Security Signal
Threat intelligence report · last 30 days

last 30 days · Linux

Generated 5 Nov 2026, 06:02 UTC · Live view: news.rogelio.cloud/?show=all&since=30d&vendor=Linux

Executive summary

  • 8 stories in the last 30 days; 2 (25%) confirmed by official sources.
  • 1 involve vulnerabilities attackers are already exploiting. Patch these first.
  • 1 breaches or ransomware attacks reported.
  • Most common topic: Vulnerability (3).
  • Most reported vendor: Linux (8 stories).
  • 12 of the listed vulnerabilities are on CISA's exploited list.
8
Stories
1
Actively exploited
1
Breaches & ransomware
2
Confirmed by official sources

Stories per day

4 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 1 stories (1 exploited, 0 breaches/ransomware) F2312026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 0 stories (0 exploited, 0 breaches/ransomware) S252026-10-26: 0 stories (0 exploited, 0 breaches/ransomware) M262026-10-27: 0 stories (0 exploited, 0 breaches/ransomware) T272026-10-28: 0 stories (0 exploited, 0 breaches/ransomware) W282026-10-29: 0 stories (0 exploited, 0 breaches/ransomware) T292026-10-30: 0 stories (0 exploited, 0 breaches/ransomware) F302026-10-31: 1 stories (0 exploited, 0 breaches/ransomware) S3112026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 4 stories (0 exploited, 1 breaches/ransomware) M242026-11-03: 1 stories (0 exploited, 0 breaches/ransomware) T312026-11-04: 0 stories (0 exploited, 0 breaches/ransomware) W42026-11-05: 1 stories (0 exploited, 0 breaches/ransomware) T51

Exploited Breach / ransomware Other

Topics

  • Vulnerability — 3 (38%)
  • Malware — 2 (25%)
  • Threat actor — 1 (13%)
  • Actively exploited — 1 (13%)
  • Breach / leak — 1 (13%)

Most reported vendors

Linux8Google2Adobe1Apple1Arista1Broadcom1GitLab1Ivanti1PHP Group1VMware1

Top stories

#StoryConfidenceUpdated
1PHP2Shell: What to know about two critical PHP flaws
Original article
Confirmed 100
Actively exploited
4 Nov 2026
2Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
Original article
Confirmed 100
Vulnerability
3 Nov 2026
3OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run
Original article
Reported 70
Vulnerability
5 Nov 2026
4cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
Original article
Reported 70
Malware
3 Nov 2026
5Max-severity bug in widely used OT programming tool exploited to deliver Linux malware
Original article
Reported 70
Malware
2 Nov 2026
6⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
Original article
Reported 70
Breach / leak
2 Nov 2026
7Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
Original article
Reported 70
Threat actor
2 Nov 2026
8Remote code execution on Linux systems with multipath TCP
Original article
Unverified 30
Vulnerability
2 Nov 2026

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-111497Google BrotliExploited—82.6%
CVE-2026-97229GitLab Community Edition and Enterprise EditionExploited—65.2%
CVE-2026-48356Adobe Commerce and MagentoExploited—47.5%
CVE-2026-46300Linux KernelExploited—16.1%
CVE-2026-114625Arista VeloCloud OrchestratorExploited—1.0%
CVE-2026-119977WordPress WordPress CoreExploited—1.0%
CVE-2026-118527Ivanti Connect SecureExploited—0.8%
CVE-2026-41709Broadcom VMware ESXExploited—0.7%
CVE-2024-27834Apple Multiple ProductsExploited—0.6%
CVE-2026-111357Ivanti Connect SecureExploited—0.5%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.