Security Signal
Threat intelligence report · last 30 days

2026-10-29 · last 30 days

Generated 6 Nov 2026, 20:50 UTC · Live view: news.rogelio.cloud/?show=all&day=2026-10-29&since=30d

Executive summary

  • 40 stories in the last 30 days; 7 (18%) confirmed by official sources.
  • 2 involve vulnerabilities attackers are already exploiting. Patch these first.
  • 5 breaches or ransomware attacks reported.
  • Most common topic: Vulnerability (14).
  • Most reported vendor: Cisco (3 stories).
  • Most mentioned country: Belgium.
  • 4 of the listed vulnerabilities are on CISA's exploited list.
40
Stories
2
Actively exploited
5
Breaches & ransomware
7
Confirmed by official sources

Stories per day

40 10-0810-1310-1810-2310-2811-0211-06

Daily breakdown, last 14 days

S24 S25 M26 T27 W28 T2940 F30 S31 S1 M2 T3 W4 T5 F6

Exploited Breach / ransomware Other

Topics

Countries in the news

Belgium 1 · People's Republic of China 1 · United Kingdom 1 · Italy 1 · North Korea 1 · South Korea 1 · Moldova, Republic of 1

Most reported vendors

Cisco3Microsoft3AWS1Apple1GitHub1PHP Group1Palo Alto Networks1Siemens1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Actively exploited
    30 Oct 2026
    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) 3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  2. Confirmed 100Vulnerability
    29 Oct 2026
    Cisco Finesse Server-Side Request Forgery Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  3. Confirmed 100Vulnerability
    29 Oct 2026
    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119115
  4. Confirmed 100Actively exploited
    29 Oct 2026
    CISA Adds Two Known Exploited Vulnerabilities to Catalog 2 sources: CISA Advisories, CISA Known Exploited Vulnerabilities
    Vendor Cisco
    CVE-2026-76418CVE-2026-97229
  5. Confirmed 100Vulnerability
    29 Oct 2026
    Hitachi Energy CoreTec Product Source: CISA Advisories
  6. Confirmed 100Vulnerability
    29 Oct 2026
    Siemens Mendix SAML Module Source: CISA Advisories
    Vendor Siemens
  7. Confirmed 100Vulnerability
    29 Oct 2026
    Hitachi Energy TRO600 series products Source: CISA Advisories
  8. Reported 70Vulnerability
    29 Oct 2026
    Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched Source: The Register (Security)
    Vendor Microsoft
  9. Reported 70Policy / law
    29 Oct 2026
    Binance pauses withdrawals as hackers suspected of stealing billions in crypto Source: TechCrunch Security
  10. Reported 70Other
    29 Oct 2026
    Anthropic-Themed Phishing Emails Bypass Top Security Tools Source: Dark Reading
  11. Reported 70Vulnerability
    29 Oct 2026
    Rethinking Cybersecurity Awareness in the AI Era Source: Dark Reading
  12. Reported 70Other
    29 Oct 2026
    Why CTF Competitions May Be More Important Than Ever Source: Dark Reading
  13. Reported 70Other
    29 Oct 2026
    Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers Source: The Register (Security)
    Country People's Republic of China
  14. Reported 70Vulnerability
    29 Oct 2026
    Claude Model Builds Exploits Across Major Browsers & OSes Source: Dark Reading
  15. Reported 70Other
    29 Oct 2026
    Threat Modeling With 4 Simple Questions on a White Board Source: Dark Reading
  16. Reported 70Other
    29 Oct 2026
    Belgium's tax agency confirms cyberattack, pulls services offline Source: The Register (Security)
    Country BelgiumImpact Everyday life
  17. Reported 70Breach / leak
    29 Oct 2026
    Bluesky blocks links to leaked DHS employee data as government seeks takedowns Source: TechCrunch Security
  18. Reported 70Other
    29 Oct 2026
    Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying Source: The Register (Security)
    Country United KingdomImpact Everyday life
  19. Reported 70Threat actor
    29 Oct 2026
    Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour Source: The Register (Security)
    Vendor GitHub
  20. Reported 70Malware
    29 Oct 2026
    A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards Source: WIRED Security
  21. Reported 70Other
    29 Oct 2026
    Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes Source: Dark Reading
  22. Reported 70Other
    29 Oct 2026
    Admin dropped the F-bomb in a password to show hackers who was really 1337 Source: The Register (Security)
  23. Reported 70Vulnerability
    29 Oct 2026
    Cyber Vulnerabilities Besiege Italy, Absent Clear Cause Source: Dark Reading
    Country Italy
  24. Reported 70Breach / leak
    29 Oct 2026
    Bluesky Is Blocking Links to a Major Leak of DHS Employee Records Source: WIRED Security
  25. Reported 70Breach / leak
    29 Oct 2026
    Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice Source: Graham Cluley
    Impact Everyday life

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-97229GitLab Community Edition and Enterprise EditionExploited—65.2%
CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareExploited—0.8%
CVE-2025-30026No—0.7%
CVE-2026-11585No—0.2%
CVE-2026-119115No—0.2%
CVE-2026-63286No—0.1%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.