Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Clear all filters
↑
  1. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:40 UTC

    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

    Source: AWS Security Bulletins
  2. Reported 60Vulnerability
    Published 2 Nov 2026, 20:20 UTC

    What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

    Source: Microsoft Security Blog
  3. Reported 70Breach / leak
    Published 2 Nov 2026, 19:45 UTC

    Germany says lawmakers’ iPhones may have been hacked with spyware

    Source: TechCrunch Security
  4. Confirmed 100Vulnerability
    Published 2 Nov 2026, 19:19 UTC

    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

    Source: AWS Security Bulletins
  5. Unverified 30Other
    Published 2 Nov 2026, 19:16 UTC

    Jailbreaking my car's navigation system just so I can change the time

    Source: r/netsec
  6. Reported 70Malware
    Published 2 Nov 2026, 19:03 UTC

    Cops bust botnet of 1.3M infected Android TV boxes

    Source: The Register (Security)
  7. Reported 70Other
    Published 2 Nov 2026, 18:25 UTC

    If hackers can take control of a supermarket freezer, how vulnerable is other tech?

    Source: BBC News Technology
  8. Confirmed 100Policy / law
    Published 2 Nov 2026, 17:41 UTC

    CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

    Source: AWS Security Bulletins
  9. Reported 70Policy / law
    Published 2 Nov 2026, 17:00 UTC

    Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes

    Source: WIRED Security
  10. Reported 70Breach / leak
    Published 2 Nov 2026, 16:57 UTC

    ⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

    Source: The Hacker News
  11. Reported 70Other
    Published 2 Nov 2026, 16:44 UTC

    Thieves pilfer environment variables from Trigger AI workflow tool

    Source: The Register (Security)
  12. Confirmed 100Vulnerability
    Published 2 Nov 2026, 16:40 UTC

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Source: AWS Security Bulletins
  13. Unverified 30Advisory
    Published 2 Nov 2026, 16:25 UTC

    Fake Nuclear Alert Sent Through Russian Emergencies Ministry App After Hack

    Source: r/netsec
  14. Reported 70Other
    Published 2 Nov 2026, 16:00 UTC

    Token thieves costing companies $100K+ per day in illicit LLM charges

    Source: The Register (Security)
  15. Reported 60Breach / leak
    Published 2 Nov 2026, 15:57 UTC

    2nd November – Threat Intelligence Report

    Source: Check Point Research
  16. Reported 70Malware
    Published 2 Nov 2026, 15:50 UTC

    Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access

    Source: The Hacker News
  17. Reported 70Other
    Published 2 Nov 2026, 15:00 UTC

    Microsoft's AI Risk Report Misses This Key Detail

    Source: Dark Reading
  18. Reported 70Threat actor
    Published 2 Nov 2026, 14:46 UTC

    DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment

    Source: The Hacker News
  19. Reported 70Advisory
    Published 2 Nov 2026, 14:45 UTC

    Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps

    Source: The Register (Security)
  20. Reported 60Other
    Published 2 Nov 2026, 14:24 UTC

    5 stars for sale: Inside the underground fake review trade

    Source: Malwarebytes Labs
  21. Corroborated 75Other
    Published 30 Oct 2026, 21:48 UTCUpdated 3 days ago

    Applebee’s exposed customers’ personal data after leaving database password in app

    2 sources: TechCrunch Security, Malwarebytes Labs
  22. Reported 70Other
    Published 2 Nov 2026, 14:08 UTC

    A fresh wave of cyberattacks has hit Europe’s supermarket refrigerators, destroying food across countries

    Source: TechCrunch Security
  23. Reported 70Threat actor
    Published 2 Nov 2026, 14:00 UTC

    PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia

    Source: Dark Reading
  24. Reported 70Other
    Published 2 Nov 2026, 13:15 UTC

    Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... again

    Source: The Register (Security)
  25. Reported 70Vulnerability
    Published 2 Nov 2026, 11:50 UTC

    Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

    Source: The Hacker News