Security Signal

Cyber news feed: exploited in the wild

Stories about vulnerabilities attackers are using now, including new entries in CISA’s Known Exploited Vulnerabilities catalogue.

Filtered byExploited Unverified shown Source type: Security press Clear all filters
↑
  1. Reported 80Exploited
    Published 5 Nov 2026, 05:17 UTC

    Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

    Source: The Hacker News
    Vendor Apple
    CVE-2024-27834
  2. Reported 80Exploited
    Published 4 Nov 2026, 05:43 UTC

    CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

    Source: The Hacker News
    Vendor WordPress
    CVE-2026-119977
  3. Reported 80Exploited
    Published 31 Oct 2026, 08:27 UTC

    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

    Source: The Hacker News
    Vendor Ivanti
    CVE-2026-111357
  4. Reported 70Actively exploited
    Published 30 Oct 2026, 07:45 UTC

    Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

    Source: The Hacker News
    Impact Everyday life
    CVE-2026-118539
  5. Reported 80Exploited
    Published 30 Oct 2026, 07:27 UTC

    CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

    Source: The Hacker News
    Vendor CiscoVendor GitLab
    CVE-2026-97229
  6. Reported 70Actively exploited
    Published 28 Oct 2026, 19:56 UTC

    Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble

    Source: The Register (Security)
    Vendor Oracle