Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Confidence: Confirmed Vendor: Google Clear all filters
↑
  1. Confirmed 100Exploited
    Published 4 Nov 2026, 18:52 UTC

    Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026

    Source: Cisco Security Advisories
    Vendor CiscoVendor Google
    CVE-2026-111497
  2. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTCUpdated 24 h ago

    PHP2Shell: What to know about two critical PHP flaws

    2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  3. Confirmed 100Exploited
    Published 28 Oct 2026, 21:58 UTCUpdated 5 days ago

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497
  4. Confirmed 100Vulnerability
    Published 27 Oct 2026, 14:41 UTCUpdated 8 days ago

    Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

    Source: MS-ISAC Advisories
    Impact Everyday lifeVendor AppleVendor Google
  5. Confirmed 100Exploited
    Published 26 Oct 2026, 07:00 UTC

    Node2Shell CVEs

    Source: Fortinet PSIRT
    Vendor Google
    CVE-2026-111497CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-105481CVE-2026-106072