Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 7d Unverified shown Vendor: WordPress Clear all filters

Threat dashboard (filtered)

Threat levelGuarded2 stories about actively exploited flaws in the last 7 days

4stories, 30 days 2exploited 0breaches & ransomware 0affect everyday life 8new KEV entries

Key insights

3 stories this week, ▲ 200% on the previous week.
1 involve vulnerabilities exploited in the wild, no change on the previous week.
0 breaches or ransomware attacks reported, no data for the previous week yet.
Most reported vendor this week: WordPress (4 stories).
CISA added 12 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (13 sources): PHP2Shell: What to know about two critical PHP flaws.

Daily activity, last 14 days

4 stories · busiest Fri 23 (1) · last 7 days ▲ 200% vs the week before

1Fri
23 Sat
24 Sun
25 Mon
26 Tue
27 Wed
28 Thu
29 1Fri
30 Sat
31 Sun
1 1Mon
2 Tue
3 1Wed
4 Thu
5

Exploited Breach / ransomware Other · click a day to filter

Most reported vendors

Vulnerabilities to watch

CVE-2026-109618PHP Group PHP · EPSS 100%
CVE-2026-109619PHP Group PHP · EPSS 100%
CVE-2026-111497Google Brotli · EPSS 83%
CVE-2026-97229GitLab Community Edition and Enterprise Edition · EPSS 65%
CVE-2026-48356Adobe Commerce and Magento · EPSS 47%
CVE-2026-46300Linux Kernel · EPSS 16%

New exploited flaws by vendor (CISA KEV)

Topics

Source mix

Confidence

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

↑

Confirmed 100Exploited
Published 23 Oct 2026, 12:00 UTCUpdated 23 h ago

PHP2Shell: What to know about two critical PHP flaws

2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity

Vendor Adobe Vendor Apple Vendor Arista Vendor Broadcom Vendor GitLab Vendor Google Vendor Ivanti Vendor Linux
CVE-2026-114625 CVE-2026-109618 CVE-2026-109619 CVE-2026-48356 CVE-2026-111497 CVE-2026-41709+6 more
Reported 80Exploited
Published 4 Nov 2026, 05:43 UTC

CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

Source: The Hacker News

Vendor WordPress
CVE-2026-119977
Unverified 30Vulnerability
Published 2 Nov 2026, 09:11 UTC

WordPress pingback and Brotli RCE

Source: r/netsec

Vendor WordPress
Reported 70Threat actor
Published 30 Oct 2026, 14:08 UTC

WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours

Source: The Hacker News

Vendor WordPress