Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 30d Unverified shown Clear all filters
↑
  1. Reported 70Threat actor
    Published 31 Oct 2026, 04:56 UTC

    Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%

    Source: The Hacker News
    Vendor Cloudflare
  2. Confirmed 100Exploited
    Published 28 Oct 2026, 21:58 UTCUpdated 5 days ago

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497
  3. Reported 70Other
    Published 31 Oct 2026, 02:12 UTC

    Why North Korea's 'elite' hackers are the prime suspect in major Binance hack

    Source: BBC News Technology
    Country North Korea
  4. Reported 60Malware
    Published 31 Oct 2026, 01:02 UTC

    Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

    Source: Microsoft Security Blog
  5. Reported 70Other
    Published 30 Oct 2026, 21:08 UTC

    Investors Dish on New Startups & What They'd Back Next

    Source: Dark Reading
  6. Reported 70Malware
    Published 30 Oct 2026, 20:38 UTC

    A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices

    Source: WIRED Security
  7. Corroborated 75Malware
    Published 30 Oct 2026, 08:55 UTCUpdated 6 days ago

    Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

    2 sources: The Hacker News, Dark Reading
  8. Reported 70Policy / law
    Published 30 Oct 2026, 19:46 UTC

    Behind the Scenes of How Operation Blackout Went Down

    Source: Dark Reading
    Impact Everyday life
  9. Reported 70Ransomware
    Published 30 Oct 2026, 19:37 UTC

    Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see

    Source: The Register (Security)
  10. Confirmed 100Exploited
    Published 29 Oct 2026, 18:00 UTCUpdated 6 days ago

    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  11. Confirmed 100Vulnerability
    Published 30 Oct 2026, 18:18 UTC

    CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    Source: AWS Security Bulletins
    CVE-2026-119117
  12. Confirmed 100Vulnerability
    Published 30 Oct 2026, 17:39 UTC

    CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

    Source: AWS Security Bulletins
    CVE-2026-119086
  13. Reported 70Threat actor
    Published 30 Oct 2026, 16:58 UTC

    Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

    Source: The Hacker News
  14. Reported 70Other
    Published 30 Oct 2026, 16:48 UTC

    GM cracks the petty cash box for multistate driver tracking settlement

    Source: The Register (Security)
  15. Confirmed 100Vulnerability
    Published 30 Oct 2026, 16:34 UTC

    CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119116CVE-2026-119148
  16. Reported 70Other
    Published 30 Oct 2026, 16:27 UTC

    Anthropic: That Claude Code extension compromise… couldn't be us

    Source: The Register (Security)
    Impact Everyday life
  17. Reported 60Other
    Published 30 Oct 2026, 16:11 UTC

    From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths

    Source: Microsoft Security Blog
  18. Reported 70Vulnerability
    Published 30 Oct 2026, 15:39 UTC

    L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara

    Source: Dark Reading
  19. Reported 60Other
    Published 30 Oct 2026, 15:25 UTC

    Fake PDF and search tools hijacked searches for 13.4 million Chrome users

    Source: Malwarebytes Labs
    Vendor Google
  20. Reported 70Vulnerability
    Published 30 Oct 2026, 15:17 UTC

    TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them

    Source: The Hacker News
  21. Reported 60Other
    Published 30 Oct 2026, 15:03 UTC

    This month in security with Tony Anscombe – October 2026 edition

    Source: ESET WeLiveSecurity
  22. Reported 70Vulnerability
    Published 30 Oct 2026, 14:10 UTC

    Undead Software Projects Continue to Raise Security Risks

    Source: Dark Reading
  23. Reported 70Threat actor
    Published 30 Oct 2026, 14:08 UTC

    WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours

    Source: The Hacker News
    Vendor WordPress
  24. Reported 70Breach / leak
    Published 30 Oct 2026, 14:00 UTC

    North Korean hackers blamed for stealing record $6.3B in Binance breach

    Source: TechCrunch Security
  25. Reported 60Other
    Published 30 Oct 2026, 13:00 UTC

    Photo ID, bank checks, face scan? The UK’s age-check options

    Source: Malwarebytes Labs
    Country United KingdomImpact Everyday life
← NewerOlder →