Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDay: 2026-10-28 Confidence: Confirmed Clear all filters
↑
  1. Confirmed 100Exploited
    Published 28 Oct 2026, 21:58 UTCUpdated 5 days ago

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497
  2. Confirmed 100Vulnerability
    Published 28 Oct 2026, 01:14 UTCUpdated 6 days ago

    A Vulnerability in Brotli Library Could Allow for Remote Code Execution

    Source: MS-ISAC Advisories
    Vendor GitLab
  3. Confirmed 100Vulnerability
    Published 28 Oct 2026, 21:54 UTC

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  4. Confirmed 100Vulnerability
    Published 28 Oct 2026, 19:39 UTC

    CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools

    Source: AWS Security Bulletins
    CVE-2026-115415
  5. Confirmed 100Vulnerability
    Published 28 Oct 2026, 19:15 UTC

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  6. Confirmed 100Vulnerability
    Published 28 Oct 2026, 15:40 UTC

    CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-118029