Security Signal

Cyber news feed: exploited in the wild

Stories about vulnerabilities attackers are using now, including new entries in CISA’s Known Exploited Vulnerabilities catalogue.

Filtered byExploited Source type: Vendor research Vendor: Linux Clear all filters

Threat dashboard (filtered)

Threat levelGuarded1 story about actively exploited flaws in the last 7 days

1stories, 30 days 1exploited 0breaches & ransomware 8new KEV entries

Key insights

0 stories this week, ▼ 100% on the previous week.
0 involve vulnerabilities exploited in the wild, ▼ 100% on the previous week.
0 breaches or ransomware attacks reported, no data for the previous week yet.
Most reported vendor this week: Adobe (1 story).
CISA added 12 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (13 sources): PHP2Shell: What to know about two critical PHP flaws.

Activity, last 4 weeks

Less More

Most reported vendors

Vulnerabilities to watch

CVE-2024-27834Apple Multiple Products
CVE-2026-109618PHP Group PHP
CVE-2026-109619PHP Group PHP
CVE-2026-111357Ivanti Connect Secure
CVE-2026-111497Google Brotli
CVE-2026-114625Arista VeloCloud Orchestrator

New exploited flaws by vendor (CISA KEV)

Topics

Actively exploited1

Source mix

Official1

Confidence

Confirmed1

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

Confirmed 100Exploited13 h ago

PHP2Shell: What to know about two critical PHP flaws

2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity

Vendor Adobe Vendor Apple Vendor Arista Vendor Broadcom Vendor GitLab Vendor Google Vendor Ivanti Vendor Linux

CVE-2026-114625 CVE-2026-109618 CVE-2026-109619 CVE-2026-48356 CVE-2026-111497 CVE-2026-41709+6 more