Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Clear all filters
↑
  1. Reported 60Malware
    Published 31 Oct 2026, 12:00 UTC

    Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer

    Source: Cisco Talos
  2. Reported 80Exploited
    Published 31 Oct 2026, 08:27 UTC

    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

    Source: The Hacker News
    Vendor Ivanti
    CVE-2026-111357
  3. Reported 70Vulnerability
    Published 31 Oct 2026, 05:33 UTC

    A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

    Source: The Hacker News
  4. Reported 70Threat actor
    Published 31 Oct 2026, 04:56 UTC

    Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%

    Source: The Hacker News
    Vendor Cloudflare
  5. Confirmed 100Exploited
    Published 28 Oct 2026, 21:58 UTCUpdated 5 days ago

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497
  6. Reported 70Other
    Published 31 Oct 2026, 02:12 UTC

    Why North Korea's 'elite' hackers are the prime suspect in major Binance hack

    Source: BBC News Technology
    Country North Korea
  7. Reported 60Malware
    Published 31 Oct 2026, 01:02 UTC

    Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

    Source: Microsoft Security Blog
  8. Reported 70Other
    Published 30 Oct 2026, 21:08 UTC

    Investors Dish on New Startups & What They'd Back Next

    Source: Dark Reading
  9. Reported 70Malware
    Published 30 Oct 2026, 20:38 UTC

    A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices

    Source: WIRED Security
  10. Corroborated 75Malware
    Published 30 Oct 2026, 08:55 UTCUpdated 5 days ago

    Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

    2 sources: The Hacker News, Dark Reading
  11. Reported 70Policy / law
    Published 30 Oct 2026, 19:46 UTC

    Behind the Scenes of How Operation Blackout Went Down

    Source: Dark Reading
    Impact Everyday life
  12. Reported 70Ransomware
    Published 30 Oct 2026, 19:37 UTC

    Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see

    Source: The Register (Security)
  13. Confirmed 100Exploited
    Published 29 Oct 2026, 18:00 UTCUpdated 5 days ago

    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  14. Confirmed 100Vulnerability
    Published 30 Oct 2026, 18:18 UTC

    CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    Source: AWS Security Bulletins
    CVE-2026-119117
  15. Confirmed 100Vulnerability
    Published 30 Oct 2026, 17:39 UTC

    CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

    Source: AWS Security Bulletins
    CVE-2026-119086
  16. Reported 70Threat actor
    Published 30 Oct 2026, 16:58 UTC

    Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

    Source: The Hacker News
  17. Reported 70Other
    Published 30 Oct 2026, 16:48 UTC

    GM cracks the petty cash box for multistate driver tracking settlement

    Source: The Register (Security)
  18. Confirmed 100Vulnerability
    Published 30 Oct 2026, 16:34 UTC

    CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119116CVE-2026-119148
  19. Reported 70Other
    Published 30 Oct 2026, 16:27 UTC

    Anthropic: That Claude Code extension compromise… couldn't be us

    Source: The Register (Security)
    Impact Everyday life
  20. Reported 60Other
    Published 30 Oct 2026, 16:11 UTC

    From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths

    Source: Microsoft Security Blog
  21. Reported 70Vulnerability
    Published 30 Oct 2026, 15:39 UTC

    L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara

    Source: Dark Reading
  22. Reported 60Other
    Published 30 Oct 2026, 15:25 UTC

    Fake PDF and search tools hijacked searches for 13.4 million Chrome users

    Source: Malwarebytes Labs
    Vendor Google
  23. Reported 70Vulnerability
    Published 30 Oct 2026, 15:17 UTC

    TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them

    Source: The Hacker News
  24. Reported 60Other
    Published 30 Oct 2026, 15:03 UTC

    This month in security with Tony Anscombe – October 2026 edition

    Source: ESET WeLiveSecurity
  25. Reported 70Vulnerability
    Published 30 Oct 2026, 14:10 UTC

    Undead Software Projects Continue to Raise Security Risks

    Source: Dark Reading
← NewerOlder →