Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byConfidence: Confirmed Source type: Official Clear all filters
↑
  1. Confirmed 100Vulnerability
    Published 3 Nov 2026, 17:05 UTCUpdated 4 h ago

    Cisco Secure Email Gateway SQL Injection Vulnerability

    2 sources: Cisco Security Advisories, CERT-EU Advisories
    Impact Everyday lifeVendor Cisco
  2. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-018: Critical Vulnerabilities in PHP

    Source: CERT-EU Advisories
  3. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions

    Source: CERT-EU Advisories
    Vendor GitLab
  4. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-016: Critical Vulnerability in GitLab CE and EE

    Source: CERT-EU Advisories
    Vendor GitLab
  5. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-015: Critical Vulnerability in Multiple Atlassian Products

    Source: CERT-EU Advisories
    Vendor Atlassian
  6. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway

    Source: CERT-EU Advisories
    Impact Everyday lifeVendor Citrix
  7. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-013: Critical Vulnerability in F5 BIG-IP APM

    Source: CERT-EU Advisories
    Vendor F5
  8. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-012: Critical Vulnerabilities in Check Point Products

    Source: CERT-EU Advisories
    Vendor Check Point
  9. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

    Source: CERT-EU Advisories
    Vendor SAP
    CVE-2026-44756CVE-2026-58240
  10. Confirmed 100Policy / law
    Published 4 Nov 2026, 21:53 UTC

    CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-122266
  11. Confirmed 100Vulnerability
    Published 4 Nov 2026, 19:40 UTCUpdated 6 h ago

    CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard

    2 sources: AWS Security Bulletins, r/netsec
    Vendor AWS
    CVE-2026-122192
  12. Confirmed 100Vulnerability
    Published 4 Nov 2026, 21:44 UTC

    Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities

    Source: Cisco Security Advisories
    Vendor Cisco
  13. Confirmed 100Vulnerability
    Published 4 Nov 2026, 19:56 UTC

    Cisco Identity Services Engine Authorization Bypass Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  14. Confirmed 100Exploited
    Published 4 Nov 2026, 18:52 UTC

    Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026

    Source: Cisco Security Advisories
    Vendor CiscoVendor Google
    CVE-2026-111497
  15. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:01 UTC

    Cisco Advance Notification for Publication of November 4, 2026, Security Advisories

    Source: Cisco Security Advisories
    Impact Everyday lifeVendor Cisco
    CVE-2026-76506CVE-2026-76419CVE-2026-20241
  16. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:00 UTC

    Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  17. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:00 UTC

    Cisco UCS Central Software Remote Code Execution Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  18. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTCUpdated 16 h ago

    PHP2Shell: What to know about two critical PHP flaws

    2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  19. Confirmed 100Vulnerability
    Published 3 Nov 2026, 21:32 UTC

    CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

    Source: AWS Security Bulletins
    CVE-2026-119084
  20. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:58 UTC

    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115413
  21. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:54 UTC

    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-121652
  22. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:26 UTC

    CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

    Source: AWS Security Bulletins
    CVE-2026-119922
  23. Confirmed 100Other
    Published 3 Nov 2026, 12:00 UTC

    Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years

    Source: UK NCSC
    Country United Kingdom
  24. Confirmed 100Other
    Published 3 Nov 2026, 12:00 UTC

    Artificial intelligence and cyber intrusion

    Source: UK NCSC
  25. Confirmed 100Vulnerability
    Published 31 Oct 2026, 05:21 UTCUpdated 2 days ago

    Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

    3 sources: AWS Security Bulletins, Fortinet PSIRT, The Hacker News
    Impact Everyday lifeVendor Linux
    CVE-2026-98432
Older →