Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byConfidence: Confirmed Clear all filters

Threat dashboard (filtered)

Threat levelElevated5 stories about actively exploited flaws in the last 7 days

77stories, 30 days 14exploited 0breaches & ransomware 7affect everyday life 8new KEV entries

Key insights

39 stories this week, ▲ 44% on the previous week.
4 involve vulnerabilities exploited in the wild, ▼ 43% on the previous week.
0 breaches or ransomware attacks reported, no data for the previous week yet.
Most reported vendor this week: AWS (8 stories).
CISA added 15 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (14 sources): PHP2Shell: What to know about two critical PHP flaws.

Daily activity, last 14 days

66 stories · busiest Thu 5 (12) · last 7 days ▲ 44% vs the week before

1Sun
25 2Mon
26 6Tue
27 5Wed
28 7Thu
29 5Fri
30 1Sat
31 Sun
1 5Mon
2 9Tue
3 9Wed
4 12Thu
5 4Fri
6 Sat
7

Exploited Breach / ransomware Other · click a day to filter

Most reported vendors

Countries in the news

Fewer More · click a country to filter

United Kingdom 1 United States of America 1

Vulnerabilities to watch

CVE-2026-109618PHP Group PHP · EPSS 100%
CVE-2026-109619PHP Group PHP · EPSS 100%
CVE-2023-4863Google Chromium WebP · EPSS 100%
CVE-2026-111497Google Brotli · EPSS 83%
CVE-2026-110447Collabora Collabora Online – Built-in CODE Server · EPSS 73%
CVE-2026-97229GitLab Community Edition and Enterprise Edition · EPSS 65%

New exploited flaws by vendor (CISA KEV)

Topics

Source mix

Official76
Security press1

Confidence

Confirmed77

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

↑

Confirmed 100Vulnerability
Published 22 Oct 2026, 18:56 UTC

CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook

Source: AWS Security Bulletins

CVE-2026-115414
Confirmed 100Vulnerability
Published 22 Oct 2026, 16:58 UTC

CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing

Source: AWS Security Bulletins

CVE-2026-115416