Security Signal
Threat intelligence report · last 30 days

last 7 days · Confirmed · Official

Generated 6 Nov 2026, 18:03 UTC · Live view: news.rogelio.cloud/?since=7d&label=Confirmed&tier=1

Executive summary

  • 42 stories in the last 30 days; 42 (100%) confirmed by official sources.
  • 7 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Vulnerability (28).
  • Most reported vendor: AWS (8 stories).
  • Most mentioned country: United Kingdom.
  • 12 of the listed vulnerabilities are on CISA's exploited list.
42
Stories
7
Actively exploited
0
Breaches & ransomware
42
Confirmed by official sources

Stories per day

11 10-0810-1310-1810-2310-2811-0211-06

Daily breakdown, last 14 days

S24 S25 M26 T271 W28 T291 F302 S311 S1 M25 T39 W49 T511 F62

Exploited Breach / ransomware Other

Topics

Countries in the news

United Kingdom 1 · United States of America 1

Most reported vendors

AWS8Cisco8GitLab3Google3Apple2Ivanti2Linux2PHP Group2Palo Alto Networks2WordPress2

Top stories · newest days first, most confident within each day

  1. Confirmed 100Vulnerability
    6 Nov 2026
    CVE-2026-122193 - Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM documents in Trusted Remote Execution (REX) Source: AWS Security Bulletins
    CVE-2026-122193
  2. Confirmed 100Threat actor
    6 Nov 2026
    CVE-2026-109518 - APT package manager that affects Ubuntu and Debian operating systems Source: AWS Security Bulletins
    CVE-2026-109518
  3. Confirmed 100Vulnerability
    5 Nov 2026
    CVE-2026-119083 - GluonTS arbitrary file write during archive extraction Source: AWS Security Bulletins
    CVE-2026-119083
  4. Confirmed 100Other
    5 Nov 2026
    Post-Quantum Questions to Ask Your Vendors Source: CISA Advisories
  5. Confirmed 100Other
    5 Nov 2026
    US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems Source: CISA Advisories
    Country United States of America
  6. Confirmed 100Actively exploited
    5 Nov 2026
    Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says 2 sources: CISA Advisories, The Hacker News
    Vendor Apple
    CVE-2024-27834
  7. Confirmed 100Vulnerability
    5 Nov 2026
    Cisco Secure Email Gateway SQL Injection Vulnerability 2 sources: Cisco Security Advisories, CERT-EU Advisories
    Impact Everyday lifeVendor Cisco
  8. Confirmed 100Vulnerability
    5 Nov 2026
    2026-018: Critical Vulnerabilities in PHP Source: CERT-EU Advisories
  9. Confirmed 100Vulnerability
    5 Nov 2026
    2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions Source: CERT-EU Advisories
    Vendor GitLab
  10. Confirmed 100Vulnerability
    5 Nov 2026
    2026-016: Critical Vulnerability in GitLab CE and EE Source: CERT-EU Advisories
    Vendor GitLab
  11. Confirmed 100Vulnerability
    5 Nov 2026
    2026-015: Critical Vulnerability in Multiple Atlassian Products Source: CERT-EU Advisories
    Vendor Atlassian
  12. Confirmed 100Vulnerability
    5 Nov 2026
    2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway Source: CERT-EU Advisories
    Impact Everyday lifeVendor Citrix
  13. Confirmed 100Vulnerability
    5 Nov 2026
    2026-013: Critical Vulnerability in F5 BIG-IP APM Source: CERT-EU Advisories
    Vendor F5
  14. Confirmed 100Vulnerability
    5 Nov 2026
    2026-012: Critical Vulnerabilities in Check Point Products Source: CERT-EU Advisories
    Vendor Check Point
  15. Confirmed 100Vulnerability
    5 Nov 2026
    2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server Source: CERT-EU Advisories
    Vendor SAP
    CVE-2026-44756CVE-2026-58240
  16. Confirmed 100Policy / law
    4 Nov 2026
    CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-122266
  17. Confirmed 100Vulnerability
    4 Nov 2026
    CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard 2 sources: AWS Security Bulletins, r/netsec
    Vendor AWS
    CVE-2026-122192
  18. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities Source: Cisco Security Advisories
    Vendor Cisco
  19. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco Identity Services Engine Authorization Bypass Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  20. Confirmed 100Actively exploited
    4 Nov 2026
    Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026 Source: Cisco Security Advisories
    Vendor CiscoVendor Google
    CVE-2026-111497
  21. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco Advance Notification for Publication of November 4, 2026, Security Advisories Source: Cisco Security Advisories
    Impact Everyday lifeVendor Cisco
    CVE-2026-76506CVE-2026-76419CVE-2026-20241
  22. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco Unified Communications Manager Cross-Site Scripting Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  23. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco UCS Central Software Remote Code Execution Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  24. Confirmed 100Actively exploited
    4 Nov 2026
    PHP2Shell: What to know about two critical PHP flaws 2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  25. Confirmed 100Actively exploited
    4 Nov 2026
    CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades 2 sources: CISA Advisories, The Hacker News
    Vendor WordPress
    CVE-2026-119977

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-111497Google BrotliExploited—82.6%
CVE-2026-97229GitLab Community Edition and Enterprise EditionExploited—65.2%
CVE-2026-48356Adobe Commerce and MagentoExploited—47.5%
CVE-2026-46300Linux KernelExploited—16.1%
CVE-2024-27834Apple Multiple ProductsExploited—1.4%
CVE-2026-119977WordPress WordPress CoreExploited—1.2%
CVE-2026-114625Arista VeloCloud OrchestratorExploited—1.0%
CVE-2026-118527Ivanti Connect SecureExploited—0.8%
CVE-2026-41709Broadcom VMware ESXExploited—0.7%
CVE-2026-111357Ivanti Connect SecureExploited—0.5%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.