Security Signal
Threat intelligence report · last 30 days

last 7 days · Threat actor

Generated 7 Nov 2026, 07:47 UTC · Live view: news.rogelio.cloud/?show=all&since=7d&category=threat-actor

Executive summary

  • 27 stories in the last 30 days; 1 (4%) confirmed by official sources.
  • No actively exploited vulnerabilities in this selection.
  • Most common topic: Threat actor (27).
  • Most reported vendor: Google (5 stories).
  • Most mentioned country: Russian Federation.
27
Stories
0
Actively exploited
0
Breaches & ransomware
1
Confirmed by official sources

Stories per day

7 10-0910-1410-1910-2410-2911-0311-07

Daily breakdown, last 14 days

S25 M26 T27 W28 T29 F30 S31 S1 M24 T35 W47 T56 F64 S71

Exploited Breach / ransomware Other

Topics

Countries in the news

Russian Federation 5 · United States of America 2 · Israel 1 · India 1 · Iraq 1

Most reported vendors

Google5Linux1

Top stories · newest days first, most confident within each day

  1. Reported 60Threat actor
    7 Nov 2026
    ARTEX abuse expands as cybercriminals target financial sector Source: Microsoft Security Blog
  2. Confirmed 100Threat actor
    6 Nov 2026
    CVE-2026-109518 - APT package manager that affects Ubuntu and Debian operating systems Source: AWS Security Bulletins
    CVE-2026-109518
  3. Reported 70Threat actor
    6 Nov 2026
    FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers Source: The Record
  4. Reported 70Threat actor
    6 Nov 2026
    US agencies warn attackers are targeting refrigeration systems that protect food and medicine Source: Help Net Security
    Country United States of AmericaImpact Everyday life
  5. Reported 70Threat actor
    6 Nov 2026
    Threat actor targets Indian fintechs on weekends when defenders aren’t watching Source: The Register (Security)
    Country India
  6. Reported 70Threat actor
    5 Nov 2026
    China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor 2 sources: The Hacker News, r/netsec
    CVE-2026-120422
  7. Reported 70Threat actor
    5 Nov 2026
    APT29's Watering Holes Target Thousands of Mobile Users Source: Dark Reading
  8. Reported 70Threat actor
    5 Nov 2026
    Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign Source: The Record
    Country Russian FederationImpact Everyday lifeVendor Google
  9. Reported 70Threat actor
    5 Nov 2026
    Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes Source: SecurityWeek
    Country Russian FederationVendor Google
  10. Reported 70Threat actor
    5 Nov 2026
    CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access Source: The Hacker News
    Impact Everyday life
  11. Reported 60Threat actor
    5 Nov 2026
    Threat actors use agentic AI tooling to find and abuse exposed secrets Source: Microsoft Security Blog
  12. Reported 60Threat actor
    5 Nov 2026
    Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns Source: Check Point Research
  13. Reported 70Threat actor
    4 Nov 2026
    Critical Rails Bug Threatens to Derail Vulnerable Servers Source: Dark Reading
    Impact Everyday life
  14. Reported 70Threat actor
    4 Nov 2026
    Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root Source: The Hacker News
  15. Reported 70Threat actor
    4 Nov 2026
    Russian hackers target iOS and Android users with n-day exploits Source: Help Net Security
    Country Russian FederationImpact Everyday lifeVendor Google
  16. Reported 70Threat actor
    4 Nov 2026
    APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits Source: The Hacker News
    Impact Everyday lifeVendor Google
  17. Reported 70Threat actor
    4 Nov 2026
    Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist Source: SecurityWeek
  18. Reported 70Threat actor
    4 Nov 2026
    Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure Source: The Hacker News
    Country Russian Federation
  19. Reported 70Threat actor
    3 Nov 2026
    Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges Source: The Hacker News
    Vendor Google
  20. Reported 70Threat actor
    3 Nov 2026
    Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware Source: The Hacker News
    Country Russian Federation
  21. Reported 70Threat actor
    3 Nov 2026
    Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials Source: The Hacker News
    CVE-2026-81648
  22. Reported 60Threat actor
    3 Nov 2026
    Fake-download campaign uses trojanized installers to deliver monetization payloads Source: Microsoft Security Blog
  23. Reported 60Threat actor
    3 Nov 2026
    Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles Source: Check Point Research
  24. Reported 70Threat actor
    2 Nov 2026
    DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment Source: The Hacker News
    Country IsraelCountry Iraq
  25. Reported 70Threat actor
    2 Nov 2026
    PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia Source: Dark Reading

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109518No—0.9%
CVE-2026-81648No—0.5%
CVE-2026-120422No—0.4%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.