Security Signal
Threat intelligence report · last 30 days

Exploited in the wild · 2026-10-29 · Confirmed

Generated 5 Nov 2026, 13:26 UTC · Live view: news.rogelio.cloud/?view=exploited&day=2026-10-29&label=Confirmed

Executive summary

  • 2 stories in the last 30 days; 2 (100%) confirmed by official sources.
  • 2 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Actively exploited (2).
  • Most reported vendor: Cisco (2 stories).
  • 3 of the listed vulnerabilities are on CISA's exploited list.
2
Stories
2
Actively exploited
0
Breaches & ransomware
2
Confirmed by official sources

Stories per day

2 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 0 stories (0 exploited, 0 breaches/ransomware) F232026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 0 stories (0 exploited, 0 breaches/ransomware) S252026-10-26: 0 stories (0 exploited, 0 breaches/ransomware) M262026-10-27: 0 stories (0 exploited, 0 breaches/ransomware) T272026-10-28: 0 stories (0 exploited, 0 breaches/ransomware) W282026-10-29: 2 stories (2 exploited, 0 breaches/ransomware) T2922026-10-30: 0 stories (0 exploited, 0 breaches/ransomware) F302026-10-31: 0 stories (0 exploited, 0 breaches/ransomware) S312026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 0 stories (0 exploited, 0 breaches/ransomware) M22026-11-03: 0 stories (0 exploited, 0 breaches/ransomware) T32026-11-04: 0 stories (0 exploited, 0 breaches/ransomware) W42026-11-05: 0 stories (0 exploited, 0 breaches/ransomware) T5

Exploited Breach / ransomware Other

Topics

  • Actively exploited — 2 (100%)

Most reported vendors

Cisco2PHP Group1Palo Alto Networks1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Actively exploited
    30 Oct 2026
    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) 3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  2. Confirmed 100Actively exploited
    29 Oct 2026
    CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software) added to CISA Known Exploited Vulnerabilities Source: CISA Known Exploited Vulnerabilities
    Vendor Cisco
    CVE-2026-76418

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareExploited—0.8%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.