Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 7d Unverified shown Vendor: Linux Clear all filters

Threat dashboard (filtered)

Threat levelGuarded1 story about actively exploited flaws in the last 7 days

8stories, 30 days 1exploited 1breaches & ransomware 2affect everyday life 8new KEV entries

Key insights

7 stories this week, ▲ 600% on the previous week.
0 involve vulnerabilities exploited in the wild, ▼ 100% on the previous week.
1 breaches or ransomware attacks reported, no data for the previous week yet.
Most reported vendor this week: Linux (8 stories).
CISA added 12 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (13 sources): PHP2Shell: What to know about two critical PHP flaws.

Daily activity, last 14 days

8 stories · busiest Mon 2 (4) · last 7 days ▲ 600% vs the week before

1Fri
23 Sat
24 Sun
25 Mon
26 Tue
27 Wed
28 Thu
29 Fri
30 1Sat
31 Sun
1 4Mon
2 1Tue
3 Wed
4 1Thu
5

Exploited Breach / ransomware Other · click a day to filter

Most reported vendors

Vulnerabilities to watch

CVE-2026-109618PHP Group PHP · EPSS 100%
CVE-2026-109619PHP Group PHP · EPSS 100%
CVE-2026-111497Google Brotli · EPSS 83%
CVE-2026-97229GitLab Community Edition and Enterprise Edition · EPSS 65%
CVE-2026-48356Adobe Commerce and Magento · EPSS 47%
CVE-2026-46300Linux Kernel · EPSS 16%

New exploited flaws by vendor (CISA KEV)

Topics

Source mix

Confidence

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

↑

Reported 70Vulnerability
Published 5 Nov 2026, 04:31 UTC

OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run

Source: The Hacker News

Vendor Linux
Confirmed 100Exploited
Published 23 Oct 2026, 12:00 UTCUpdated 18 h ago

PHP2Shell: What to know about two critical PHP flaws

2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity

Vendor Adobe Vendor Apple Vendor Arista Vendor Broadcom Vendor GitLab Vendor Google Vendor Ivanti Vendor Linux
CVE-2026-114625 CVE-2026-109618 CVE-2026-109619 CVE-2026-48356 CVE-2026-111497 CVE-2026-41709+6 more
Reported 70Malware
Published 3 Nov 2026, 15:16 UTC

cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes

Source: The Hacker News

Impact Everyday life Vendor Linux
Confirmed 100Vulnerability
Published 31 Oct 2026, 05:21 UTCUpdated 2 days ago

Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

3 sources: AWS Security Bulletins, Fortinet PSIRT, The Hacker News

Impact Everyday life Vendor Linux
CVE-2026-98432
Reported 70Malware
Published 2 Nov 2026, 22:55 UTC

Max-severity bug in widely used OT programming tool exploited to deliver Linux malware

Source: The Register (Security)

Vendor Linux
Reported 70Breach / leak
Published 2 Nov 2026, 16:57 UTC

⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

Source: The Hacker News

Vendor Google Vendor Linux
Reported 70Threat actor
Published 2 Nov 2026, 10:49 UTC

Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts

Source: The Hacker News

Vendor Linux
Unverified 30Vulnerability
Published 2 Nov 2026, 09:30 UTC

Remote code execution on Linux systems with multipath TCP

Source: r/netsec

Vendor Linux