Security Signal
Threat intelligence report · last 30 days

last 7 days · Threat actor

Generated 6 Nov 2026, 12:08 UTC · Live view: news.rogelio.cloud/?show=all&since=7d&category=threat-actor

Executive summary

  • 28 stories in the last 30 days; 1 (4%) confirmed by official sources.
  • No actively exploited vulnerabilities in this selection.
  • Most common topic: Threat actor (28).
  • Most reported vendor: Google (5 stories).
  • Most mentioned country: Russian Federation.
28
Stories
0
Actively exploited
0
Breaches & ransomware
1
Confirmed by official sources

Stories per day

7 10-0810-1310-1810-2310-2811-0211-06

Daily breakdown, last 14 days

2026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 0 stories (0 exploited, 0 breaches/ransomware) S252026-10-26: 0 stories (0 exploited, 0 breaches/ransomware) M262026-10-27: 0 stories (0 exploited, 0 breaches/ransomware) T272026-10-28: 0 stories (0 exploited, 0 breaches/ransomware) W282026-10-29: 0 stories (0 exploited, 0 breaches/ransomware) T292026-10-30: 2 stories (0 exploited, 0 breaches/ransomware) F3022026-10-31: 1 stories (0 exploited, 0 breaches/ransomware) S3112026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 4 stories (0 exploited, 0 breaches/ransomware) M242026-11-03: 5 stories (0 exploited, 0 breaches/ransomware) T352026-11-04: 7 stories (0 exploited, 0 breaches/ransomware) W472026-11-05: 6 stories (0 exploited, 0 breaches/ransomware) T562026-11-06: 3 stories (0 exploited, 0 breaches/ransomware) F63

Exploited Breach / ransomware Other

Topics

  • Threat actor — 28 (100%)

Countries in the news

Russian Federation 5 · United States of America 2 · People's Republic of China 1 · Israel 1 · India 1 · Iraq 1

Most reported vendors

Google5Cloudflare1Linux1WordPress1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Threat actor
    6 Nov 2026
    CVE-2026-109518 - APT package manager that affects Ubuntu and Debian operating systems Source: AWS Security Bulletins
    CVE-2026-109518
  2. Reported 70Threat actor
    6 Nov 2026
    US agencies warn attackers are targeting refrigeration systems that protect food and medicine Source: Help Net Security
    Country United States of AmericaImpact Everyday life
  3. Reported 70Threat actor
    6 Nov 2026
    Threat actor targets Indian fintechs on weekends when defenders aren’t watching Source: The Register (Security)
    Country India
  4. Reported 70Threat actor
    5 Nov 2026
    China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor 2 sources: The Hacker News, r/netsec
    CVE-2026-120422
  5. Reported 70Threat actor
    5 Nov 2026
    APT29's Watering Holes Target Thousands of Mobile Users Source: Dark Reading
  6. Reported 70Threat actor
    5 Nov 2026
    Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign Source: The Record
    Country Russian FederationImpact Everyday lifeVendor Google
  7. Reported 70Threat actor
    5 Nov 2026
    Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes Source: SecurityWeek
    Country Russian FederationVendor Google
  8. Reported 70Threat actor
    5 Nov 2026
    CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access Source: The Hacker News
    Impact Everyday life
  9. Reported 60Threat actor
    5 Nov 2026
    Threat actors use agentic AI tooling to find and abuse exposed secrets Source: Microsoft Security Blog
  10. Reported 60Threat actor
    5 Nov 2026
    Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns Source: Check Point Research
  11. Reported 70Threat actor
    4 Nov 2026
    Critical Rails Bug Threatens to Derail Vulnerable Servers Source: Dark Reading
    Impact Everyday life
  12. Reported 70Threat actor
    4 Nov 2026
    Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root Source: The Hacker News
  13. Reported 70Threat actor
    4 Nov 2026
    Russian hackers target iOS and Android users with n-day exploits Source: Help Net Security
    Country Russian FederationImpact Everyday lifeVendor Google
  14. Reported 70Threat actor
    4 Nov 2026
    APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits Source: The Hacker News
    Impact Everyday lifeVendor Google
  15. Reported 70Threat actor
    4 Nov 2026
    Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist Source: SecurityWeek
  16. Reported 70Threat actor
    4 Nov 2026
    Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure Source: The Hacker News
    Country Russian Federation
  17. Reported 70Threat actor
    3 Nov 2026
    Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges Source: The Hacker News
    Vendor Google
  18. Reported 70Threat actor
    3 Nov 2026
    Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware Source: The Hacker News
    Country Russian Federation
  19. Reported 70Threat actor
    3 Nov 2026
    Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials Source: The Hacker News
    CVE-2026-81648
  20. Reported 60Threat actor
    3 Nov 2026
    Fake-download campaign uses trojanized installers to deliver monetization payloads Source: Microsoft Security Blog
  21. Reported 60Threat actor
    3 Nov 2026
    Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles Source: Check Point Research
  22. Reported 70Threat actor
    2 Nov 2026
    DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment Source: The Hacker News
    Country IsraelCountry Iraq
  23. Reported 70Threat actor
    2 Nov 2026
    PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia Source: Dark Reading
  24. Reported 70Threat actor
    2 Nov 2026
    My Journey to the Center of America’s Political Spam Text Hell Source: WIRED Security
    Country United States of America
  25. Reported 70Threat actor
    2 Nov 2026
    Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts Source: The Hacker News
    Vendor Linux

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-81648No—0.5%
CVE-2026-120422No—0.4%
CVE-2026-109518No——

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.