Security Signal
Threat intelligence report · last 30 days

last 30 days · Vendor research

Generated 5 Nov 2026, 13:36 UTC · Live view: news.rogelio.cloud/?show=all&since=30d&tier=3

Executive summary

  • 57 stories in the last 30 days; 2 (4%) confirmed by official sources.
  • 3 involve vulnerabilities attackers are already exploiting. Patch these first.
  • 8 breaches or ransomware attacks reported.
  • Most common topic: Other (24).
  • Most reported vendor: Google (4 stories).
  • Most mentioned country: United Kingdom.
  • 12 of the listed vulnerabilities are on CISA's exploited list.
57
Stories
3
Actively exploited
8
Breaches & ransomware
2
Confirmed by official sources

Stories per day

10 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 3 stories (1 exploited, 0 breaches/ransomware) F2332026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 0 stories (0 exploited, 0 breaches/ransomware) S252026-10-26: 1 stories (0 exploited, 1 breaches/ransomware) M2612026-10-27: 5 stories (0 exploited, 1 breaches/ransomware) T2752026-10-28: 7 stories (1 exploited, 2 breaches/ransomware) W2872026-10-29: 10 stories (1 exploited, 1 breaches/ransomware) T29102026-10-30: 7 stories (0 exploited, 0 breaches/ransomware) F3072026-10-31: 2 stories (0 exploited, 0 breaches/ransomware) S3122026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 6 stories (0 exploited, 2 breaches/ransomware) M262026-11-03: 8 stories (0 exploited, 1 breaches/ransomware) T382026-11-04: 3 stories (0 exploited, 0 breaches/ransomware) W432026-11-05: 1 stories (0 exploited, 0 breaches/ransomware) T51

Exploited Breach / ransomware Other

Topics

  • Other — 24 (42%)
  • Malware — 8 (14%)
  • Vulnerability — 7 (12%)
  • Threat actor — 5 (9%)
  • Breach / leak — 5 (9%)
  • Ransomware — 3 (5%)
  • Actively exploited — 3 (5%)
  • Policy / law — 2 (4%)

Countries in the news

Fiji: 0United Republic of Tanzania: 0Western Sahara: 0Canada: 0United States of America: 0Kazakhstan: 0Uzbekistan: 0Papua New Guinea: 0Indonesia: 0Argentina: 0Chile: 0Democratic Republic of the Congo: 0Somalia: 0Kenya: 0Sudan: 0Chad: 0Haiti: 0Dominican Republic: 0Russian Federation: 0Bahamas: 0Falkland Islands (Malvinas): 0Norway: 0Greenland: 0French Southern Territories: 0Timor-Leste: 0South Africa: 0Lesotho: 0Mexico: 0Uruguay: 0Brazil: 0Bolivia: 0Peru: 0Colombia: 0Panama: 0Costa Rica: 0Nicaragua: 0Honduras: 0El Salvador: 0Guatemala: 0Belize: 0Venezuela: 0Guyana: 0Suriname: 0France: 0Ecuador: 0Puerto Rico: 0Jamaica: 0Cuba: 0Zimbabwe: 0Botswana: 0Namibia: 0Senegal: 0Mali: 0Mauritania: 0Benin: 0Niger: 0Nigeria: 0Cameroon: 0Togo: 0Ghana: 0Cote d'Ivoire: 0Guinea: 0Guinea-Bissau: 0Liberia: 0Sierra Leone: 0Burkina Faso: 0Central African Republic: 0Republic of the Congo: 0Gabon: 0Equatorial Guinea: 0Zambia: 0Malawi: 0Mozambique: 0Eswatini: 0Angola: 0Burundi: 0Israel: 0Lebanon: 0Madagascar: 0State of Palestine: 0Republic of The Gambia: 0Tunisia: 0Algeria: 0Jordan: 0United Arab Emirates: 0Qatar: 0Kuwait: 0Iraq: 0Oman: 0Vanuatu: 0Cambodia: 0Thailand: 0Lao People's Democratic Republic: 0Myanmar: 0Vietnam: 0North Korea: 0South Korea: 0Mongolia: 0India: 0Bangladesh: 0Bhutan: 0Nepal: 0Pakistan: 0Afghanistan: 0Tajikistan: 0Kyrgyzstan: 0Turkmenistan: 0Islamic Republic of Iran: 0Syrian Arab Republic: 0Armenia: 0Sweden: 0Belarus: 0Ukraine: 1Poland: 0Austria: 0Hungary: 0Moldova, Republic of: 0Romania: 0Lithuania: 0Latvia: 0Estonia: 0Germany: 0Bulgaria: 0Greece: 0Türkiye: 0Albania: 0Croatia: 0Switzerland: 0Luxembourg: 0Belgium: 0Netherlands: 0Portugal: 0Spain: 0Ireland: 0New Caledonia: 0Solomon Islands: 0New Zealand: 0Australia: 0Sri Lanka: 0People's Republic of China: 0Taiwan, Province of China: 0Italy: 0Denmark: 0United Kingdom: 1Iceland: 0Azerbaijan: 0Georgia: 0Philippines: 0Malaysia: 0Brunei Darussalam: 0Slovenia: 0Finland: 0Slovakia: 0Czech Republic: 0Eritrea: 0Japan: 0Paraguay: 0Yemen: 0Saudi Arabia: 0Cyprus: 0Morocco: 0Egypt: 0Libya: 0Ethiopia: 0Djibouti: 0Uganda: 0Rwanda: 0Bosnia and Herzegovina: 0The Republic of North Macedonia: 0Serbia: 0Montenegro: 0Kosovo: 0Trinidad and Tobago: 0South Sudan: 0

United Kingdom 1 · Ukraine 1

Most reported vendors

Google4Apple3Cisco2Microsoft2PHP Group2Adobe1Arista1Broadcom1GitLab1Ivanti1

Top stories · newest days first, most confident within each day

  1. Reported 60Other
    5 Nov 2026
    Vizio, Samsung smart TVs seem to ignore tracking opt outs Source: Malwarebytes Labs
    Impact Everyday lifeVendor Samsung
  2. Confirmed 100Actively exploited
    4 Nov 2026
    PHP2Shell: What to know about two critical PHP flaws 2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  3. Corroborated 75Other
    4 Nov 2026
    Password manager mSecure tells users to change passwords, won't say why 2 sources: The Register (Security), Malwarebytes Labs
    Impact Everyday life
  4. Corroborated 75Other
    4 Nov 2026
    Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical 2 sources: SecurityWeek, Malwarebytes Labs
    Vendor Google
  5. Reported 60Other
    4 Nov 2026
    The fake $750 Apple Cash reward that pays out nothing Source: Malwarebytes Labs
    Vendor Apple
  6. Reported 60Malware
    4 Nov 2026
    SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware Source: ESET WeLiveSecurity
  7. Reported 60Threat actor
    3 Nov 2026
    Fake-download campaign uses trojanized installers to deliver monetization payloads Source: Microsoft Security Blog
  8. Reported 60Other
    3 Nov 2026
    Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms Source: Microsoft Security Blog
    Vendor Microsoft
  9. Reported 60Malware
    3 Nov 2026
    A hidden backdoor put 1.3 million TV boxes to work for criminals Source: Malwarebytes Labs
  10. Reported 60Threat actor
    3 Nov 2026
    Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles Source: Check Point Research
  11. Reported 60Policy / law
    3 Nov 2026
    Hackers put porn on public billboards and claim it was “far too easy” Source: Malwarebytes Labs
  12. Reported 60Breach / leak
    3 Nov 2026
    Revolve card breach: 1.5 million people may be affected Source: Malwarebytes Labs
    Impact Everyday life
  13. Reported 60Malware
    3 Nov 2026
    Gorbag: Orcs at the border harvesting intelligence from Ukraine Source: ESET WeLiveSecurity
    Country Ukraine
  14. Corroborated 75Other
    2 Nov 2026
    Applebee’s exposed customers’ personal data after leaving database password in app 2 sources: TechCrunch Security, Malwarebytes Labs
    Impact Everyday life
  15. Reported 60Ransomware
    2 Nov 2026
    Unit 42 Threat Intelligence Highlights - Nov. 2, 2026 Source: Unit 42
  16. Reported 60Vulnerability
    2 Nov 2026
    What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks Source: Microsoft Security Blog
  17. Reported 60Breach / leak
    2 Nov 2026
    2nd November – Threat Intelligence Report Source: Check Point Research
  18. Reported 60Other
    2 Nov 2026
    5 stars for sale: Inside the underground fake review trade Source: Malwarebytes Labs
  19. Reported 60Other
    2 Nov 2026
    When confusion reigns, trusted vendors must guide their SMB customers Source: ESET WeLiveSecurity
    Impact Everyday life
  20. Reported 60Other
    2 Nov 2026
    A week in security (October 26 – November 1) Source: Malwarebytes Labs
  21. Reported 60Malware
    31 Oct 2026
    Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer Source: Cisco Talos
  22. Reported 60Malware
    31 Oct 2026
    Inside a malicious Claude Code-branded extension and its persistent SSH backdoor Source: Microsoft Security Blog
  23. Confirmed 100Actively exploited
    30 Oct 2026
    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) 3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  24. Reported 60Other
    30 Oct 2026
    From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths Source: Microsoft Security Blog
  25. Reported 60Other
    30 Oct 2026
    Fake PDF and search tools hijacked searches for 13.4 million Chrome users Source: Malwarebytes Labs
    Vendor Google

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-20127Cisco Catalyst SD-WAN Controller and ManagerExploited—87.6%
CVE-2026-111497Google BrotliExploited—82.6%
CVE-2026-97229GitLab Community Edition and Enterprise EditionExploited—65.2%
CVE-2026-48356Adobe Commerce and MagentoExploited—47.5%
CVE-2026-46300Linux KernelExploited—16.1%
CVE-2026-114625Arista VeloCloud OrchestratorExploited—1.0%
CVE-2026-119977WordPress WordPress CoreExploited—1.0%
CVE-2026-118527Ivanti Connect SecureExploited—0.8%
CVE-2026-41709Broadcom VMware ESXExploited—0.7%
CVE-2024-27834Apple Multiple ProductsExploited—0.6%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.