Security Signal
Threat intelligence report · last 30 days

Confirmed

Generated 6 Nov 2026, 21:25 UTC · Live view: news.rogelio.cloud/?label=Confirmed

Executive summary

  • 77 stories in the last 30 days; 77 (100%) confirmed by official sources.
  • 14 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Vulnerability (55).
  • Most reported vendor: Cisco (16 stories).
  • Most mentioned country: United Kingdom.
  • 12 of the listed vulnerabilities are on CISA's exploited list.
77
Stories
14
Actively exploited
0
Breaches & ransomware
77
Confirmed by official sources

Stories per day

12 10-0810-1310-1810-2310-2811-0211-06

Daily breakdown, last 14 days

S24 S251 M262 T276 W285 T297 F305 S311 S1 M25 T39 W49 T512 F64

Exploited Breach / ransomware Other

Topics

Countries in the news

United Kingdom 1 · United States of America 1

Most reported vendors

Cisco16AWS15Google6GitLab4Apple3Ivanti2Linux2PHP Group2Palo Alto Networks2WordPress2

Top stories · newest days first, most confident within each day

  1. Confirmed 100Vulnerability
    6 Nov 2026
    Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Source: MS-ISAC Advisories
    Vendor Google
  2. Confirmed 100Vulnerability
    6 Nov 2026
    CVE-2026-119923 and CVE-2026-119924: Issues with Babelfish for Aurora PostgreSQL Source: AWS Security Bulletins
    CVE-2026-119923CVE-2026-119924
  3. Confirmed 100Vulnerability
    6 Nov 2026
    CVE-2026-122193 - Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM documents in Trusted Remote Execution (REX) Source: AWS Security Bulletins
    CVE-2026-122193
  4. Confirmed 100Actively exploited
    6 Nov 2026
    PHP2Shell: What to know about two critical PHP flaws 2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+7 more
  5. Confirmed 100Threat actor
    6 Nov 2026
    CVE-2026-109518 - APT package manager that affects Ubuntu and Debian operating systems Source: AWS Security Bulletins
    CVE-2026-109518
  6. Confirmed 100Vulnerability
    5 Nov 2026
    CVE-2026-119083 - GluonTS arbitrary file write during archive extraction Source: AWS Security Bulletins
    CVE-2026-119083
  7. Confirmed 100Other
    5 Nov 2026
    Post-Quantum Questions to Ask Your Vendors Source: CISA Advisories
  8. Confirmed 100Other
    5 Nov 2026
    US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems Source: CISA Advisories
    Country United States of America
  9. Confirmed 100Actively exploited
    5 Nov 2026
    Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says 2 sources: CISA Advisories, The Hacker News
    Vendor Apple
    CVE-2024-27834
  10. Confirmed 100Vulnerability
    5 Nov 2026
    Cisco Secure Email Gateway SQL Injection Vulnerability 2 sources: Cisco Security Advisories, CERT-EU Advisories
    Impact Everyday lifeVendor Cisco
  11. Confirmed 100Vulnerability
    5 Nov 2026
    2026-018: Critical Vulnerabilities in PHP Source: CERT-EU Advisories
  12. Confirmed 100Vulnerability
    5 Nov 2026
    2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions Source: CERT-EU Advisories
    Vendor GitLab
  13. Confirmed 100Vulnerability
    5 Nov 2026
    2026-016: Critical Vulnerability in GitLab CE and EE Source: CERT-EU Advisories
    Vendor GitLab
  14. Confirmed 100Vulnerability
    5 Nov 2026
    2026-015: Critical Vulnerability in Multiple Atlassian Products Source: CERT-EU Advisories
    Vendor Atlassian
  15. Confirmed 100Vulnerability
    5 Nov 2026
    2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway Source: CERT-EU Advisories
    Impact Everyday lifeVendor Citrix
  16. Confirmed 100Vulnerability
    5 Nov 2026
    2026-013: Critical Vulnerability in F5 BIG-IP APM Source: CERT-EU Advisories
    Vendor F5
  17. Confirmed 100Vulnerability
    5 Nov 2026
    2026-012: Critical Vulnerabilities in Check Point Products Source: CERT-EU Advisories
    Vendor Check Point
  18. Confirmed 100Vulnerability
    5 Nov 2026
    2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server Source: CERT-EU Advisories
    Vendor SAP
    CVE-2026-44756CVE-2026-58240
  19. Confirmed 85Actively exploited
    5 Nov 2026
    Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day 2 sources: SecurityWeek, Help Net Security
    Vendor Zyxel
    CVE-2026-7273CVE-2026-107441
  20. Confirmed 100Policy / law
    4 Nov 2026
    CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-122266
  21. Confirmed 100Vulnerability
    4 Nov 2026
    CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard 2 sources: AWS Security Bulletins, r/netsec
    Vendor AWS
    CVE-2026-122192
  22. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities Source: Cisco Security Advisories
    Vendor Cisco
  23. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco Identity Services Engine Authorization Bypass Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  24. Confirmed 100Actively exploited
    4 Nov 2026
    Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026 Source: Cisco Security Advisories
    Vendor CiscoVendor Google
    CVE-2026-111497
  25. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco Advance Notification for Publication of November 4, 2026, Security Advisories Source: Cisco Security Advisories
    Impact Everyday lifeVendor Cisco
    CVE-2026-76506CVE-2026-76419CVE-2026-20241

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-111497Google BrotliExploited—82.6%
CVE-2026-110447Collabora Collabora Online – Built-in CODE ServerExploited—73.3%
CVE-2026-97229GitLab Community Edition and Enterprise EditionExploited—65.2%
CVE-2026-48356Adobe Commerce and MagentoExploited—47.5%
CVE-2026-46300Linux KernelExploited—16.1%
CVE-2026-7273Zyxel GS1900 Series SwitchesExploited—2.8%
CVE-2024-27834Apple Multiple ProductsExploited—1.4%
CVE-2026-119977WordPress WordPress CoreExploited—1.2%
CVE-2026-114625Arista VeloCloud OrchestratorExploited—1.0%
CVE-2026-118527Ivanti Connect SecureExploited—0.8%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.