Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 7d Source type: Vendor research Vendor: Google Clear all filters

Threat dashboard (filtered)

Threat levelGuarded1 story about actively exploited flaws in the last 7 days

3stories, 30 days 1exploited 0breaches & ransomware 0affect everyday life 8new KEV entries

Key insights

2 stories this week, ▲ 100% on the previous week.
0 involve vulnerabilities exploited in the wild, ▼ 100% on the previous week.
0 breaches or ransomware attacks reported, no data for the previous week yet.
Most reported vendor this week: Google (3 stories).
CISA added 12 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (13 sources): PHP2Shell: What to know about two critical PHP flaws.

Daily activity, last 14 days

3 stories · busiest Fri 23 (1) · last 7 days ▲ 100% vs the week before

1Fri
23 Sat
24 Sun
25 Mon
26 Tue
27 Wed
28 Thu
29 1Fri
30 Sat
31 Sun
1 Mon
2 Tue
3 1Wed
4 Thu
5

Exploited Breach / ransomware Other · click a day to filter

Most reported vendors

Vulnerabilities to watch

CVE-2026-109618PHP Group PHP · EPSS 100%
CVE-2026-109619PHP Group PHP · EPSS 100%
CVE-2026-111497Google Brotli · EPSS 83%
CVE-2026-97229GitLab Community Edition and Enterprise Edition · EPSS 65%
CVE-2026-48356Adobe Commerce and Magento · EPSS 47%
CVE-2026-46300Linux Kernel · EPSS 16%

New exploited flaws by vendor (CISA KEV)

Topics

Source mix

Confidence

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

↑

Corroborated 75Other
Published 4 Nov 2026, 10:38 UTCUpdated 21 h ago

Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical

2 sources: SecurityWeek, Malwarebytes Labs

Vendor Google
Confirmed 100Exploited
Published 23 Oct 2026, 12:00 UTCUpdated 21 h ago

PHP2Shell: What to know about two critical PHP flaws

2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity

Vendor Adobe Vendor Apple Vendor Arista Vendor Broadcom Vendor GitLab Vendor Google Vendor Ivanti Vendor Linux
CVE-2026-114625 CVE-2026-109618 CVE-2026-109619 CVE-2026-48356 CVE-2026-111497 CVE-2026-41709+6 more
Reported 60Other
Published 30 Oct 2026, 15:25 UTC

Fake PDF and search tools hijacked searches for 13.4 million Chrome users

Source: Malwarebytes Labs

Vendor Google