Security Signal
Threat intelligence report · last 30 days

last 30 days · Apple

Generated 7 Nov 2026, 03:46 UTC · Live view: news.rogelio.cloud/?show=all&since=30d&vendor=Apple

Executive summary

  • 9 stories in the last 30 days; 3 (33%) confirmed by official sources.
  • 2 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Other (4).
  • Most reported vendor: Apple (8 stories).
  • 12 of the listed vulnerabilities are on CISA's exploited list.
9
Stories
2
Actively exploited
0
Breaches & ransomware
3
Confirmed by official sources

Stories per day

3 10-0910-1410-1910-2410-2911-0311-07

Daily breakdown, last 14 days

S25 M26 T271 W28 T291 F301 S31 S1 M2 T3 W43 T52 F6 S7

Exploited Breach / ransomware Other

Top stories · newest days first, most confident within each day

  1. Confirmed 100Actively exploited
    6 Nov 2026
    PHP2Shell: What to know about two critical PHP flaws 2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
  2. Confirmed 100Actively exploited
    5 Nov 2026
    Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says 2 sources: CISA Advisories, The Hacker News
  3. Reported 70Other
    5 Nov 2026
    Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content Source: The Hacker News
  4. Reported 70Other
    5 Nov 2026
    Apple is bringing harmful content checks to iCloud link sharing with potential account penalties Source: Help Net Security
  5. Reported 70Policy / law
    4 Nov 2026
    Apple turns iCloud into spy cloud, will start looking at public share links Source: The Register (Security)
  6. Reported 60Other
    4 Nov 2026
    The fake $750 Apple Cash reward that pays out nothing Source: Malwarebytes Labs
  7. Corroborated 75Other
    2 Nov 2026
    Applebee’s exposed customers’ personal data after leaving database password in app 2 sources: TechCrunch Security, Malwarebytes Labs
  8. Reported 60Vulnerability
    29 Oct 2026
    Have an older iPhone or iPad? Apple has a security update for you Source: Malwarebytes Labs
  9. Confirmed 100Vulnerability
    28 Oct 2026
    Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution Source: MS-ISAC Advisories

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-111497Google BrotliExploited—82.6%
CVE-2026-97229GitLab Community Edition and Enterprise EditionExploited—65.2%
CVE-2026-48356Adobe Commerce and MagentoExploited—47.5%
CVE-2026-46300Linux KernelExploited—16.1%
CVE-2024-27834Apple Multiple ProductsExploited—1.5%
CVE-2026-119977WordPress WordPress CoreExploited—1.2%
CVE-2026-114625Arista VeloCloud OrchestratorExploited—1.0%
CVE-2026-118527Ivanti Connect SecureExploited—0.8%
CVE-2026-41709Broadcom VMware ESXExploited—0.7%
CVE-2026-111357Ivanti Connect SecureExploited—0.5%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.