Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Clear all filters
↑
  1. Reported 70Other
    Published 29 Oct 2026, 19:05 UTC

    Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers

    Source: The Register (Security)
  2. Reported 70Vulnerability
    Published 29 Oct 2026, 18:15 UTC

    Claude Model Builds Exploits Across Major Browsers & OSes

    Source: Dark Reading
  3. Reported 60Vulnerability
    Published 29 Oct 2026, 18:00 UTC

    A quiet week in infosec <.<

    Source: Cisco Talos
  4. Confirmed 100Vulnerability
    Published 29 Oct 2026, 16:58 UTC

    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

    Source: AWS Security Bulletins
  5. Reported 60Other
    Published 29 Oct 2026, 16:00 UTC

    IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment

    Source: Microsoft Security Blog
  6. Reported 60Threat actor
    Published 29 Oct 2026, 16:00 UTC

    Tracking AI adoption in North Korean threat actor tradecraft

    Source: Microsoft Security Blog
  7. Reported 70Other
    Published 29 Oct 2026, 15:44 UTC

    Threat Modeling With 4 Simple Questions on a White Board

    Source: Dark Reading
  8. Reported 70Other
    Published 29 Oct 2026, 14:47 UTC

    Belgium's tax agency confirms cyberattack, pulls services offline

    Source: The Register (Security)
  9. Unverified 30Breach / leak
    Published 29 Oct 2026, 14:31 UTC

    EMBRACE: How We Hacked the Browsers Embedded in Top Five Desktop AI Assistants · Forever Secur

    Source: r/netsec
  10. Unverified 30Vulnerability
    Published 29 Oct 2026, 14:09 UTC

    TightVNC Viewer Pre-auth RCE

    Source: r/netsec
  11. Reported 60Other
    Published 29 Oct 2026, 14:08 UTC

    Cohere’s Qwen Story: Looks More Like Model Jaggedness

    Source: Check Point Research
  12. Unverified 30Vulnerability
    Published 29 Oct 2026, 14:07 UTC

    TeamViewer RCE Vulnerability (CVE-2026-11585)

    Source: r/netsec
  13. Reported 60Other
    Published 29 Oct 2026, 14:06 UTC

    Malicious Firefox extensions impersonate popular crypto wallets

    Source: Malwarebytes Labs
  14. Reported 60Ransomware
    Published 29 Oct 2026, 14:00 UTC

    IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases

    Source: Cisco Talos
  15. Reported 70Breach / leak
    Published 29 Oct 2026, 13:43 UTC

    Bluesky blocks links to leaked DHS employee data as government seeks takedowns

    Source: TechCrunch Security
  16. Reported 70Other
    Published 29 Oct 2026, 12:33 UTC

    Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying

    Source: The Register (Security)
  17. Confirmed 100Exploited
    Published 29 Oct 2026, 12:00 UTC

    CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software) added to CISA Known Exploited Vulnerabilities

    Source: CISA Known Exploited Vulnerabilities
  18. Reported 70Threat actor
    Published 29 Oct 2026, 12:00 UTC

    Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour

    Source: The Register (Security)
  19. Reported 60Vulnerability
    Published 29 Oct 2026, 11:03 UTC

    Have an older iPhone or iPad? Apple has a security update for you

    Source: Malwarebytes Labs
  20. Reported 70Malware
    Published 29 Oct 2026, 10:30 UTC

    A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards

    Source: WIRED Security
  21. Reported 70Other
    Published 29 Oct 2026, 10:00 UTC

    Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes

    Source: Dark Reading
  22. Reported 60Other
    Published 29 Oct 2026, 10:00 UTC

    NIK C2: The new AI-enabled command-and-control framework

    Source: Cisco Talos
  23. Unverified 30Other
    Published 29 Oct 2026, 09:15 UTC

    The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only!

    Source: r/netsec
  24. Reported 70Other
    Published 29 Oct 2026, 09:00 UTC

    Admin dropped the F-bomb in a password to show hackers who was really 1337

    Source: The Register (Security)
  25. Unverified 30Vulnerability
    Published 29 Oct 2026, 08:45 UTC

    Axis Camera Station Deep-Dive: Unauth RCE to Decrypting Every Camera Credential (CVE-2025-30026/30023 + CVE-2026-63286)

    Source: r/netsec