Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Source type: Official Vendor: Google Clear all filters
↑
  1. Confirmed 100Exploited
    Published 4 Nov 2026, 18:52 UTC

    Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026

    Source: Cisco Security Advisories
    Vendor CiscoVendor Google
    CVE-2026-111497
  2. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTCUpdated yesterday

    PHP2Shell: What to know about two critical PHP flaws

    2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  3. Confirmed 100Exploited
    Published 28 Oct 2026, 21:58 UTCUpdated 6 days ago

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497
  4. Confirmed 100Vulnerability
    Published 27 Oct 2026, 14:41 UTCUpdated 9 days ago

    Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

    Source: MS-ISAC Advisories
    Impact Everyday lifeVendor AppleVendor Google
  5. Confirmed 100Exploited
    Published 26 Oct 2026, 07:00 UTC

    Node2Shell CVEs

    Source: Fortinet PSIRT
    Vendor Google
    CVE-2026-111497CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-105481CVE-2026-106072