Security Signal
Threat intelligence report · last 30 days

2026-10-23 · last 30 days

Generated 6 Nov 2026, 10:01 UTC · Live view: news.rogelio.cloud/?show=all&day=2026-10-23&since=30d

Executive summary

  • 17 stories in the last 30 days; 5 (29%) confirmed by official sources.
  • 3 involve vulnerabilities attackers are already exploiting. Patch these first.
  • 2 breaches or ransomware attacks reported.
  • Most common topic: Vulnerability (5).
  • Most reported vendor: AWS (1 stories).
  • Most mentioned country: India.
  • 12 of the listed vulnerabilities are on CISA's exploited list.
17
Stories
3
Actively exploited
2
Breaches & ransomware
5
Confirmed by official sources

Stories per day

17 10-0810-1310-1810-2310-2811-0211-06

Daily breakdown, last 14 days

2026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 0 stories (0 exploited, 0 breaches/ransomware) S252026-10-26: 0 stories (0 exploited, 0 breaches/ransomware) M262026-10-27: 0 stories (0 exploited, 0 breaches/ransomware) T272026-10-28: 0 stories (0 exploited, 0 breaches/ransomware) W282026-10-29: 0 stories (0 exploited, 0 breaches/ransomware) T292026-10-30: 0 stories (0 exploited, 0 breaches/ransomware) F302026-10-31: 0 stories (0 exploited, 0 breaches/ransomware) S312026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 0 stories (0 exploited, 0 breaches/ransomware) M22026-11-03: 0 stories (0 exploited, 0 breaches/ransomware) T32026-11-04: 0 stories (0 exploited, 0 breaches/ransomware) W42026-11-05: 0 stories (0 exploited, 0 breaches/ransomware) T52026-11-06: 0 stories (0 exploited, 0 breaches/ransomware) F6

Exploited Breach / ransomware Other

Topics

  • Vulnerability — 5 (29%)
  • Other — 4 (24%)
  • Actively exploited — 3 (18%)
  • Breach / leak — 2 (12%)
  • Threat actor — 1 (6%)
  • Policy / law — 1 (6%)
  • Malware — 1 (6%)

Countries in the news

India 1

Most reported vendors

AWS1Adobe1Apple1Arista1Broadcom1Collabora1GitLab1Google1Ivanti1Linux1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Actively exploited
    4 Nov 2026
    PHP2Shell: What to know about two critical PHP flaws 2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  2. Confirmed 100Actively exploited
    26 Oct 2026
    CISA Adds One Known Exploited Vulnerability to Catalog Source: CISA Advisories
    CVE-2026-110447CVE-2026-114625CVE-2026-109618CVE-2026-109619
  3. Confirmed 100Vulnerability
    23 Oct 2026
    CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115845
  4. Confirmed 100Vulnerability
    23 Oct 2026
    CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server Source: AWS Security Bulletins
    CVE-2026-115812CVE-2026-115813
  5. Confirmed 100Actively exploited
    23 Oct 2026
    CVE-2026-110447 (Collabora Collabora Online – Built-in CODE Server) added to CISA Known Exploited Vulnerabilities Source: CISA Known Exploited Vulnerabilities
    Vendor Collabora
    CVE-2026-110447
  6. Reported 70Breach / leak
    23 Oct 2026
    Trust Is Not What It Seems — and Fraudsters Are Counting on It Source: Dark Reading
  7. Reported 70Other
    23 Oct 2026
    There's a third PHP2Shell bug, but it won't get an emergency fix Source: The Register (Security)
  8. Reported 70Vulnerability
    23 Oct 2026
    Exposed to PHP2Shell? Cyber Experts Weigh in With Advice Source: Dark Reading
  9. Reported 70Other
    23 Oct 2026
    Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack Source: The Register (Security)
  10. Reported 70Threat actor
    23 Oct 2026
    AI Tools Are Generating Massive Attacks for Little Cost Source: Dark Reading
  11. Reported 70Other
    23 Oct 2026
    Why Caribbean Threats Cascade Into Global Cyber-Risk Source: Dark Reading
  12. Reported 70Other
    23 Oct 2026
    Cyber Insurance's New Reality: Underwriting Isn't Enough Source: Dark Reading
  13. Reported 70Vulnerability
    23 Oct 2026
    AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack Source: Dark Reading
    Vendor Microsoft
  14. Reported 70Policy / law
    23 Oct 2026
    Torvalds: AI is fine for competent devs, but spare us the 'drive-by' patches Source: The Register (Security)
  15. Reported 70Breach / leak
    23 Oct 2026
    State Bank of India Suffers a Customer PII Data Leak Source: Dark Reading
    Country IndiaImpact Everyday life
  16. Reported 60Vulnerability
    23 Oct 2026
    Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks Source: Microsoft Security Blog
  17. Reported 60Malware
    23 Oct 2026
    Infostealer riding the AI Train Source: Check Point Research
    Impact Everyday life

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-111497Google BrotliExploited—82.6%
CVE-2026-110447Collabora Collabora Online – Built-in CODE ServerExploited—73.3%
CVE-2026-97229GitLab Community Edition and Enterprise EditionExploited—65.2%
CVE-2026-48356Adobe Commerce and MagentoExploited—47.5%
CVE-2026-46300Linux KernelExploited—16.1%
CVE-2024-27834Apple Multiple ProductsExploited—1.4%
CVE-2026-119977WordPress WordPress CoreExploited—1.2%
CVE-2026-114625Arista VeloCloud OrchestratorExploited—1.0%
CVE-2026-118527Ivanti Connect SecureExploited—0.8%
CVE-2026-41709Broadcom VMware ESXExploited—0.7%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.