Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 30d Source type: Vendor research Clear all filters

Threat dashboard (filtered)

Threat levelGuarded2 stories about actively exploited flaws in the last 7 days

56stories, 30 days 3exploited 8breaches & ransomware 11affect everyday life 8new KEV entries

Key insights

36 stories this week, ▲ 80% on the previous week.
1 involve vulnerabilities exploited in the wild, ▼ 50% on the previous week.
4 breaches or ransomware attacks reported, no change on the previous week.
Most reported vendor this week: Apple (3 stories).
CISA added 12 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (13 sources): PHP2Shell: What to know about two critical PHP flaws.

Daily activity, last 14 days

52 stories · busiest Thu 29 (10) · last 7 days ▲ 0% vs the week before

3Fri
23 Sat
24 Sun
25 1Mon
26 5Tue
27 7Wed
28 10Thu
29 7Fri
30 2Sat
31 Sun
1 6Mon
2 8Tue
3 3Wed
4 Thu
5

Exploited Breach / ransomware Other · click a day to filter

Most reported vendors

Countries in the news

Fewer More · click a country to filter

United Kingdom 1 Ukraine 1

Vulnerabilities to watch

CVE-2024-27834Apple Multiple Products
CVE-2026-109618PHP Group PHP
CVE-2026-109619PHP Group PHP
CVE-2026-111357Ivanti Connect Secure
CVE-2026-111497Google Brotli
CVE-2026-114625Arista VeloCloud Orchestrator

New exploited flaws by vendor (CISA KEV)

Topics

Source mix

Confidence

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

↑

Reported 60Other
Published 4 Nov 2026, 18:49 UTC

The fake $750 Apple Cash reward that pays out nothing

Source: Malwarebytes Labs

Vendor Apple
Corroborated 75Other
Published 3 Nov 2026, 16:10 UTCUpdated 11 h ago

Password manager mSecure tells users to change passwords, won't say why

2 sources: The Register (Security), Malwarebytes Labs

Impact Everyday life
Corroborated 75Other
Published 4 Nov 2026, 10:38 UTCUpdated 15 h ago

Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical

2 sources: SecurityWeek, Malwarebytes Labs

Vendor Google
Confirmed 100Exploited
Published 23 Oct 2026, 12:00 UTCUpdated 16 h ago

PHP2Shell: What to know about two critical PHP flaws

2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity

Vendor Adobe Vendor Apple Vendor Arista Vendor Broadcom Vendor GitLab Vendor Google Vendor Ivanti Vendor Linux
CVE-2026-114625 CVE-2026-109618 CVE-2026-109619 CVE-2026-48356 CVE-2026-111497 CVE-2026-41709+6 more
Reported 60Malware
Published 4 Nov 2026, 09:55 UTC

SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware

Source: ESET WeLiveSecurity
Reported 60Threat actor
Published 3 Nov 2026, 17:32 UTC

Fake-download campaign uses trojanized installers to deliver monetization payloads

Source: Microsoft Security Blog
Reported 60Other
Published 3 Nov 2026, 17:00 UTC

Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms

Source: Microsoft Security Blog

Vendor Microsoft
Reported 60Malware
Published 3 Nov 2026, 14:11 UTC

A hidden backdoor put 1.3 million TV boxes to work for criminals

Source: Malwarebytes Labs
Reported 60Threat actor
Published 3 Nov 2026, 13:57 UTC

Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles

Source: Check Point Research
Reported 60Policy / law
Published 3 Nov 2026, 12:01 UTC

Hackers put porn on public billboards and claim it was “far too easy”

Source: Malwarebytes Labs
Reported 60Breach / leak
Published 3 Nov 2026, 11:26 UTC

Revolve card breach: 1.5 million people may be affected

Source: Malwarebytes Labs

Impact Everyday life
Reported 60Malware
Published 3 Nov 2026, 09:50 UTC

Gorbag: Orcs at the border harvesting intelligence from Ukraine

Source: ESET WeLiveSecurity

Country Ukraine
Reported 60Ransomware
Published 2 Nov 2026, 23:00 UTC

Unit 42 Threat Intelligence Highlights - Nov. 2, 2026

Source: Unit 42
Reported 60Vulnerability
Published 2 Nov 2026, 20:20 UTC

What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

Source: Microsoft Security Blog
Reported 60Breach / leak
Published 2 Nov 2026, 15:57 UTC

2nd November – Threat Intelligence Report

Source: Check Point Research
Reported 60Other
Published 2 Nov 2026, 14:24 UTC

5 stars for sale: Inside the underground fake review trade

Source: Malwarebytes Labs
Corroborated 75Other
Published 30 Oct 2026, 21:48 UTCUpdated 3 days ago

Applebee’s exposed customers’ personal data after leaving database password in app

2 sources: TechCrunch Security, Malwarebytes Labs

Impact Everyday life
Reported 60Other
Published 2 Nov 2026, 09:55 UTC

When confusion reigns, trusted vendors must guide their SMB customers

Source: ESET WeLiveSecurity

Impact Everyday life
Reported 60Other
Published 2 Nov 2026, 08:01 UTC

A week in security (October 26 – November 1)

Source: Malwarebytes Labs
Reported 60Malware
Published 31 Oct 2026, 12:00 UTC

Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer

Source: Cisco Talos
Reported 60Malware
Published 31 Oct 2026, 01:02 UTC

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Source: Microsoft Security Blog
Confirmed 100Exploited
Published 29 Oct 2026, 18:00 UTCUpdated 5 days ago

CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories

Vendor Cisco Vendor PHP Group Vendor Palo Alto Networks
CVE-2026-109618 CVE-2026-109619
Reported 60Other
Published 30 Oct 2026, 16:11 UTC

From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths

Source: Microsoft Security Blog
Reported 60Other
Published 30 Oct 2026, 15:25 UTC

Fake PDF and search tools hijacked searches for 13.4 million Chrome users

Source: Malwarebytes Labs

Vendor Google
Reported 60Other
Published 30 Oct 2026, 15:03 UTC

This month in security with Tony Anscombe – October 2026 edition

Source: ESET WeLiveSecurity