Security Signal

Cyber news feed: exploited in the wild

Stories about vulnerabilities attackers are using now, including new entries in CISA’s Known Exploited Vulnerabilities catalogue.

Filtered byExploited Day: 2026-10-28 Source type: Vendor research Clear all filters

Threat dashboard (filtered)

Threat levelGuarded0 stories about actively exploited flaws in the last 7 days

1stories, 30 days 1exploited 0breaches & ransomware 0affect everyday life 0new KEV entries

Key insights

0 stories this week, ▼ 100% on the previous week.
0 involve vulnerabilities exploited in the wild, ▼ 100% on the previous week.
0 breaches or ransomware attacks reported, no data for the previous week yet.

Daily activity, last 14 days

3 stories · busiest Fri 23 (1) · last 7 days ▼ 100% vs the week before

1Fri
23 Sat
24 Sun
25 Mon
26 Tue
27 1Wed
28 1Thu
29 Fri
30 Sat
31 Sun
1 Mon
2 Tue
3 Wed
4 Thu
5

Exploited Breach / ransomware Other · click a day to filter

Most reported vendors

Cisco1

Vulnerabilities to watch

CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager · EPSS 88%

Topics

Actively exploited1

Source mix

Vendor research1

Confidence

Reported1

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

↑

Reported 70Exploited
Published 28 Oct 2026, 21:32 UTC

Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

Source: Cisco Talos

Vendor Cisco
CVE-2026-20127