Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byVendor: AWS Clear all filters
  1. Confirmed 100Policy / law4 h ago

    CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-122266
  2. Confirmed 100Vulnerability4 h ago

    CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard

    2 sources: AWS Security Bulletins, r/netsec
    Vendor AWS
    CVE-2026-122192
  3. Reported 70Vulnerability9 h ago

    SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

    Source: The Hacker News
    Vendor SonicWall
    CVE-2026-109593
  4. Confirmed 100Exploited14 h ago

    PHP2Shell: What to know about two critical PHP flaws

    2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  5. Reported 70Vulnerability14 h ago

    Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory

    Source: The Hacker News
  6. Confirmed 100Vulnerabilityyesterday

    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115413
  7. Confirmed 100Vulnerabilityyesterday

    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-121652
  8. Reported 70Vulnerabilityyesterday

    Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

    Source: The Hacker News
    Vendor Barracuda
    CVE-2026-116606
  9. Confirmed 100Vulnerability2 days ago

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
  10. Confirmed 100Vulnerability2 days ago

    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-105811
  11. Confirmed 100Vulnerability2 days ago

    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-120497
  12. Confirmed 100Vulnerability2 days ago

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Source: AWS Security Bulletins
    Impact Everyday lifeVendor AWSVendor Apache
    CVE-2026-119301
  13. Reported 70Vulnerability3 days ago

    Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

    Source: The Hacker News
  14. Reported 80Exploited5 days ago

    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

    Source: The Hacker News
    Vendor Ivanti
    CVE-2026-111357
  15. Confirmed 100Vulnerability5 days ago

    CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119116CVE-2026-119148
  16. Reported 70Threat actor5 days ago

    WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours

    Source: The Hacker News
    Vendor WordPress
  17. Reported 80Exploited6 days ago

    CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

    Source: The Hacker News
    Vendor CiscoVendor GitLab
    CVE-2026-97229
  18. Reported 70Vulnerability6 days ago

    Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched

    Source: The Register (Security)
    Vendor Microsoft
  19. Confirmed 100Vulnerability6 days ago

    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119115
  20. Confirmed 100Vulnerability7 days ago

    CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-118029
  21. Reported 60Vulnerability8 days ago

    Chrome and Firefox updates fix serious security flaws. Install now

    Source: Malwarebytes Labs
    Vendor Google
  22. Confirmed 100Vulnerability9 days ago

    CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115418
  23. Confirmed 100Vulnerability11 days ago

    CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-111943
  24. Confirmed 100Vulnerability12 days ago

    CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115845
  25. Confirmed 100Vulnerability13 days ago

    CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115417