Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Source type: Official Clear all filters
↑
  1. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:43 UTC

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
  2. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:40 UTC

    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-105811
  3. Confirmed 100Vulnerability
    Published 2 Nov 2026, 19:19 UTC

    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-120497
  4. Confirmed 100Policy / law
    Published 2 Nov 2026, 17:41 UTC

    CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

    Source: AWS Security Bulletins
    CVE-2026-119085
  5. Confirmed 100Vulnerability
    Published 2 Nov 2026, 16:40 UTC

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Source: AWS Security Bulletins
    Impact Everyday lifeVendor AWSVendor Apache
    CVE-2026-119301
  6. Confirmed 100Exploited
    Published 28 Oct 2026, 21:58 UTCUpdated 5 days ago

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497
  7. Confirmed 100Exploited
    Published 29 Oct 2026, 18:00 UTCUpdated 6 days ago

    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  8. Confirmed 100Vulnerability
    Published 30 Oct 2026, 18:18 UTC

    CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    Source: AWS Security Bulletins
    CVE-2026-119117
  9. Confirmed 100Vulnerability
    Published 30 Oct 2026, 17:39 UTC

    CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

    Source: AWS Security Bulletins
    CVE-2026-119086
  10. Confirmed 100Vulnerability
    Published 30 Oct 2026, 16:34 UTC

    CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119116CVE-2026-119148
  11. Confirmed 100Vulnerability
    Published 30 Oct 2026, 02:01 UTC

    A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service

    Source: MS-ISAC Advisories
    Vendor Cisco
  12. Confirmed 100Vulnerability
    Published 28 Oct 2026, 01:14 UTCUpdated 7 days ago

    A Vulnerability in Brotli Library Could Allow for Remote Code Execution

    Source: MS-ISAC Advisories
    Vendor GitLab
  13. Confirmed 100Vulnerability
    Published 29 Oct 2026, 21:22 UTC

    Cisco Finesse Server-Side Request Forgery Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  14. Confirmed 100Vulnerability
    Published 29 Oct 2026, 16:58 UTC

    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119115
  15. Confirmed 100Exploited
    Published 29 Oct 2026, 12:00 UTC

    CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software) added to CISA Known Exploited Vulnerabilities

    Source: CISA Known Exploited Vulnerabilities
    Vendor Cisco
    CVE-2026-76418
  16. Confirmed 100Vulnerability
    Published 28 Oct 2026, 21:54 UTC

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  17. Confirmed 100Vulnerability
    Published 28 Oct 2026, 19:39 UTC

    CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools

    Source: AWS Security Bulletins
    CVE-2026-115415
  18. Confirmed 100Vulnerability
    Published 28 Oct 2026, 19:15 UTC

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  19. Confirmed 100Vulnerability
    Published 28 Oct 2026, 15:40 UTC

    CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-118029
  20. Confirmed 100Vulnerability
    Published 27 Oct 2026, 14:41 UTCUpdated 9 days ago

    Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

    Source: MS-ISAC Advisories
    Impact Everyday lifeVendor AppleVendor Google
  21. Confirmed 100Actively exploited
    Published 27 Oct 2026, 14:45 UTCUpdated 9 days ago

    Cisco Expressway Series Security Hardening Release: October 2026

    Source: Cisco Security Advisories
    Impact Everyday lifeVendor Cisco
  22. Confirmed 100Policy / law
    Published 27 Oct 2026, 12:00 UTC

    From industry concern to practical action: the value of working with regulators

    Source: UK NCSC
  23. Confirmed 100Vulnerability
    Published 26 Oct 2026, 16:50 UTC

    CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115418
  24. Confirmed 100Exploited
    Published 26 Oct 2026, 07:00 UTC

    Node2Shell CVEs

    Source: Fortinet PSIRT
    Vendor Google
    CVE-2026-111497CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-105481CVE-2026-106072
  25. Confirmed 100Vulnerability
    Published 25 Oct 2026, 03:11 UTC

    CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-111943
← NewerOlder →