Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Source type: Community Clear all filters
↑
  1. Confirmed 100Vulnerability
    Published 4 Nov 2026, 19:40 UTCUpdated 6 h ago

    CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard

    2 sources: AWS Security Bulletins, r/netsec
    Vendor AWS
    CVE-2026-122192
  2. Unverified 30Other
    Published 4 Nov 2026, 15:49 UTC

    Who Polices the Blockchain? The Binance Heist and the New Gatekeepers

    Source: r/netsec
  3. Unverified 30Malware
    Published 4 Nov 2026, 15:27 UTC

    Chinese Botnet (XCPE on Android) Broken

    Source: r/netsec
    Vendor Google
  4. Unverified 30Vulnerability
    Published 4 Nov 2026, 05:28 UTC

    Finding 40+ Vulnerabilities in Healthcare Software Serving More Than 100 Million Patients

    Source: r/netsec
    Impact Everyday life
  5. Unverified 30Other
    Published 3 Nov 2026, 15:11 UTC

    We found 4,972 "hello" messages hiding thousands of malicious commands targeting Flowise

    Source: r/netsec
  6. Unverified 30Other
    Published 3 Nov 2026, 12:35 UTC

    Pass-ta-key Golden Attack: Stealing Google Password Manager Synced Passkeys for Offline Account Takeover

    Source: r/netsec
    Vendor Google
  7. Unverified 30Vulnerability
    Published 3 Nov 2026, 10:19 UTC

    A primer on TETRA mission-critical radio network authentication flaws

    Source: r/netsec
    Impact Everyday life
  8. Unverified 30Breach / leak
    Published 2 Nov 2026, 23:15 UTC

    CPGuard / OPSSHIELD LLP Breach

    Source: r/netsec
    Impact Everyday life
  9. Unverified 30Other
    Published 2 Nov 2026, 19:16 UTC

    Jailbreaking my car's navigation system just so I can change the time

    Source: r/netsec
    Impact Everyday life
  10. Unverified 30Advisory
    Published 2 Nov 2026, 16:25 UTC

    Fake Nuclear Alert Sent Through Russian Emergencies Ministry App After Hack

    Source: r/netsec
  11. Unverified 30Malware
    Published 2 Nov 2026, 09:43 UTC

    Securing Internet-Critical Software: How We Could Have Backdoored Bash

    Source: r/netsec
  12. Unverified 30Vulnerability
    Published 2 Nov 2026, 09:30 UTC

    Remote code execution on Linux systems with multipath TCP

    Source: r/netsec
    Vendor Linux
  13. Unverified 30Vulnerability
    Published 2 Nov 2026, 09:11 UTC

    WordPress pingback and Brotli RCE

    Source: r/netsec
    Vendor WordPress
  14. Unverified 30Other
    Published 2 Nov 2026, 04:32 UTC

    Investigating three incidents in our evaluations

    Source: r/netsec
  15. Unverified 30Other
    Published 1 Nov 2026, 17:19 UTC

    /r/netsec's Q4 2026 Information Security Hiring Thread

    Source: r/netsec
    Impact Everyday life
  16. Unverified 30Other
    Published 1 Nov 2026, 14:29 UTC

    r/netsec monthly discussion & tool thread

    Source: r/netsec
  17. Unverified 30Vulnerability
    Published 1 Nov 2026, 10:15 UTC

    Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide

    Source: r/netsec
    CVE-2026-69836
  18. Unverified 30Other
    Published 30 Oct 2026, 12:47 UTC

    Supermicro BMC ipmi cves

    Source: r/netsec
  19. Unverified 30Vulnerability
    Published 30 Oct 2026, 03:06 UTC

    php2bitcoin x brotli2coin: live hacking stream

    Source: r/netsec
  20. Unverified 30Breach / leak
    Published 29 Oct 2026, 14:31 UTC

    EMBRACE: How We Hacked the Browsers Embedded in Top Five Desktop AI Assistants · Forever Secur

    Source: r/netsec
  21. Unverified 30Vulnerability
    Published 29 Oct 2026, 14:09 UTC

    TightVNC Viewer Pre-auth RCE

    Source: r/netsec
  22. Unverified 30Vulnerability
    Published 29 Oct 2026, 14:07 UTC

    TeamViewer RCE Vulnerability (CVE-2026-11585)

    Source: r/netsec
    CVE-2026-11585
  23. Unverified 30Other
    Published 29 Oct 2026, 09:15 UTC

    The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only!

    Source: r/netsec
    Vendor Microsoft
  24. Unverified 30Vulnerability
    Published 29 Oct 2026, 08:45 UTC

    Axis Camera Station Deep-Dive: Unauth RCE to Decrypting Every Camera Credential (CVE-2025-30026/30023 + CVE-2026-63286)

    Source: r/netsec
    CVE-2025-30026CVE-2026-63286
  25. Unverified 30Vulnerability
    Published 28 Oct 2026, 21:24 UTC

    Turning the Valve - Exploiting RCE and LPE in the Steam Platform

    Source: r/netsec