Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 7d Clear all filters
↑
  1. Reported 70Vulnerability
    Published 1 Nov 2026, 08:51 UTC

    CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

    Source: The Hacker News
  2. Reported 70Other
    Published 1 Nov 2026, 07:25 UTC

    Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

    Source: The Hacker News
  3. Reported 70Policy / law
    Published 1 Nov 2026, 07:03 UTC

    FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist

    Source: The Hacker News
    Country North Korea
  4. Reported 70Malware
    Published 1 Nov 2026, 07:02 UTC

    NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection

    Source: The Hacker News
    Vendor Microsoft
  5. Reported 70Breach / leak
    Published 31 Oct 2026, 12:01 UTC

    Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data

    Source: The Hacker News
    Impact Everyday life
  6. Reported 70Malware
    Published 31 Oct 2026, 12:00 UTC

    Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims

    Source: WIRED Security
  7. Reported 60Malware
    Published 31 Oct 2026, 12:00 UTC

    Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer

    Source: Cisco Talos
  8. Reported 80Exploited
    Published 31 Oct 2026, 08:27 UTC

    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

    Source: The Hacker News
    Vendor Ivanti
    CVE-2026-111357
  9. Reported 70Vulnerability
    Published 31 Oct 2026, 05:33 UTC

    A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

    Source: The Hacker News
  10. Reported 70Threat actor
    Published 31 Oct 2026, 04:56 UTC

    Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%

    Source: The Hacker News
    Vendor Cloudflare
  11. Confirmed 100Exploited
    Published 28 Oct 2026, 21:58 UTCUpdated 5 days ago

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497
  12. Reported 70Other
    Published 31 Oct 2026, 02:12 UTC

    Why North Korea's 'elite' hackers are the prime suspect in major Binance hack

    Source: BBC News Technology
    Country North Korea
  13. Reported 60Malware
    Published 31 Oct 2026, 01:02 UTC

    Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

    Source: Microsoft Security Blog
  14. Reported 70Other
    Published 30 Oct 2026, 21:08 UTC

    Investors Dish on New Startups & What They'd Back Next

    Source: Dark Reading
  15. Reported 70Malware
    Published 30 Oct 2026, 20:38 UTC

    A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices

    Source: WIRED Security
  16. Corroborated 75Malware
    Published 30 Oct 2026, 08:55 UTCUpdated 5 days ago

    Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

    2 sources: The Hacker News, Dark Reading
  17. Reported 70Policy / law
    Published 30 Oct 2026, 19:46 UTC

    Behind the Scenes of How Operation Blackout Went Down

    Source: Dark Reading
    Impact Everyday life
  18. Reported 70Ransomware
    Published 30 Oct 2026, 19:37 UTC

    Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see

    Source: The Register (Security)
  19. Confirmed 100Exploited
    Published 29 Oct 2026, 18:00 UTCUpdated 5 days ago

    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  20. Confirmed 100Vulnerability
    Published 30 Oct 2026, 18:18 UTC

    CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    Source: AWS Security Bulletins
    CVE-2026-119117
  21. Confirmed 100Vulnerability
    Published 30 Oct 2026, 17:39 UTC

    CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

    Source: AWS Security Bulletins
    CVE-2026-119086
  22. Reported 70Threat actor
    Published 30 Oct 2026, 16:58 UTC

    Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

    Source: The Hacker News
  23. Reported 70Other
    Published 30 Oct 2026, 16:48 UTC

    GM cracks the petty cash box for multistate driver tracking settlement

    Source: The Register (Security)
  24. Confirmed 100Vulnerability
    Published 30 Oct 2026, 16:34 UTC

    CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119116CVE-2026-119148
  25. Reported 70Other
    Published 30 Oct 2026, 16:27 UTC

    Anthropic: That Claude Code extension compromise… couldn't be us

    Source: The Register (Security)
    Impact Everyday life
← NewerOlder →