Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 30d Vendor: GitLab Clear all filters

Threat dashboard (filtered)

Threat levelGuarded2 stories about actively exploited flaws in the last 7 days

5stories, 30 days 2exploited 0breaches & ransomware 0affect everyday life 8new KEV entries

Key insights

3 stories this week, ▲ 50% on the previous week.
1 involve vulnerabilities exploited in the wild, no change on the previous week.
0 breaches or ransomware attacks reported, no data for the previous week yet.
Most reported vendor this week: GitLab (5 stories).
CISA added 12 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (13 sources): PHP2Shell: What to know about two critical PHP flaws.

Daily activity, last 14 days

5 stories · busiest Thu 5 (2) · last 7 days ▲ 50% vs the week before

1Fri
23 Sat
24 Sun
25 Mon
26 Tue
27 1Wed
28 Thu
29 1Fri
30 Sat
31 Sun
1 Mon
2 Tue
3 Wed
4 2Thu
5

Exploited Breach / ransomware Other · click a day to filter

Most reported vendors

Vulnerabilities to watch

CVE-2024-27834Apple Multiple Products
CVE-2026-109618PHP Group PHP
CVE-2026-109619PHP Group PHP
CVE-2026-111357Ivanti Connect Secure
CVE-2026-111497Google Brotli
CVE-2026-114625Arista VeloCloud Orchestrator

New exploited flaws by vendor (CISA KEV)

Topics

Source mix

Confidence

Confirmed4
Reported1

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

Confirmed 100Vulnerability2 h ago

2026-016: Critical Vulnerability in GitLab CE and EE

Source: CERT-EU Advisories

Vendor GitLab
Confirmed 100Vulnerability2 h ago

2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions

Source: CERT-EU Advisories

Vendor GitLab
Confirmed 100Exploited14 h ago

PHP2Shell: What to know about two critical PHP flaws

2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity

Vendor Adobe Vendor Apple Vendor Arista Vendor Broadcom Vendor GitLab Vendor Google Vendor Ivanti Vendor Linux

CVE-2026-114625 CVE-2026-109618 CVE-2026-109619 CVE-2026-48356 CVE-2026-111497 CVE-2026-41709+6 more
Reported 80Exploited6 days ago

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

Source: The Hacker News

Vendor Cisco Vendor GitLab

CVE-2026-97229
Confirmed 100Vulnerability6 days ago

A Vulnerability in Brotli Library Could Allow for Remote Code Execution

Source: MS-ISAC Advisories

Vendor GitLab