Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byUnverified shown Vendor: Google Clear all filters
↑
  1. Confirmed 100Exploited
    Published 4 Nov 2026, 18:52 UTC

    Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026

    Source: Cisco Security Advisories
    Vendor CiscoVendor Google
    CVE-2026-111497
  2. Reported 70Malware
    Published 4 Nov 2026, 16:24 UTC

    Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet

    Source: Dark Reading
    Vendor Google
  3. Unverified 30Malware
    Published 4 Nov 2026, 15:27 UTC

    Chinese Botnet (XCPE on Android) Broken

    Source: r/netsec
    Vendor Google
  4. Reported 70Threat actor
    Published 4 Nov 2026, 14:38 UTC

    Russian hackers target iOS and Android users with n-day exploits

    Source: Help Net Security
    Impact Everyday lifeVendor Google
  5. Reported 70Threat actor
    Published 4 Nov 2026, 14:27 UTC

    APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

    Source: The Hacker News
    Impact Everyday lifeVendor Google
  6. Corroborated 75Other
    Published 4 Nov 2026, 10:38 UTCUpdated 16 h ago

    Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical

    2 sources: SecurityWeek, Malwarebytes Labs
    Vendor Google
  7. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTCUpdated 16 h ago

    PHP2Shell: What to know about two critical PHP flaws

    2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  8. Reported 70Vulnerability
    Published 4 Nov 2026, 07:46 UTC

    Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction

    Source: The Hacker News
    Impact Everyday lifeVendor Google
    CVE-2026-58868
  9. Reported 70Threat actor
    Published 3 Nov 2026, 15:41 UTC

    Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges

    Source: The Hacker News
    Vendor Google
  10. Unverified 30Other
    Published 3 Nov 2026, 12:35 UTC

    Pass-ta-key Golden Attack: Stealing Google Password Manager Synced Passkeys for Offline Account Takeover

    Source: r/netsec
    Vendor Google
  11. Reported 70Malware
    Published 2 Nov 2026, 19:03 UTC

    Cops bust botnet of 1.3M infected Android TV boxes

    Source: The Register (Security)
    Vendor Google
  12. Reported 70Breach / leak
    Published 2 Nov 2026, 16:57 UTC

    ⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

    Source: The Hacker News
    Vendor GoogleVendor Linux
  13. Reported 70Malware
    Published 2 Nov 2026, 15:50 UTC

    Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access

    Source: The Hacker News
    Vendor Google
  14. Confirmed 100Exploited
    Published 28 Oct 2026, 21:58 UTCUpdated 5 days ago

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497
  15. Reported 60Other
    Published 30 Oct 2026, 15:25 UTC

    Fake PDF and search tools hijacked searches for 13.4 million Chrome users

    Source: Malwarebytes Labs
    Vendor Google
  16. Reported 60Vulnerability
    Published 28 Oct 2026, 11:13 UTC

    Chrome and Firefox updates fix serious security flaws. Install now

    Source: Malwarebytes Labs
    Vendor Google
  17. Confirmed 100Vulnerability
    Published 27 Oct 2026, 14:41 UTCUpdated 8 days ago

    Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

    Source: MS-ISAC Advisories
    Impact Everyday lifeVendor AppleVendor Google
  18. Reported 70Vulnerability
    Published 26 Oct 2026, 17:58 UTC

    Microsoft releases emergency .NET security fixes for Google Brotli bug

    Source: The Register (Security)
    Vendor GoogleVendor Microsoft
  19. Confirmed 100Exploited
    Published 26 Oct 2026, 07:00 UTC

    Node2Shell CVEs

    Source: Fortinet PSIRT
    Vendor Google
    CVE-2026-111497CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-105481CVE-2026-106072