Security Signal

Cyber news feed: exploited in the wild

Stories about vulnerabilities attackers are using now, including new entries in CISA’s Known Exploited Vulnerabilities catalogue.

Filtered byExploited Confidence: Confirmed Source type: Security press Clear all filters
↑
  1. Confirmed 85Exploited
    Published 5 Nov 2026, 10:56 UTCUpdated yesterday

    Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day

    2 sources: SecurityWeek, Help Net Security
    Vendor Zyxel
    CVE-2026-7273CVE-2026-107441
  2. Confirmed 100Exploited
    Published 4 Nov 2026, 12:00 UTCUpdated 2 days ago

    Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

    2 sources: CISA Advisories, The Hacker News
    Vendor Apple
    CVE-2024-27834
  3. Confirmed 100Exploited
    Published 3 Nov 2026, 12:00 UTCUpdated 3 days ago

    CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

    2 sources: CISA Advisories, The Hacker News
    Vendor WordPress
    CVE-2026-119977
  4. Confirmed 100Exploited
    Published 30 Oct 2026, 12:00 UTCUpdated 7 days ago

    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

    2 sources: CISA Advisories, The Hacker News
    Vendor Ivanti
    CVE-2026-111357CVE-2026-118527