Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Source type: Official Clear all filters
↑
  1. Confirmed 100Vulnerability
    Published 3 Nov 2026, 17:05 UTCUpdated 5 h ago

    Cisco Secure Email Gateway SQL Injection Vulnerability

    2 sources: Cisco Security Advisories, CERT-EU Advisories
    Impact Everyday lifeVendor Cisco
  2. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-018: Critical Vulnerabilities in PHP

    Source: CERT-EU Advisories
  3. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions

    Source: CERT-EU Advisories
    Vendor GitLab
  4. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-016: Critical Vulnerability in GitLab CE and EE

    Source: CERT-EU Advisories
    Vendor GitLab
  5. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-015: Critical Vulnerability in Multiple Atlassian Products

    Source: CERT-EU Advisories
    Vendor Atlassian
  6. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway

    Source: CERT-EU Advisories
    Impact Everyday lifeVendor Citrix
  7. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-013: Critical Vulnerability in F5 BIG-IP APM

    Source: CERT-EU Advisories
    Vendor F5
  8. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-012: Critical Vulnerabilities in Check Point Products

    Source: CERT-EU Advisories
    Vendor Check Point
  9. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

    Source: CERT-EU Advisories
    Vendor SAP
    CVE-2026-44756CVE-2026-58240
  10. Confirmed 100Policy / law
    Published 4 Nov 2026, 21:53 UTC

    CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-122266
  11. Confirmed 100Vulnerability
    Published 4 Nov 2026, 19:40 UTCUpdated 7 h ago

    CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard

    2 sources: AWS Security Bulletins, r/netsec
    Vendor AWS
    CVE-2026-122192
  12. Confirmed 100Vulnerability
    Published 4 Nov 2026, 21:44 UTC

    Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities

    Source: Cisco Security Advisories
    Vendor Cisco
  13. Confirmed 100Vulnerability
    Published 4 Nov 2026, 19:56 UTC

    Cisco Identity Services Engine Authorization Bypass Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  14. Confirmed 100Exploited
    Published 4 Nov 2026, 18:52 UTC

    Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026

    Source: Cisco Security Advisories
    Vendor CiscoVendor Google
    CVE-2026-111497
  15. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:01 UTC

    Cisco Advance Notification for Publication of November 4, 2026, Security Advisories

    Source: Cisco Security Advisories
    Impact Everyday lifeVendor Cisco
    CVE-2026-76506CVE-2026-76419CVE-2026-20241
  16. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:00 UTC

    Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  17. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:00 UTC

    Cisco UCS Central Software Remote Code Execution Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  18. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTCUpdated 17 h ago

    PHP2Shell: What to know about two critical PHP flaws

    2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  19. Confirmed 100Vulnerability
    Published 3 Nov 2026, 21:32 UTC

    CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

    Source: AWS Security Bulletins
    CVE-2026-119084
  20. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:58 UTC

    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115413
  21. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:54 UTC

    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-121652
  22. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:26 UTC

    CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

    Source: AWS Security Bulletins
    CVE-2026-119922
  23. Confirmed 100Other
    Published 3 Nov 2026, 12:00 UTC

    Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years

    Source: UK NCSC
    Country United Kingdom
  24. Confirmed 100Other
    Published 3 Nov 2026, 12:00 UTC

    Artificial intelligence and cyber intrusion

    Source: UK NCSC
  25. Confirmed 100Vulnerability
    Published 31 Oct 2026, 05:21 UTCUpdated 2 days ago

    Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

    3 sources: AWS Security Bulletins, Fortinet PSIRT, The Hacker News
    Impact Everyday lifeVendor Linux
    CVE-2026-98432
Older →