Security Signal
Threat intelligence report · last 30 days

2026-10-28

Generated 5 Nov 2026, 14:44 UTC · Live view: news.rogelio.cloud/?show=all&day=2026-10-28

Executive summary

  • 29 stories in the last 30 days; 6 (21%) confirmed by official sources.
  • 3 involve vulnerabilities attackers are already exploiting. Patch these first.
  • 6 breaches or ransomware attacks reported.
  • Most common topic: Vulnerability (10).
  • Most reported vendor: Cisco (4 stories).
  • Most mentioned country: South Korea.
  • 2 of the listed vulnerabilities are on CISA's exploited list.
29
Stories
3
Actively exploited
6
Breaches & ransomware
6
Confirmed by official sources

Stories per day

29 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 0 stories (0 exploited, 0 breaches/ransomware) F232026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 0 stories (0 exploited, 0 breaches/ransomware) S252026-10-26: 0 stories (0 exploited, 0 breaches/ransomware) M262026-10-27: 0 stories (0 exploited, 0 breaches/ransomware) T272026-10-28: 29 stories (3 exploited, 6 breaches/ransomware) W28292026-10-29: 0 stories (0 exploited, 0 breaches/ransomware) T292026-10-30: 0 stories (0 exploited, 0 breaches/ransomware) F302026-10-31: 0 stories (0 exploited, 0 breaches/ransomware) S312026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 0 stories (0 exploited, 0 breaches/ransomware) M22026-11-03: 0 stories (0 exploited, 0 breaches/ransomware) T32026-11-04: 0 stories (0 exploited, 0 breaches/ransomware) W42026-11-05: 0 stories (0 exploited, 0 breaches/ransomware) T5

Exploited Breach / ransomware Other

Topics

  • Vulnerability — 10 (34%)
  • Other — 7 (24%)
  • Breach / leak — 4 (14%)
  • Actively exploited — 3 (10%)
  • Threat actor — 2 (7%)
  • Ransomware — 2 (7%)
  • Policy / law — 1 (3%)

Countries in the news

Fiji: 0United Republic of Tanzania: 0Western Sahara: 0Canada: 0United States of America: 1Kazakhstan: 0Uzbekistan: 0Papua New Guinea: 0Indonesia: 0Argentina: 0Chile: 0Democratic Republic of the Congo: 0Somalia: 0Kenya: 0Sudan: 0Chad: 0Haiti: 0Dominican Republic: 0Russian Federation: 0Bahamas: 0Falkland Islands (Malvinas): 0Norway: 0Greenland: 0French Southern Territories: 0Timor-Leste: 0South Africa: 0Lesotho: 0Mexico: 0Uruguay: 0Brazil: 0Bolivia: 0Peru: 0Colombia: 0Panama: 0Costa Rica: 0Nicaragua: 0Honduras: 0El Salvador: 0Guatemala: 0Belize: 0Venezuela: 0Guyana: 0Suriname: 0France: 0Ecuador: 0Puerto Rico: 0Jamaica: 0Cuba: 0Zimbabwe: 0Botswana: 0Namibia: 0Senegal: 0Mali: 0Mauritania: 0Benin: 0Niger: 0Nigeria: 0Cameroon: 0Togo: 0Ghana: 0Cote d'Ivoire: 0Guinea: 0Guinea-Bissau: 0Liberia: 0Sierra Leone: 0Burkina Faso: 0Central African Republic: 0Republic of the Congo: 0Gabon: 0Equatorial Guinea: 0Zambia: 0Malawi: 0Mozambique: 0Eswatini: 0Angola: 0Burundi: 0Israel: 0Lebanon: 0Madagascar: 0State of Palestine: 0Republic of The Gambia: 0Tunisia: 0Algeria: 0Jordan: 0United Arab Emirates: 0Qatar: 0Kuwait: 0Iraq: 0Oman: 0Vanuatu: 0Cambodia: 0Thailand: 0Lao People's Democratic Republic: 0Myanmar: 0Vietnam: 0North Korea: 0South Korea: 1Mongolia: 0India: 0Bangladesh: 0Bhutan: 0Nepal: 0Pakistan: 0Afghanistan: 0Tajikistan: 0Kyrgyzstan: 0Turkmenistan: 0Islamic Republic of Iran: 0Syrian Arab Republic: 0Armenia: 0Sweden: 0Belarus: 0Ukraine: 0Poland: 0Austria: 0Hungary: 0Moldova, Republic of: 0Romania: 0Lithuania: 0Latvia: 0Estonia: 0Germany: 0Bulgaria: 0Greece: 0Türkiye: 0Albania: 0Croatia: 0Switzerland: 0Luxembourg: 0Belgium: 0Netherlands: 0Portugal: 0Spain: 0Ireland: 0New Caledonia: 0Solomon Islands: 0New Zealand: 0Australia: 0Sri Lanka: 0People's Republic of China: 0Taiwan, Province of China: 0Italy: 0Denmark: 0United Kingdom: 0Iceland: 0Azerbaijan: 0Georgia: 0Philippines: 0Malaysia: 0Brunei Darussalam: 0Slovenia: 0Finland: 0Slovakia: 0Czech Republic: 0Eritrea: 0Japan: 0Paraguay: 0Yemen: 0Saudi Arabia: 0Cyprus: 0Morocco: 0Egypt: 0Libya: 0Ethiopia: 0Djibouti: 0Uganda: 0Rwanda: 0Bosnia and Herzegovina: 0The Republic of North Macedonia: 0Serbia: 0Montenegro: 0Kosovo: 0Trinidad and Tobago: 0South Sudan: 0

South Korea 1 · United States of America 1

Most reported vendors

Cisco4Google2AWS1GitHub1GitLab1Oracle1Palo Alto Networks1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Actively exploited
    31 Oct 2026
    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure 2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497
  2. Confirmed 100Vulnerability
    30 Oct 2026
    A Vulnerability in Brotli Library Could Allow for Remote Code Execution Source: MS-ISAC Advisories
    Vendor GitLab
  3. Confirmed 100Vulnerability
    28 Oct 2026
    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  4. Confirmed 100Vulnerability
    28 Oct 2026
    CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools Source: AWS Security Bulletins
    CVE-2026-115415
  5. Confirmed 100Vulnerability
    28 Oct 2026
    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  6. Confirmed 100Vulnerability
    28 Oct 2026
    CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-118029
  7. Reported 70Other
    28 Oct 2026
    Upwind raises $400M after walking away from Datadog acquisition offer Source: TechCrunch Security
  8. Reported 70Actively exploited
    28 Oct 2026
    Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN Source: Cisco Talos
    Vendor Cisco
    CVE-2026-20127
  9. Reported 70Vulnerability
    28 Oct 2026
    Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw Source: WIRED Security
  10. Reported 70Other
    28 Oct 2026
    Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents Source: TechCrunch Security
  11. Reported 70Breach / leak
    28 Oct 2026
    Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents Source: WIRED Security
    Impact Everyday life
  12. Reported 70Actively exploited
    28 Oct 2026
    Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble Source: The Register (Security)
    Vendor Oracle
  13. Reported 70Threat actor
    28 Oct 2026
    GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub Source: Dark Reading
    Vendor GitHub
  14. Reported 70Vulnerability
    28 Oct 2026
    The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO Source: TechCrunch Security
  15. Reported 70Ransomware
    28 Oct 2026
    Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles Source: The Register (Security)
    Impact Everyday life
  16. Reported 70Other
    28 Oct 2026
    South Korea’s financial industry hit by fresh wave of cyberattacks Source: TechCrunch Security
    Country South Korea
  17. Reported 70Other
    28 Oct 2026
    AI Takes Root in Hospital Corridors, Raises Security Stakes Source: Dark Reading
    Impact Everyday life
  18. Reported 70Breach / leak
    28 Oct 2026
    Attacker Relentlessly Scans for Credentials by Impersonating AI Bots Source: Dark Reading
  19. Reported 70Vulnerability
    28 Oct 2026
    Cisco open sources tool for detecting AI agents on hacking sprees Source: The Register (Security)
    Vendor Cisco
  20. Reported 70Breach / leak
    28 Oct 2026
    123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus Source: The Register (Security)
    Impact Everyday life
  21. Reported 70Other
    28 Oct 2026
    ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History Source: WIRED Security
    Country United States of America
  22. Reported 70Policy / law
    28 Oct 2026
    Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature Source: Dark Reading
  23. Reported 60Ransomware
    28 Oct 2026
    Unwrapping Retail Peak Season Cyber Threats Source: Unit 42
    Impact Everyday life
  24. Reported 60Other
    28 Oct 2026
    The CISO’s evolving role: Protecting and defending in the agentic era Source: Microsoft Security Blog
  25. Reported 60Other
    28 Oct 2026
    Banks are blocking AI agents from customer accounts Source: Malwarebytes Labs
    Impact Everyday life

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-20127Cisco Catalyst SD-WAN Controller and ManagerExploited—87.6%
CVE-2026-111497Google BrotliExploited—82.6%
CVE-2026-115415No—0.3%
CVE-2026-118029No—0.2%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.