Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDay: 2026-10-29 Unverified shown Clear all filters

Threat dashboard (filtered)

Threat levelGuarded1 story about actively exploited flaws in the last 7 days

36stories, 30 days 2exploited 5breaches & ransomware 4affect everyday life 3new KEV entries

Key insights

2 stories this week, ▼ 94% on the previous week.
0 involve vulnerabilities exploited in the wild, ▼ 100% on the previous week.
0 breaches or ransomware attacks reported, ▼ 100% on the previous week.
Most reported vendor this week: Cisco (1 story).
CISA added 3 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (4 sources): CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL).

Daily activity, last 14 days

405 stories · busiest Thu 5 (75) · last 7 days ▲ 116% vs the week before

16Fri
23 2Sat
24 1Sun
25 19Mon
26 25Tue
27 29Wed
28 36Thu
29 35Fri
30 9Sat
31 7Sun
1 43Mon
2 48Tue
3 60Wed
4 75Thu
5

Exploited Breach / ransomware Other · click a day to filter

Most reported vendors

Countries in the news

Fewer More · click a country to filter

Belgium 1 United Kingdom 1 Italy 1

Vulnerabilities to watch

CVE-2026-109618PHP Group PHP · EPSS 100%
CVE-2026-109619PHP Group PHP · EPSS 100%
CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software · EPSS 1%
CVE-2025-30026 · EPSS 1%
CVE-2026-11585 · EPSS 0%
CVE-2026-119115 · EPSS 0%

New exploited flaws by vendor (CISA KEV)

PHP Group2
Cisco1

Topics

Source mix

Confidence

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

↑

Reported 60Vulnerability
Published 29 Oct 2026, 11:03 UTC

Have an older iPhone or iPad? Apple has a security update for you

Source: Malwarebytes Labs

Impact Everyday life Vendor Apple
Reported 70Malware
Published 29 Oct 2026, 10:30 UTC

A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards

Source: WIRED Security
Reported 70Other
Published 29 Oct 2026, 10:00 UTC

Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes

Source: Dark Reading
Reported 60Other
Published 29 Oct 2026, 10:00 UTC

NIK C2: The new AI-enabled command-and-control framework

Source: Cisco Talos
Unverified 30Other
Published 29 Oct 2026, 09:15 UTC

The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only!

Source: r/netsec

Vendor Microsoft
Reported 70Other
Published 29 Oct 2026, 09:00 UTC

Admin dropped the F-bomb in a password to show hackers who was really 1337

Source: The Register (Security)
Unverified 30Vulnerability
Published 29 Oct 2026, 08:45 UTC

Axis Camera Station Deep-Dive: Unauth RCE to Decrypting Every Camera Credential (CVE-2025-30026/30023 + CVE-2026-63286)

Source: r/netsec

CVE-2025-30026 CVE-2026-63286
Reported 70Vulnerability
Published 29 Oct 2026, 08:00 UTC

Cyber Vulnerabilities Besiege Italy, Absent Clear Cause

Source: Dark Reading

Country Italy
Reported 60Malware
Published 29 Oct 2026, 08:00 UTC

Amatera: How the prolific infostealer works and spreads

Source: ESET WeLiveSecurity
Reported 70Breach / leak
Published 29 Oct 2026, 03:34 UTC

Bluesky Is Blocking Links to a Major Leak of DHS Employee Records

Source: WIRED Security
Reported 70Breach / leak
Published 29 Oct 2026, 00:16 UTC

Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice

Source: Graham Cluley

Impact Everyday life