Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Clear all filters
↑
  1. Reported 60Breach / leak
    Published 27 Oct 2026, 12:22 UTC

    The web’s having a rough week. Here’s how to browse safely

    Source: Malwarebytes Labs
  2. Confirmed 100Policy / law
    Published 27 Oct 2026, 12:00 UTC

    From industry concern to practical action: the value of working with regulators

    Source: UK NCSC
  3. Reported 70Breach / leak
    Published 27 Oct 2026, 11:49 UTC

    Attack on email hosting provider for German far right party AfD exposed 345k accounts

    Source: The Register (Security)
  4. Reported 60Other
    Published 27 Oct 2026, 10:00 UTC

    From federal SOCs to Talos: Ryan Fetterman on practical security research

    Source: Cisco Talos
  5. Reported 70Breach / leak
    Published 27 Oct 2026, 01:06 UTC

    Japanese virtual desktop cloud hacked so hard it asks to be banned

    Source: The Register (Security)
  6. Reported 70Vulnerability
    Published 27 Oct 2026, 00:26 UTC

    So Many AI Security Benchmarks, but None Tell the Whole Story

    Source: Dark Reading
  7. Reported 70Malware
    Published 26 Oct 2026, 22:29 UTC

    Worm armed 42 GitHub repos by hiding a payload too big to fail

    Source: The Register (Security)
  8. Reported 70Other
    Published 26 Oct 2026, 21:44 UTC

    Risks & Rewards: How AI Is Redefining the CISO's Role

    Source: Dark Reading
  9. Reported 70Other
    Published 26 Oct 2026, 21:27 UTC

    Alibaba's Qwen AI caught trying to contact server in China

    Source: The Register (Security)
  10. Reported 70Other
    Published 26 Oct 2026, 20:59 UTC

    In-the-Wild Attack Abuses AI Agents' Trust in Markdown

    Source: Dark Reading
  11. Reported 70Other
    Published 26 Oct 2026, 20:30 UTC

    LiteLLM supply chain attack started with an exposed master key

    Source: The Register (Security)
  12. Reported 70Other
    Published 26 Oct 2026, 18:01 UTC

    'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets

    Source: Dark Reading
  13. Reported 70Vulnerability
    Published 26 Oct 2026, 17:58 UTC

    Microsoft releases emergency .NET security fixes for Google Brotli bug

    Source: The Register (Security)
  14. Confirmed 100Vulnerability
    Published 26 Oct 2026, 16:50 UTC

    CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)

    Source: AWS Security Bulletins
  15. Reported 70Other
    Published 26 Oct 2026, 16:14 UTC

    UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest

    Source: The Register (Security)
  16. Reported 60Breach / leak
    Published 26 Oct 2026, 16:12 UTC

    26th October – Threat Intelligence Report

    Source: Check Point Research
  17. Reported 70Other
    Published 26 Oct 2026, 15:47 UTC

    Trumpets blare and skies part as AI hypefest culminates in Anthropic IPO filing

    Source: The Register (Security)
  18. Reported 70Policy / law
    Published 26 Oct 2026, 14:09 UTC

    The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans

    Source: WIRED Security
  19. Reported 70Vulnerability
    Published 26 Oct 2026, 14:00 UTC

    10 Software Security Practices Built for the Next 250 Years

    Source: Dark Reading
  20. Reported 70Other
    Published 26 Oct 2026, 13:14 UTC

    We shouldn't be surprised about the PHPocalypse, as the internet is built on sticks and glue

    Source: The Register (Security)
  21. Reported 70Other
    Published 26 Oct 2026, 12:38 UTC

    UK Biobank back online soon, months after someone tried to sell 500k people's data on Alibaba

    Source: The Register (Security)
  22. Reported 70Other
    Published 26 Oct 2026, 11:00 UTC

    Britain bets big on AI to defend against the threats AI is helping create

    Source: The Register (Security)
  23. Reported 70Vulnerability
    Published 26 Oct 2026, 08:00 UTC

    PHP2Shell: No login, no app code, no warning. What next?

    Source: The Register (Security)
  24. Confirmed 100Exploited
    Published 26 Oct 2026, 07:00 UTC

    Node2Shell CVEs

    Source: Fortinet PSIRT
  25. Reported 70Other
    Published 26 Oct 2026, 04:08 UTC

    Work to protect DNS from quantum decryption attacks is speeding up

    Source: The Register (Security)