Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDay: 2026-10-28 Date: 30d Clear all filters
↑
  1. Confirmed 100Exploited
    Published 28 Oct 2026, 21:58 UTCUpdated 5 days ago

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497
  2. Confirmed 100Vulnerability
    Published 28 Oct 2026, 01:14 UTCUpdated 6 days ago

    A Vulnerability in Brotli Library Could Allow for Remote Code Execution

    Source: MS-ISAC Advisories
    Vendor GitLab
  3. Reported 70Other
    Published 28 Oct 2026, 23:15 UTC

    Upwind raises $400M after walking away from Datadog acquisition offer

    Source: TechCrunch Security
  4. Confirmed 100Vulnerability
    Published 28 Oct 2026, 21:54 UTC

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  5. Reported 70Exploited
    Published 28 Oct 2026, 21:32 UTC

    Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

    Source: Cisco Talos
    Vendor Cisco
    CVE-2026-20127
  6. Reported 70Vulnerability
    Published 28 Oct 2026, 20:30 UTC

    Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw

    Source: WIRED Security
  7. Reported 70Other
    Published 28 Oct 2026, 20:01 UTC

    Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents

    Source: TechCrunch Security
  8. Reported 70Breach / leak
    Published 28 Oct 2026, 20:00 UTC

    Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents

    Source: WIRED Security
    Impact Everyday life
  9. Reported 70Actively exploited
    Published 28 Oct 2026, 19:56 UTC

    Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble

    Source: The Register (Security)
    Vendor Oracle
  10. Confirmed 100Vulnerability
    Published 28 Oct 2026, 19:39 UTC

    CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools

    Source: AWS Security Bulletins
    CVE-2026-115415
  11. Reported 70Threat actor
    Published 28 Oct 2026, 19:39 UTC

    GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub

    Source: Dark Reading
    Vendor GitHub
  12. Confirmed 100Vulnerability
    Published 28 Oct 2026, 19:15 UTC

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  13. Reported 70Vulnerability
    Published 28 Oct 2026, 18:50 UTCUpdated 7 days ago

    The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO

    Source: TechCrunch Security
  14. Reported 60Ransomware
    Published 28 Oct 2026, 18:00 UTC

    Unwrapping Retail Peak Season Cyber Threats

    Source: Unit 42
    Impact Everyday life
  15. Reported 60Other
    Published 28 Oct 2026, 16:00 UTC

    The CISO’s evolving role: Protecting and defending in the agentic era

    Source: Microsoft Security Blog
  16. Reported 70Ransomware
    Published 28 Oct 2026, 15:52 UTC

    Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles

    Source: The Register (Security)
    Impact Everyday life
  17. Reported 70Other
    Published 28 Oct 2026, 15:41 UTC

    South Korea’s financial industry hit by fresh wave of cyberattacks

    Source: TechCrunch Security
    Country South Korea
  18. Confirmed 100Vulnerability
    Published 28 Oct 2026, 15:40 UTC

    CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-118029
  19. Reported 70Other
    Published 28 Oct 2026, 15:29 UTC

    AI Takes Root in Hospital Corridors, Raises Security Stakes

    Source: Dark Reading
    Impact Everyday life
  20. Reported 70Breach / leak
    Published 28 Oct 2026, 14:37 UTC

    Attacker Relentlessly Scans for Credentials by Impersonating AI Bots

    Source: Dark Reading
  21. Reported 60Other
    Published 28 Oct 2026, 13:38 UTC

    Banks are blocking AI agents from customer accounts

    Source: Malwarebytes Labs
    Impact Everyday life
  22. Reported 70Vulnerability
    Published 28 Oct 2026, 12:00 UTC

    Cisco open sources tool for detecting AI agents on hacking sprees

    Source: The Register (Security)
    Vendor Cisco
  23. Reported 70Breach / leak
    Published 28 Oct 2026, 11:45 UTC

    123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus

    Source: The Register (Security)
    Impact Everyday life
  24. Reported 60Vulnerability
    Published 28 Oct 2026, 11:13 UTC

    Chrome and Firefox updates fix serious security flaws. Install now

    Source: Malwarebytes Labs
    Vendor Google
  25. Reported 60Breach / leak
    Published 28 Oct 2026, 10:33 UTC

    Lessons from Cybersecurity Black Week

    Source: ESET WeLiveSecurity
Older →