Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 7d Unverified shown Clear all filters
↑
  1. Reported 70Breach / leak
    Published 31 Oct 2026, 12:01 UTC

    Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data

    Source: The Hacker News
  2. Reported 70Malware
    Published 31 Oct 2026, 12:00 UTC

    Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims

    Source: WIRED Security
  3. Reported 60Malware
    Published 31 Oct 2026, 12:00 UTC

    Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer

    Source: Cisco Talos
  4. Reported 80Exploited
    Published 31 Oct 2026, 08:27 UTC

    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

    Source: The Hacker News
  5. Reported 70Vulnerability
    Published 31 Oct 2026, 05:33 UTC

    A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

    Source: The Hacker News
  6. Reported 70Threat actor
    Published 31 Oct 2026, 04:56 UTC

    Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%

    Source: The Hacker News
  7. Confirmed 100Exploited
    Published 28 Oct 2026, 21:58 UTCUpdated 5 days ago

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories
  8. Reported 70Other
    Published 31 Oct 2026, 02:12 UTC

    Why North Korea's 'elite' hackers are the prime suspect in major Binance hack

    Source: BBC News Technology
  9. Reported 60Malware
    Published 31 Oct 2026, 01:02 UTC

    Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

    Source: Microsoft Security Blog
  10. Reported 70Other
    Published 30 Oct 2026, 21:08 UTC

    Investors Dish on New Startups & What They'd Back Next

    Source: Dark Reading
  11. Reported 70Malware
    Published 30 Oct 2026, 20:38 UTC

    A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices

    Source: WIRED Security
  12. Corroborated 75Malware
    Published 30 Oct 2026, 08:55 UTCUpdated 6 days ago

    Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

    2 sources: The Hacker News, Dark Reading
  13. Reported 70Policy / law
    Published 30 Oct 2026, 19:46 UTC

    Behind the Scenes of How Operation Blackout Went Down

    Source: Dark Reading
  14. Reported 70Ransomware
    Published 30 Oct 2026, 19:37 UTC

    Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see

    Source: The Register (Security)
  15. Confirmed 100Exploited
    Published 29 Oct 2026, 18:00 UTCUpdated 6 days ago

    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
  16. Confirmed 100Vulnerability
    Published 30 Oct 2026, 18:18 UTC

    CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    Source: AWS Security Bulletins
  17. Confirmed 100Vulnerability
    Published 30 Oct 2026, 17:39 UTC

    CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

    Source: AWS Security Bulletins
  18. Reported 70Threat actor
    Published 30 Oct 2026, 16:58 UTC

    Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

    Source: The Hacker News
  19. Reported 70Other
    Published 30 Oct 2026, 16:48 UTC

    GM cracks the petty cash box for multistate driver tracking settlement

    Source: The Register (Security)
  20. Confirmed 100Vulnerability
    Published 30 Oct 2026, 16:34 UTC

    CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

    Source: AWS Security Bulletins
  21. Reported 70Other
    Published 30 Oct 2026, 16:27 UTC

    Anthropic: That Claude Code extension compromise… couldn't be us

    Source: The Register (Security)
  22. Reported 60Other
    Published 30 Oct 2026, 16:11 UTC

    From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths

    Source: Microsoft Security Blog
  23. Reported 70Vulnerability
    Published 30 Oct 2026, 15:39 UTC

    L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara

    Source: Dark Reading
  24. Reported 60Other
    Published 30 Oct 2026, 15:25 UTC

    Fake PDF and search tools hijacked searches for 13.4 million Chrome users

    Source: Malwarebytes Labs
  25. Reported 70Vulnerability
    Published 30 Oct 2026, 15:17 UTC

    TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them

    Source: The Hacker News