Security Signal
Threat intelligence report · last 30 days

2026-11-03 · Official · AWS

Generated 8 Nov 2026, 10:11 UTC · Live view: news.rogelio.cloud/?day=2026-11-03&tier=1&vendor=AWS

Executive summary

  • 2 stories in the last 30 days; 2 (100%) confirmed by official sources.
  • No actively exploited vulnerabilities in this selection.
  • Most common topic: Vulnerability (2).
  • Most reported vendor: AWS (2 stories).
2
Stories
0
Actively exploited
0
Breaches & ransomware
2
Confirmed by official sources

Stories per day

2 10-1010-1510-2010-2510-3011-0411-08

Daily breakdown, last 14 days

M26 T27 W28 T29 F30 S31 S1 M2 T32 W4 T5 F6 S7 S8

Exploited Breach / ransomware Other

Topics

Most reported vendors

AWS2

Top stories · newest days first, most confident within each day

  1. Confirmed 100Vulnerability
    3 Nov 2026
    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115413
  2. Confirmed 100Vulnerability
    3 Nov 2026
    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-121652

Vulnerabilities to watch

CVEProductExploitedCVSSEPSSFixFixed in / due
CVE-2026-121652No—0.3%Patch availablemaplibre-gl-js-amplify 4.0.3
CVE-2026-115413No—0.1%Patch availableaws-api-mcp-server 1.6.0

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.