Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 30d Unverified shown Source type: Vendor research Clear all filters
↑
  1. Reported 60Other
    Published 4 Nov 2026, 18:49 UTC

    The fake $750 Apple Cash reward that pays out nothing

    Source: Malwarebytes Labs
    Vendor Apple
  2. Corroborated 75Other
    Published 3 Nov 2026, 16:10 UTCUpdated 16 h ago

    Password manager mSecure tells users to change passwords, won't say why

    2 sources: The Register (Security), Malwarebytes Labs
    Impact Everyday life
  3. Corroborated 75Other
    Published 4 Nov 2026, 10:38 UTCUpdated 21 h ago

    Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical

    2 sources: SecurityWeek, Malwarebytes Labs
    Vendor Google
  4. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTCUpdated 21 h ago

    PHP2Shell: What to know about two critical PHP flaws

    2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  5. Reported 60Malware
    Published 4 Nov 2026, 09:55 UTC

    SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware

    Source: ESET WeLiveSecurity
  6. Reported 60Threat actor
    Published 3 Nov 2026, 17:32 UTC

    Fake-download campaign uses trojanized installers to deliver monetization payloads

    Source: Microsoft Security Blog
  7. Reported 60Other
    Published 3 Nov 2026, 17:00 UTC

    Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms

    Source: Microsoft Security Blog
    Vendor Microsoft
  8. Reported 60Malware
    Published 3 Nov 2026, 14:11 UTC

    A hidden backdoor put 1.3 million TV boxes to work for criminals

    Source: Malwarebytes Labs
  9. Reported 60Threat actor
    Published 3 Nov 2026, 13:57 UTC

    Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles

    Source: Check Point Research
  10. Reported 60Policy / law
    Published 3 Nov 2026, 12:01 UTC

    Hackers put porn on public billboards and claim it was “far too easy”

    Source: Malwarebytes Labs
  11. Reported 60Breach / leak
    Published 3 Nov 2026, 11:26 UTC

    Revolve card breach: 1.5 million people may be affected

    Source: Malwarebytes Labs
    Impact Everyday life
  12. Reported 60Malware
    Published 3 Nov 2026, 09:50 UTC

    Gorbag: Orcs at the border harvesting intelligence from Ukraine

    Source: ESET WeLiveSecurity
    Country Ukraine
  13. Reported 60Ransomware
    Published 2 Nov 2026, 23:00 UTC

    Unit 42 Threat Intelligence Highlights - Nov. 2, 2026

    Source: Unit 42
  14. Reported 60Vulnerability
    Published 2 Nov 2026, 20:20 UTC

    What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

    Source: Microsoft Security Blog
  15. Reported 60Breach / leak
    Published 2 Nov 2026, 15:57 UTC

    2nd November – Threat Intelligence Report

    Source: Check Point Research
  16. Reported 60Other
    Published 2 Nov 2026, 14:24 UTC

    5 stars for sale: Inside the underground fake review trade

    Source: Malwarebytes Labs
  17. Corroborated 75Other
    Published 30 Oct 2026, 21:48 UTCUpdated 3 days ago

    Applebee’s exposed customers’ personal data after leaving database password in app

    2 sources: TechCrunch Security, Malwarebytes Labs
    Impact Everyday life
  18. Reported 60Other
    Published 2 Nov 2026, 09:55 UTC

    When confusion reigns, trusted vendors must guide their SMB customers

    Source: ESET WeLiveSecurity
    Impact Everyday life
  19. Reported 60Other
    Published 2 Nov 2026, 08:01 UTC

    A week in security (October 26 – November 1)

    Source: Malwarebytes Labs
  20. Reported 60Malware
    Published 31 Oct 2026, 12:00 UTC

    Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer

    Source: Cisco Talos
  21. Reported 60Malware
    Published 31 Oct 2026, 01:02 UTC

    Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

    Source: Microsoft Security Blog
  22. Confirmed 100Exploited
    Published 29 Oct 2026, 18:00 UTCUpdated 6 days ago

    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  23. Reported 60Other
    Published 30 Oct 2026, 16:11 UTC

    From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths

    Source: Microsoft Security Blog
  24. Reported 60Other
    Published 30 Oct 2026, 15:25 UTC

    Fake PDF and search tools hijacked searches for 13.4 million Chrome users

    Source: Malwarebytes Labs
    Vendor Google
  25. Reported 60Other
    Published 30 Oct 2026, 15:03 UTC

    This month in security with Tony Anscombe – October 2026 edition

    Source: ESET WeLiveSecurity
Older →