Security Signal
Threat intelligence report · last 30 days

2026-10-22

Generated 6 Nov 2026, 21:26 UTC · Live view: news.rogelio.cloud/?day=2026-10-22

Executive summary

  • 14 stories in the last 30 days; 6 (43%) confirmed by official sources.
  • No actively exploited vulnerabilities in this selection.
  • Most common topic: Vulnerability (10).
  • Most reported vendor: Cisco (2 stories).
14
Stories
0
Actively exploited
0
Breaches & ransomware
6
Confirmed by official sources

Stories per day

14 10-0810-1310-1810-2310-2811-0211-06

Daily breakdown, last 14 days

S24 S25 M26 T27 W28 T29 F30 S31 S1 M2 T3 W4 T5 F6

Exploited Breach / ransomware Other

Topics

Most reported vendors

Cisco2AWS1ConnectWise1Microsoft1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Vulnerability
    22 Oct 2026
    CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115417
  2. Confirmed 100Vulnerability
    22 Oct 2026
    CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server Source: AWS Security Bulletins
    CVE-2026-115419
  3. Confirmed 100Vulnerability
    22 Oct 2026
    Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  4. Confirmed 100Vulnerability
    22 Oct 2026
    Multiple Cisco Products Snort 3 Security Hardening Release: October 2026 Source: Cisco Security Advisories
    Vendor Cisco
    CVE-2026-20043
  5. Confirmed 100Vulnerability
    22 Oct 2026
    CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook Source: AWS Security Bulletins
    CVE-2026-115414
  6. Confirmed 100Vulnerability
    22 Oct 2026
    CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing Source: AWS Security Bulletins
    CVE-2026-115416
  7. Reported 70Other
    22 Oct 2026
    Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack Source: Dark Reading
    Vendor ConnectWiseVendor Microsoft
  8. Reported 70Other
    22 Oct 2026
    What We Missed: Feds Lasso Texas Laptop Farms Source: Dark Reading
  9. Reported 70Vulnerability
    22 Oct 2026
    Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour Source: Dark Reading
  10. Reported 70Vulnerability
    22 Oct 2026
    Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched Source: WIRED Security
  11. Reported 60Vulnerability
    22 Oct 2026
    I had plans for that second Source: Cisco Talos
  12. Reported 60Vulnerability
    22 Oct 2026
    EMudhra Intermediate CA Certificates Compromised Source: Unit 42
  13. Reported 60Other
    22 Oct 2026
    The Current Landscape of OAuth Attacks Source: Unit 42
  14. Reported 60Malware
    22 Oct 2026
    MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration Source: ESET WeLiveSecurity

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-115414No—0.9%
CVE-2026-115419No—0.4%
CVE-2026-20043No—0.4%
CVE-2026-115417No—0.4%
CVE-2026-115416No—0.3%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.