Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byConfidence: Confirmed Clear all filters
↑
  1. Confirmed 100Vulnerability
    Published 3 Nov 2026, 21:32 UTC

    CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

    Source: AWS Security Bulletins
    CVE-2026-119084
  2. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:58 UTC

    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115413
  3. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:54 UTC

    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-121652
  4. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:26 UTC

    CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

    Source: AWS Security Bulletins
    CVE-2026-119922
  5. Confirmed 100Vulnerability
    Published 3 Nov 2026, 12:00 UTC

    Subnet Solutions PowerSYSTEM Center

    Source: CISA Advisories
  6. Confirmed 100Other
    Published 3 Nov 2026, 12:00 UTC

    Artificial intelligence and cyber intrusion

    Source: UK NCSC
  7. Confirmed 100Other
    Published 3 Nov 2026, 12:00 UTC

    Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years

    Source: UK NCSC
    Country United Kingdom
  8. Confirmed 100Vulnerability
    Published 31 Oct 2026, 05:21 UTCUpdated 3 days ago

    Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

    3 sources: AWS Security Bulletins, Fortinet PSIRT, The Hacker News
    Impact Everyday lifeVendor Linux
    CVE-2026-98432
  9. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:43 UTC

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
  10. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:40 UTC

    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-105811
  11. Confirmed 100Vulnerability
    Published 2 Nov 2026, 19:19 UTC

    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-120497
  12. Confirmed 100Policy / law
    Published 2 Nov 2026, 17:41 UTC

    CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

    Source: AWS Security Bulletins
    CVE-2026-119085
  13. Confirmed 100Vulnerability
    Published 2 Nov 2026, 16:40 UTC

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Source: AWS Security Bulletins
    Impact Everyday lifeVendor AWSVendor Apache
    CVE-2026-119301
  14. Confirmed 100Exploited
    Published 30 Oct 2026, 12:00 UTCUpdated 6 days ago

    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

    2 sources: CISA Advisories, The Hacker News
    Vendor Ivanti
    CVE-2026-111357CVE-2026-118527
  15. Confirmed 100Exploited
    Published 27 Oct 2026, 12:00 UTCUpdated 6 days ago

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    3 sources: CISA Advisories, AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497CVE-2026-48356CVE-2026-41709CVE-2026-46300
  16. Confirmed 100Exploited
    Published 29 Oct 2026, 18:00 UTCUpdated 7 days ago

    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  17. Confirmed 100Vulnerability
    Published 30 Oct 2026, 18:18 UTC

    CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    Source: AWS Security Bulletins
    CVE-2026-119117
  18. Confirmed 100Vulnerability
    Published 30 Oct 2026, 17:39 UTC

    CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

    Source: AWS Security Bulletins
    CVE-2026-119086
  19. Confirmed 100Vulnerability
    Published 30 Oct 2026, 16:34 UTC

    CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119116CVE-2026-119148
  20. Confirmed 100Vulnerability
    Published 30 Oct 2026, 02:01 UTC

    A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service

    Source: MS-ISAC Advisories
    Vendor Cisco
  21. Confirmed 100Vulnerability
    Published 28 Oct 2026, 01:14 UTCUpdated 7 days ago

    A Vulnerability in Brotli Library Could Allow for Remote Code Execution

    Source: MS-ISAC Advisories
    Vendor GitLab
  22. Confirmed 100Vulnerability
    Published 29 Oct 2026, 21:22 UTC

    Cisco Finesse Server-Side Request Forgery Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  23. Confirmed 100Vulnerability
    Published 29 Oct 2026, 16:58 UTC

    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119115
  24. Confirmed 100Vulnerability
    Published 29 Oct 2026, 12:00 UTC

    Hitachi Energy TRO600 series products

    Source: CISA Advisories
  25. Confirmed 100Vulnerability
    Published 29 Oct 2026, 12:00 UTC

    Siemens Mendix SAML Module

    Source: CISA Advisories
    Vendor Siemens
← NewerOlder →