Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDay: 2026-10-29 Unverified shown Clear all filters
↑
  1. Confirmed 100Exploited
    Published 29 Oct 2026, 18:00 UTCUpdated 6 days ago

    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  2. Reported 70Vulnerability
    Published 29 Oct 2026, 23:12 UTC

    Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched

    Source: The Register (Security)
    Vendor Microsoft
  3. Reported 70Policy / law
    Published 29 Oct 2026, 22:27 UTC

    Binance pauses withdrawals as hackers suspected of stealing billions in crypto

    Source: TechCrunch Security
  4. Confirmed 100Vulnerability
    Published 29 Oct 2026, 21:22 UTC

    Cisco Finesse Server-Side Request Forgery Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  5. Reported 70Other
    Published 29 Oct 2026, 21:21 UTC

    Anthropic-Themed Phishing Emails Bypass Top Security Tools

    Source: Dark Reading
  6. Reported 70Vulnerability
    Published 29 Oct 2026, 20:15 UTC

    Rethinking Cybersecurity Awareness in the AI Era

    Source: Dark Reading
  7. Reported 70Other
    Published 29 Oct 2026, 19:56 UTC

    Why CTF Competitions May Be More Important Than Ever

    Source: Dark Reading
  8. Reported 70Other
    Published 29 Oct 2026, 19:05 UTC

    Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers

    Source: The Register (Security)
  9. Reported 70Vulnerability
    Published 29 Oct 2026, 18:15 UTC

    Claude Model Builds Exploits Across Major Browsers & OSes

    Source: Dark Reading
  10. Reported 60Vulnerability
    Published 29 Oct 2026, 18:00 UTC

    A quiet week in infosec <.<

    Source: Cisco Talos
  11. Confirmed 100Vulnerability
    Published 29 Oct 2026, 16:58 UTC

    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119115
  12. Reported 60Other
    Published 29 Oct 2026, 16:00 UTC

    IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment

    Source: Microsoft Security Blog
    Vendor Microsoft
  13. Reported 60Threat actor
    Published 29 Oct 2026, 16:00 UTC

    Tracking AI adoption in North Korean threat actor tradecraft

    Source: Microsoft Security Blog
  14. Reported 70Other
    Published 29 Oct 2026, 15:44 UTC

    Threat Modeling With 4 Simple Questions on a White Board

    Source: Dark Reading
  15. Reported 70Other
    Published 29 Oct 2026, 14:47 UTC

    Belgium's tax agency confirms cyberattack, pulls services offline

    Source: The Register (Security)
    Country BelgiumImpact Everyday life
  16. Unverified 30Breach / leak
    Published 29 Oct 2026, 14:31 UTC

    EMBRACE: How We Hacked the Browsers Embedded in Top Five Desktop AI Assistants · Forever Secur

    Source: r/netsec
  17. Unverified 30Vulnerability
    Published 29 Oct 2026, 14:09 UTC

    TightVNC Viewer Pre-auth RCE

    Source: r/netsec
  18. Reported 60Other
    Published 29 Oct 2026, 14:08 UTC

    Cohere’s Qwen Story: Looks More Like Model Jaggedness

    Source: Check Point Research
  19. Unverified 30Vulnerability
    Published 29 Oct 2026, 14:07 UTC

    TeamViewer RCE Vulnerability (CVE-2026-11585)

    Source: r/netsec
    CVE-2026-11585
  20. Reported 60Other
    Published 29 Oct 2026, 14:06 UTC

    Malicious Firefox extensions impersonate popular crypto wallets

    Source: Malwarebytes Labs
  21. Reported 60Ransomware
    Published 29 Oct 2026, 14:00 UTC

    IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases

    Source: Cisco Talos
  22. Reported 70Breach / leak
    Published 29 Oct 2026, 13:43 UTC

    Bluesky blocks links to leaked DHS employee data as government seeks takedowns

    Source: TechCrunch Security
  23. Reported 70Other
    Published 29 Oct 2026, 12:33 UTC

    Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying

    Source: The Register (Security)
    Country United KingdomImpact Everyday life
  24. Confirmed 100Exploited
    Published 29 Oct 2026, 12:00 UTC

    CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software) added to CISA Known Exploited Vulnerabilities

    Source: CISA Known Exploited Vulnerabilities
    Vendor Cisco
    CVE-2026-76418
  25. Reported 70Threat actor
    Published 29 Oct 2026, 12:00 UTC

    Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour

    Source: The Register (Security)
    Vendor GitHub
Older →