Security Signal
Threat intelligence report · last 30 days
Exploited in the wild · 2026-10-28 · Reported
Generated 5 Nov 2026, 05:56 UTC · Live view: news.rogelio.cloud/?view=exploited&day=2026-10-28&label=Reported
Executive summary
- 2 stories in the last 30 days; 0 (0%) confirmed by official sources.
- 2 involve vulnerabilities attackers are already exploiting. Patch these first.
- Most common topic: Actively exploited (2).
- Most reported vendor: Cisco (1 stories).
- 1 of the listed vulnerabilities are on CISA's exploited list.
2
Stories
2
Actively exploited
0
Breaches & ransomware
0
Confirmed by official sources
Stories per day
Daily breakdown, last 14 days
Exploited Breach / ransomware Other
Topics
- Actively exploited — 2 (100%)
Most reported vendors
Top stories
| # | Story | Confidence | Updated |
|---|---|---|---|
| 1 | Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN Original article | Reported 70 Actively exploited | 28 Oct 2026 |
| 2 | Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble Original article | Reported 70 Actively exploited | 28 Oct 2026 |
Vulnerabilities to watch
| CVE | Product | Exploited | CVSS | EPSS |
|---|---|---|---|---|
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | Exploited | — | 87.6% |