Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Source type: Official Clear all filters
↑
  1. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:00 UTC

    Cisco UCS Central Software Remote Code Execution Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  2. Confirmed 100Exploited
    Published 3 Nov 2026, 12:00 UTCUpdated 3 days ago

    CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

    2 sources: CISA Advisories, The Hacker News
    Vendor WordPress
    CVE-2026-119977
  3. Confirmed 100Vulnerability
    Published 3 Nov 2026, 21:32 UTC

    CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

    Source: AWS Security Bulletins
    CVE-2026-119084
  4. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:58 UTC

    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115413
  5. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:54 UTC

    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-121652
  6. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:26 UTC

    CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

    Source: AWS Security Bulletins
    CVE-2026-119922
  7. Confirmed 100Other
    Published 3 Nov 2026, 12:00 UTC

    Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years

    Source: UK NCSC
    Country United Kingdom
  8. Confirmed 100Other
    Published 3 Nov 2026, 12:00 UTC

    Artificial intelligence and cyber intrusion

    Source: UK NCSC
  9. Confirmed 100Vulnerability
    Published 3 Nov 2026, 12:00 UTC

    Subnet Solutions PowerSYSTEM Center

    Source: CISA Advisories
  10. Confirmed 100Vulnerability
    Published 31 Oct 2026, 05:21 UTCUpdated 4 days ago

    Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

    3 sources: AWS Security Bulletins, Fortinet PSIRT, The Hacker News
    Impact Everyday lifeVendor Linux
    CVE-2026-98432
  11. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:43 UTC

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
  12. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:40 UTC

    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-105811
  13. Confirmed 100Vulnerability
    Published 2 Nov 2026, 19:19 UTC

    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-120497
  14. Confirmed 100Policy / law
    Published 2 Nov 2026, 17:41 UTC

    CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

    Source: AWS Security Bulletins
    CVE-2026-119085
  15. Confirmed 100Vulnerability
    Published 2 Nov 2026, 16:40 UTC

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Source: AWS Security Bulletins
    Impact Everyday lifeVendor AWSVendor Apache
    CVE-2026-119301
  16. Confirmed 100Exploited
    Published 30 Oct 2026, 12:00 UTCUpdated 7 days ago

    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

    2 sources: CISA Advisories, The Hacker News
    Vendor Ivanti
    CVE-2026-111357CVE-2026-118527
  17. Confirmed 100Exploited
    Published 27 Oct 2026, 12:00 UTCUpdated 7 days ago

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    3 sources: CISA Advisories, AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497CVE-2026-48356CVE-2026-41709CVE-2026-46300
  18. Confirmed 100Exploited
    Published 29 Oct 2026, 18:00 UTCUpdated 7 days ago

    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  19. Confirmed 100Vulnerability
    Published 30 Oct 2026, 18:18 UTC

    CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    Source: AWS Security Bulletins
    CVE-2026-119117
  20. Confirmed 100Vulnerability
    Published 30 Oct 2026, 17:39 UTC

    CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

    Source: AWS Security Bulletins
    CVE-2026-119086
  21. Confirmed 100Vulnerability
    Published 30 Oct 2026, 16:34 UTC

    CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119116CVE-2026-119148
  22. Confirmed 100Vulnerability
    Published 30 Oct 2026, 02:01 UTC

    A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service

    Source: MS-ISAC Advisories
    Vendor Cisco
  23. Confirmed 100Vulnerability
    Published 28 Oct 2026, 01:14 UTCUpdated 8 days ago

    A Vulnerability in Brotli Library Could Allow for Remote Code Execution

    Source: MS-ISAC Advisories
    Vendor GitLab
  24. Confirmed 100Vulnerability
    Published 29 Oct 2026, 21:22 UTC

    Cisco Finesse Server-Side Request Forgery Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  25. Confirmed 100Vulnerability
    Published 29 Oct 2026, 16:58 UTC

    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119115
← NewerOlder →