Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 30d Unverified shown Clear all filters
↑
  1. Reported 70Breach / leak
    Published 2 Nov 2026, 05:51 UTC

    New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value

    Source: The Hacker News
  2. Unverified 30Other
    Published 2 Nov 2026, 04:32 UTC

    Investigating three incidents in our evaluations

    Source: r/netsec
  3. Unverified 30Other
    Published 1 Nov 2026, 17:19 UTC

    /r/netsec's Q4 2026 Information Security Hiring Thread

    Source: r/netsec
  4. Unverified 30Other
    Published 1 Nov 2026, 14:29 UTC

    r/netsec monthly discussion & tool thread

    Source: r/netsec
  5. Unverified 30Vulnerability
    Published 1 Nov 2026, 10:15 UTC

    Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide

    Source: r/netsec
  6. Reported 70Vulnerability
    Published 1 Nov 2026, 08:51 UTC

    CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

    Source: The Hacker News
  7. Reported 70Other
    Published 1 Nov 2026, 07:25 UTC

    Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

    Source: The Hacker News
  8. Reported 70Policy / law
    Published 1 Nov 2026, 07:03 UTC

    FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist

    Source: The Hacker News
  9. Reported 70Malware
    Published 1 Nov 2026, 07:02 UTC

    NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection

    Source: The Hacker News
  10. Reported 70Breach / leak
    Published 31 Oct 2026, 12:01 UTC

    Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data

    Source: The Hacker News
  11. Reported 70Malware
    Published 31 Oct 2026, 12:00 UTC

    Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims

    Source: WIRED Security
  12. Reported 60Malware
    Published 31 Oct 2026, 12:00 UTC

    Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer

    Source: Cisco Talos
  13. Confirmed 100Exploited
    Published 30 Oct 2026, 12:00 UTCUpdated 6 days ago

    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

    2 sources: CISA Advisories, The Hacker News
  14. Reported 70Vulnerability
    Published 31 Oct 2026, 05:33 UTC

    A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

    Source: The Hacker News
  15. Reported 70Threat actor
    Published 31 Oct 2026, 04:56 UTC

    Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%

    Source: The Hacker News
  16. Confirmed 100Exploited
    Published 27 Oct 2026, 12:00 UTCUpdated 7 days ago

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    3 sources: CISA Advisories, AWS Security Bulletins, Palo Alto Networks Security Advisories
  17. Reported 70Other
    Published 31 Oct 2026, 02:12 UTC

    Why North Korea's 'elite' hackers are the prime suspect in major Binance hack

    Source: BBC News Technology
  18. Reported 60Malware
    Published 31 Oct 2026, 01:02 UTC

    Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

    Source: Microsoft Security Blog
  19. Reported 70Other
    Published 30 Oct 2026, 21:08 UTC

    Investors Dish on New Startups & What They'd Back Next

    Source: Dark Reading
  20. Reported 70Malware
    Published 30 Oct 2026, 20:38 UTC

    A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices

    Source: WIRED Security
  21. Corroborated 75Malware
    Published 30 Oct 2026, 08:55 UTCUpdated 7 days ago

    Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

    2 sources: The Hacker News, Dark Reading
  22. Reported 70Policy / law
    Published 30 Oct 2026, 19:46 UTC

    Behind the Scenes of How Operation Blackout Went Down

    Source: Dark Reading
  23. Reported 70Ransomware
    Published 30 Oct 2026, 19:37 UTC

    Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see

    Source: The Register (Security)
  24. Confirmed 100Exploited
    Published 29 Oct 2026, 18:00 UTCUpdated 7 days ago

    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
  25. Confirmed 100Vulnerability
    Published 30 Oct 2026, 18:18 UTC

    CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    Source: AWS Security Bulletins