Security Signal
Threat intelligence report · last 30 days

Confirmed · Security press

Generated 6 Nov 2026, 21:26 UTC · Live view: news.rogelio.cloud/?label=Confirmed&tier=2

Executive summary

  • 5 stories in the last 30 days; 5 (100%) confirmed by official sources.
  • 4 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Actively exploited (4).
  • Most reported vendor: Apple (1 stories).
  • 5 of the listed vulnerabilities are on CISA's exploited list.
5
Stories
4
Actively exploited
0
Breaches & ransomware
5
Confirmed by official sources

Stories per day

1 10-0810-1310-1810-2310-2811-0211-06

Daily breakdown, last 14 days

S24 S25 M26 T27 W28 T29 F301 S311 S1 M2 T31 W41 T51 F6

Exploited Breach / ransomware Other

Topics

Most reported vendors

Apple1Ivanti1Linux1WordPress1Zyxel1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Actively exploited
    5 Nov 2026
    Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says 2 sources: CISA Advisories, The Hacker News
    Vendor Apple
    CVE-2024-27834
  2. Confirmed 85Actively exploited
    5 Nov 2026
    Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day 2 sources: SecurityWeek, Help Net Security
    Vendor Zyxel
    CVE-2026-7273CVE-2026-107441
  3. Confirmed 100Actively exploited
    4 Nov 2026
    CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades 2 sources: CISA Advisories, The Hacker News
    Vendor WordPress
    CVE-2026-119977
  4. Confirmed 100Vulnerability
    3 Nov 2026
    Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing 3 sources: AWS Security Bulletins, Fortinet PSIRT, The Hacker News
    Impact Everyday lifeVendor Linux
    CVE-2026-98432
  5. Confirmed 100Actively exploited
    31 Oct 2026
    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access 2 sources: CISA Advisories, The Hacker News
    Vendor Ivanti
    CVE-2026-111357CVE-2026-118527

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-7273Zyxel GS1900 Series SwitchesExploited—2.8%
CVE-2024-27834Apple Multiple ProductsExploited—1.4%
CVE-2026-119977WordPress WordPress CoreExploited—1.2%
CVE-2026-118527Ivanti Connect SecureExploited—0.8%
CVE-2026-111357Ivanti Connect SecureExploited—0.5%
CVE-2026-98432No—0.8%
CVE-2026-107441No—0.3%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.