Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Source type: Vendor research Clear all filters
↑
  1. Reported 60Other
    Published 4 Nov 2026, 18:49 UTC

    The fake $750 Apple Cash reward that pays out nothing

    Source: Malwarebytes Labs
    Vendor Apple
  2. Corroborated 75Other
    Published 3 Nov 2026, 16:10 UTCUpdated 11 h ago

    Password manager mSecure tells users to change passwords, won't say why

    2 sources: The Register (Security), Malwarebytes Labs
    Impact Everyday life
  3. Corroborated 75Other
    Published 4 Nov 2026, 10:38 UTCUpdated 16 h ago

    Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical

    2 sources: SecurityWeek, Malwarebytes Labs
    Vendor Google
  4. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTCUpdated 16 h ago

    PHP2Shell: What to know about two critical PHP flaws

    2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  5. Reported 60Malware
    Published 4 Nov 2026, 09:55 UTC

    SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware

    Source: ESET WeLiveSecurity
  6. Reported 60Threat actor
    Published 3 Nov 2026, 17:32 UTC

    Fake-download campaign uses trojanized installers to deliver monetization payloads

    Source: Microsoft Security Blog
  7. Reported 60Other
    Published 3 Nov 2026, 17:00 UTC

    Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms

    Source: Microsoft Security Blog
    Vendor Microsoft
  8. Reported 60Malware
    Published 3 Nov 2026, 14:11 UTC

    A hidden backdoor put 1.3 million TV boxes to work for criminals

    Source: Malwarebytes Labs
  9. Reported 60Threat actor
    Published 3 Nov 2026, 13:57 UTC

    Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles

    Source: Check Point Research
  10. Reported 60Policy / law
    Published 3 Nov 2026, 12:01 UTC

    Hackers put porn on public billboards and claim it was “far too easy”

    Source: Malwarebytes Labs
  11. Reported 60Breach / leak
    Published 3 Nov 2026, 11:26 UTC

    Revolve card breach: 1.5 million people may be affected

    Source: Malwarebytes Labs
    Impact Everyday life
  12. Reported 60Malware
    Published 3 Nov 2026, 09:50 UTC

    Gorbag: Orcs at the border harvesting intelligence from Ukraine

    Source: ESET WeLiveSecurity
    Country Ukraine
  13. Reported 60Ransomware
    Published 2 Nov 2026, 23:00 UTC

    Unit 42 Threat Intelligence Highlights - Nov. 2, 2026

    Source: Unit 42
  14. Reported 60Vulnerability
    Published 2 Nov 2026, 20:20 UTC

    What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

    Source: Microsoft Security Blog
  15. Reported 60Breach / leak
    Published 2 Nov 2026, 15:57 UTC

    2nd November – Threat Intelligence Report

    Source: Check Point Research
  16. Reported 60Other
    Published 2 Nov 2026, 14:24 UTC

    5 stars for sale: Inside the underground fake review trade

    Source: Malwarebytes Labs
  17. Corroborated 75Other
    Published 30 Oct 2026, 21:48 UTCUpdated 3 days ago

    Applebee’s exposed customers’ personal data after leaving database password in app

    2 sources: TechCrunch Security, Malwarebytes Labs
    Impact Everyday life
  18. Reported 60Other
    Published 2 Nov 2026, 09:55 UTC

    When confusion reigns, trusted vendors must guide their SMB customers

    Source: ESET WeLiveSecurity
    Impact Everyday life
  19. Reported 60Other
    Published 2 Nov 2026, 08:01 UTC

    A week in security (October 26 – November 1)

    Source: Malwarebytes Labs
  20. Reported 60Malware
    Published 31 Oct 2026, 12:00 UTC

    Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer

    Source: Cisco Talos
  21. Reported 60Malware
    Published 31 Oct 2026, 01:02 UTC

    Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

    Source: Microsoft Security Blog
  22. Confirmed 100Exploited
    Published 29 Oct 2026, 18:00 UTCUpdated 5 days ago

    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  23. Reported 60Other
    Published 30 Oct 2026, 16:11 UTC

    From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths

    Source: Microsoft Security Blog
  24. Reported 60Other
    Published 30 Oct 2026, 15:25 UTC

    Fake PDF and search tools hijacked searches for 13.4 million Chrome users

    Source: Malwarebytes Labs
    Vendor Google
  25. Reported 60Other
    Published 30 Oct 2026, 15:03 UTC

    This month in security with Tony Anscombe – October 2026 edition

    Source: ESET WeLiveSecurity
Older →