Security Signal
Threat intelligence report · last 30 days

2026-10-29 · last 30 days · Vendor research

Generated 7 Nov 2026, 16:12 UTC · Live view: news.rogelio.cloud/?day=2026-10-29&since=30d&tier=3

Executive summary

  • 10 stories in the last 30 days; 1 (10%) confirmed by official sources.
  • 1 involve vulnerabilities attackers are already exploiting. Patch these first.
  • 1 breaches or ransomware attacks reported.
  • Most common topic: Other (4).
  • Most reported vendor: Apple (1 stories).
  • Most mentioned country: North Korea.
  • 2 of the listed vulnerabilities are on CISA's exploited list.
10
Stories
1
Actively exploited
1
Breaches & ransomware
1
Confirmed by official sources

Stories per day

10 10-0910-1410-1910-2410-2911-0311-07

Daily breakdown, last 14 days

S25 M26 T27 W28 T2910 F30 S31 S1 M2 T3 W4 T5 F6 S7

Exploited Breach / ransomware Other

Top stories · newest days first, most confident within each day

  1. Confirmed 100Actively exploited
    30 Oct 2026
    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) 3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
  2. Reported 60Vulnerability
    29 Oct 2026
    A quiet week in infosec <.< Source: Cisco Talos
  3. Reported 60Threat actor
    29 Oct 2026
    Tracking AI adoption in North Korean threat actor tradecraft Source: Microsoft Security Blog
  4. Reported 60Other
    29 Oct 2026
    IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment Source: Microsoft Security Blog
  5. Reported 60Other
    29 Oct 2026
    Cohere’s Qwen Story: Looks More Like Model Jaggedness Source: Check Point Research
  6. Reported 60Other
    29 Oct 2026
    Malicious Firefox extensions impersonate popular crypto wallets Source: Malwarebytes Labs
  7. Reported 60Ransomware
    29 Oct 2026
    IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases Source: Cisco Talos
  8. Reported 60Vulnerability
    29 Oct 2026
    Have an older iPhone or iPad? Apple has a security update for you Source: Malwarebytes Labs
  9. Reported 60Other
    29 Oct 2026
    NIK C2: The new AI-enabled command-and-control framework Source: Cisco Talos
  10. Reported 60Malware
    29 Oct 2026
    Amatera: How the prolific infostealer works and spreads Source: ESET WeLiveSecurity

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.