Security Signal
Threat intelligence report · last 30 days
last 7 days · Linux
Generated 5 Nov 2026, 02:21 UTC · Live view: news.rogelio.cloud/?since=7d&vendor=Linux
Executive summary
- 6 stories in the last 30 days; 2 (33%) confirmed by official sources.
- 1 involve vulnerabilities attackers are already exploiting. Patch these first.
- 1 breaches or ransomware attacks reported.
- Most common topic: Malware (2).
- Most reported vendor: Linux (6 stories).
- 12 of the listed vulnerabilities are on CISA's exploited list.
6
Stories
1
Actively exploited
1
Breaches & ransomware
2
Confirmed by official sources
Stories per day
Daily breakdown, last 14 days
Exploited Breach / ransomware Other
Topics
- Malware — 2 (33%)
- Vulnerability — 1 (17%)
- Threat actor — 1 (17%)
- Actively exploited — 1 (17%)
- Breach / leak — 1 (17%)
Most reported vendors
Top stories
| # | Story | Confidence | Updated |
|---|---|---|---|
| 1 | PHP2Shell: What to know about two critical PHP flaws Original article | Confirmed 100 Actively exploited | 4 Nov 2026 |
| 2 | Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing Original article | Confirmed 100 Vulnerability | 3 Nov 2026 |
| 3 | cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes Original article | Reported 70 Malware | 3 Nov 2026 |
| 4 | Max-severity bug in widely used OT programming tool exploited to deliver Linux malware Original article | Reported 70 Malware | 2 Nov 2026 |
| 5 | ⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More Original article | Reported 70 Breach / leak | 2 Nov 2026 |
| 6 | Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts Original article | Reported 70 Threat actor | 2 Nov 2026 |
Vulnerabilities to watch
| CVE | Product | Exploited | CVSS | EPSS |
|---|---|---|---|---|
| CVE-2024-27834 | Apple Multiple Products | Exploited | — | — |
| CVE-2026-109618 | PHP Group PHP | Exploited | — | — |
| CVE-2026-109619 | PHP Group PHP | Exploited | — | — |
| CVE-2026-111357 | Ivanti Connect Secure | Exploited | — | — |
| CVE-2026-111497 | Google Brotli | Exploited | — | — |
| CVE-2026-114625 | Arista VeloCloud Orchestrator | Exploited | — | — |
| CVE-2026-118527 | Ivanti Connect Secure | Exploited | — | — |
| CVE-2026-119977 | WordPress WordPress Core | Exploited | — | — |
| CVE-2026-41709 | Broadcom VMware ESX | Exploited | — | — |
| CVE-2026-46300 | Linux Kernel | Exploited | — | — |
| CVE-2026-48356 | Adobe Commerce and Magento | Exploited | — | — |
| CVE-2026-97229 | GitLab Community Edition and Enterprise Edition | Exploited | — | — |