Security Signal
Threat intelligence report · last 30 days

2026-10-29

Generated 5 Nov 2026, 13:53 UTC · Live view: news.rogelio.cloud/?show=all&day=2026-10-29

Executive summary

  • 36 stories in the last 30 days; 4 (11%) confirmed by official sources.
  • 2 involve vulnerabilities attackers are already exploiting. Patch these first.
  • 5 breaches or ransomware attacks reported.
  • Most common topic: Other (13).
  • Most reported vendor: Cisco (3 stories).
  • Most mentioned country: Belgium.
  • 3 of the listed vulnerabilities are on CISA's exploited list.
36
Stories
2
Actively exploited
5
Breaches & ransomware
4
Confirmed by official sources

Stories per day

36 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 0 stories (0 exploited, 0 breaches/ransomware) F232026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 0 stories (0 exploited, 0 breaches/ransomware) S252026-10-26: 0 stories (0 exploited, 0 breaches/ransomware) M262026-10-27: 0 stories (0 exploited, 0 breaches/ransomware) T272026-10-28: 0 stories (0 exploited, 0 breaches/ransomware) W282026-10-29: 36 stories (2 exploited, 5 breaches/ransomware) T29362026-10-30: 0 stories (0 exploited, 0 breaches/ransomware) F302026-10-31: 0 stories (0 exploited, 0 breaches/ransomware) S312026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 0 stories (0 exploited, 0 breaches/ransomware) M22026-11-03: 0 stories (0 exploited, 0 breaches/ransomware) T32026-11-04: 0 stories (0 exploited, 0 breaches/ransomware) W42026-11-05: 0 stories (0 exploited, 0 breaches/ransomware) T5

Exploited Breach / ransomware Other

Topics

  • Other — 13 (36%)
  • Vulnerability — 11 (31%)
  • Breach / leak — 4 (11%)
  • Threat actor — 2 (6%)
  • Malware — 2 (6%)
  • Actively exploited — 2 (6%)
  • Ransomware — 1 (3%)
  • Policy / law — 1 (3%)

Countries in the news

Fiji: 0United Republic of Tanzania: 0Western Sahara: 0Canada: 0United States of America: 0Kazakhstan: 0Uzbekistan: 0Papua New Guinea: 0Indonesia: 0Argentina: 0Chile: 0Democratic Republic of the Congo: 0Somalia: 0Kenya: 0Sudan: 0Chad: 0Haiti: 0Dominican Republic: 0Russian Federation: 0Bahamas: 0Falkland Islands (Malvinas): 0Norway: 0Greenland: 0French Southern Territories: 0Timor-Leste: 0South Africa: 0Lesotho: 0Mexico: 0Uruguay: 0Brazil: 0Bolivia: 0Peru: 0Colombia: 0Panama: 0Costa Rica: 0Nicaragua: 0Honduras: 0El Salvador: 0Guatemala: 0Belize: 0Venezuela: 0Guyana: 0Suriname: 0France: 0Ecuador: 0Puerto Rico: 0Jamaica: 0Cuba: 0Zimbabwe: 0Botswana: 0Namibia: 0Senegal: 0Mali: 0Mauritania: 0Benin: 0Niger: 0Nigeria: 0Cameroon: 0Togo: 0Ghana: 0Cote d'Ivoire: 0Guinea: 0Guinea-Bissau: 0Liberia: 0Sierra Leone: 0Burkina Faso: 0Central African Republic: 0Republic of the Congo: 0Gabon: 0Equatorial Guinea: 0Zambia: 0Malawi: 0Mozambique: 0Eswatini: 0Angola: 0Burundi: 0Israel: 0Lebanon: 0Madagascar: 0State of Palestine: 0Republic of The Gambia: 0Tunisia: 0Algeria: 0Jordan: 0United Arab Emirates: 0Qatar: 0Kuwait: 0Iraq: 0Oman: 0Vanuatu: 0Cambodia: 0Thailand: 0Lao People's Democratic Republic: 0Myanmar: 0Vietnam: 0North Korea: 0South Korea: 0Mongolia: 0India: 0Bangladesh: 0Bhutan: 0Nepal: 0Pakistan: 0Afghanistan: 0Tajikistan: 0Kyrgyzstan: 0Turkmenistan: 0Islamic Republic of Iran: 0Syrian Arab Republic: 0Armenia: 0Sweden: 0Belarus: 0Ukraine: 0Poland: 0Austria: 0Hungary: 0Moldova, Republic of: 0Romania: 0Lithuania: 0Latvia: 0Estonia: 0Germany: 0Bulgaria: 0Greece: 0Türkiye: 0Albania: 0Croatia: 0Switzerland: 0Luxembourg: 0Belgium: 1Netherlands: 0Portugal: 0Spain: 0Ireland: 0New Caledonia: 0Solomon Islands: 0New Zealand: 0Australia: 0Sri Lanka: 0People's Republic of China: 0Taiwan, Province of China: 0Italy: 1Denmark: 0United Kingdom: 1Iceland: 0Azerbaijan: 0Georgia: 0Philippines: 0Malaysia: 0Brunei Darussalam: 0Slovenia: 0Finland: 0Slovakia: 0Czech Republic: 0Eritrea: 0Japan: 0Paraguay: 0Yemen: 0Saudi Arabia: 0Cyprus: 0Morocco: 0Egypt: 0Libya: 0Ethiopia: 0Djibouti: 0Uganda: 0Rwanda: 0Bosnia and Herzegovina: 0The Republic of North Macedonia: 0Serbia: 0Montenegro: 0Kosovo: 0Trinidad and Tobago: 0South Sudan: 0

Belgium 1 · United Kingdom 1 · Italy 1

Most reported vendors

Cisco3Microsoft3AWS1Apple1GitHub1PHP Group1Palo Alto Networks1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Actively exploited
    30 Oct 2026
    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) 3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  2. Confirmed 100Vulnerability
    29 Oct 2026
    Cisco Finesse Server-Side Request Forgery Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  3. Confirmed 100Vulnerability
    29 Oct 2026
    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119115
  4. Confirmed 100Actively exploited
    29 Oct 2026
    CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software) added to CISA Known Exploited Vulnerabilities Source: CISA Known Exploited Vulnerabilities
    Vendor Cisco
    CVE-2026-76418
  5. Reported 70Vulnerability
    29 Oct 2026
    Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched Source: The Register (Security)
    Vendor Microsoft
  6. Reported 70Policy / law
    29 Oct 2026
    Binance pauses withdrawals as hackers suspected of stealing billions in crypto Source: TechCrunch Security
  7. Reported 70Other
    29 Oct 2026
    Anthropic-Themed Phishing Emails Bypass Top Security Tools Source: Dark Reading
  8. Reported 70Vulnerability
    29 Oct 2026
    Rethinking Cybersecurity Awareness in the AI Era Source: Dark Reading
  9. Reported 70Other
    29 Oct 2026
    Why CTF Competitions May Be More Important Than Ever Source: Dark Reading
  10. Reported 70Other
    29 Oct 2026
    Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers Source: The Register (Security)
  11. Reported 70Vulnerability
    29 Oct 2026
    Claude Model Builds Exploits Across Major Browsers & OSes Source: Dark Reading
  12. Reported 70Other
    29 Oct 2026
    Threat Modeling With 4 Simple Questions on a White Board Source: Dark Reading
  13. Reported 70Other
    29 Oct 2026
    Belgium's tax agency confirms cyberattack, pulls services offline Source: The Register (Security)
    Country BelgiumImpact Everyday life
  14. Reported 70Breach / leak
    29 Oct 2026
    Bluesky blocks links to leaked DHS employee data as government seeks takedowns Source: TechCrunch Security
  15. Reported 70Other
    29 Oct 2026
    Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying Source: The Register (Security)
    Country United KingdomImpact Everyday life
  16. Reported 70Threat actor
    29 Oct 2026
    Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour Source: The Register (Security)
    Vendor GitHub
  17. Reported 70Malware
    29 Oct 2026
    A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards Source: WIRED Security
  18. Reported 70Other
    29 Oct 2026
    Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes Source: Dark Reading
  19. Reported 70Other
    29 Oct 2026
    Admin dropped the F-bomb in a password to show hackers who was really 1337 Source: The Register (Security)
  20. Reported 70Vulnerability
    29 Oct 2026
    Cyber Vulnerabilities Besiege Italy, Absent Clear Cause Source: Dark Reading
    Country Italy
  21. Reported 70Breach / leak
    29 Oct 2026
    Bluesky Is Blocking Links to a Major Leak of DHS Employee Records Source: WIRED Security
  22. Reported 70Breach / leak
    29 Oct 2026
    Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice Source: Graham Cluley
    Impact Everyday life
  23. Reported 60Vulnerability
    29 Oct 2026
    A quiet week in infosec <.< Source: Cisco Talos
  24. Reported 60Threat actor
    29 Oct 2026
    Tracking AI adoption in North Korean threat actor tradecraft Source: Microsoft Security Blog
  25. Reported 60Other
    29 Oct 2026
    IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment Source: Microsoft Security Blog
    Vendor Microsoft

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareExploited—0.8%
CVE-2025-30026No—0.7%
CVE-2026-11585No—0.2%
CVE-2026-119115No—0.2%
CVE-2026-63286No—0.1%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.