Security Signal

Cyber news feed: exploited in the wild

Stories about vulnerabilities attackers are using now, including new entries in CISA’s Known Exploited Vulnerabilities catalogue.

Filtered byExploited Source type: Vendor research Vendor: Palo Alto Networks Clear all filters

Threat dashboard (filtered)

Threat levelGuarded0 stories about actively exploited flaws in the last 7 days

1stories, 30 days 1exploited 0breaches & ransomware 0affect everyday life 2new KEV entries

Key insights

0 stories this week, ▼ 100% on the previous week.
0 involve vulnerabilities exploited in the wild, ▼ 100% on the previous week.
0 breaches or ransomware attacks reported, no data for the previous week yet.
CISA added 2 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.

Daily activity, last 14 days

1 stories · busiest Thu 29 (1) · last 7 days ▼ 100% vs the week before

Tue
27 Wed
28 1Thu
29 Fri
30 Sat
31 Sun
1 Mon
2 Tue
3 Wed
4 Thu
5 Fri
6 Sat
7 Sun
8 Mon
9

Exploited Breach / ransomware Other · click a day to filter

Most reported vendors

Vulnerabilities to watch

CVE-2026-109618PHP Group PHP · EPSS 100%
CVE-2026-109619PHP Group PHP · EPSS 100%

New exploited flaws by vendor (CISA KEV)

PHP Group2

Topics

Actively exploited1

Source mix

Official1

Confidence

Confirmed1

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

↑

Confirmed 100ExploitedPatch available
Published 29 Oct 2026, 18:00 UTCUpdated 9 days ago

CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories

Vendor Cisco Vendor PHP Group Vendor Palo Alto Networks
CVE-2026-109618 CVE-2026-109619