Security Signal

Cyber news feed: exploited in the wild

Stories about vulnerabilities attackers are using now, including new entries in CISA’s Known Exploited Vulnerabilities catalogue.

Filtered byExploited Unverified shown Confidence: Reported Clear all filters
  1. Reported 80Exploited20 h ago

    CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

    Source: The Hacker News
    Vendor WordPress
    CVE-2026-119977
  2. Reported 80Exploited5 days ago

    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

    Source: The Hacker News
    Vendor Ivanti
    CVE-2026-111357
  3. Reported 70Actively exploited6 days ago

    Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

    Source: The Hacker News
    Impact Everyday life
    CVE-2026-118539
  4. Reported 80Exploited6 days ago

    CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

    Source: The Hacker News
    Vendor CiscoVendor GitLab
    CVE-2026-97229
  5. Reported 70Exploited7 days ago

    Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

    Source: Cisco Talos
    Vendor Cisco
    CVE-2026-20127
  6. Reported 70Actively exploited7 days ago

    Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble

    Source: The Register (Security)
    Vendor Oracle