filtered byExploited Day: 2026-10-27 Confidence: Confirmed Clear all filters

Threat dashboard (filtered)

Threat levelGuarded1 story about actively exploited flaws in the last 7 days

3stories, 30 days 3exploited 0breaches & ransomware 1affect everyday life 4new KEV entries

Key insights

0 stories this week, ▼ 100% on the previous week.
0 involve vulnerabilities exploited in the wild, ▼ 100% on the previous week.
0 breaches or ransomware attacks reported, no data for the previous week yet.
Most reported vendor this week: Google (1 story).
CISA added 4 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (4 sources): CISA Adds Two Known Exploited Vulnerabilities to Catalog.

Daily activity, last 14 days

11 stories · busiest Tue 27 (3) · last 7 days ▼ 43% vs the week before

Sat
24 Sun
25 1Mon
26 3Tue
27 Wed
28 2Thu
29 1Fri
30 Sat
31 Sun
1 Mon
2 1Tue
3 2Wed
4 1Thu
5 Fri
6

Exploited Breach / ransomware Other · click a day to filter

Most reported vendors

Vulnerabilities to watch

CVE-2026-111497Google Brotli · EPSS 83%
CVE-2026-48356Adobe Commerce and Magento · EPSS 47%
CVE-2026-46300Linux Kernel · EPSS 16%
CVE-2026-41709Broadcom VMware ESX · EPSS 1%
CVE-2023-4863Google Chromium WebP
CVE-2026-16436

New exploited flaws by vendor (CISA KEV)

Topics

Actively exploited3

Source mix

Official3

Confidence

Confirmed3

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

↑

Confirmed 100Exploited
Published 27 Oct 2026, 12:00 UTCUpdated 7 days ago

CISA Adds Two Known Exploited Vulnerabilities to Catalog

3 sources: CISA Advisories, AWS Security Bulletins, Palo Alto Networks Security Advisories

Vendor Google Vendor Palo Alto Networks
CVE-2026-111497 CVE-2026-48356 CVE-2026-41709 CVE-2026-46300
Confirmed 100Actively exploited
Published 27 Oct 2026, 14:45 UTCUpdated 10 days ago

Cisco Expressway Series Security Hardening Release: October 2026

Source: Cisco Security Advisories

Impact Everyday life Vendor Cisco
Confirmed 100Exploited
Published 27 Oct 2026, 12:00 UTC

Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz

Source: CISA Advisories

CVE-2023-4863 CVE-2026-16436 CVE-2026-16437 CVE-2026-16438