cyberresearch.us

Threat Signals

One RSS feed for a curated set of advisories, research, exploit watch, indicator digests, and a short news list. Each item links to the original publisher. This page does not republish their articles.

Feed URL
https://feeds.cyberresearch.us/signals.xml

Latest

1. [CCCS Alerts] Linux security advisory (AV26-1108)CCCS Alerts · advisory · 2026-10-30 21:34 UTC
2. [BleepingComputer] Critical Linux kernel flaw allows remote root attacks on MPTCP serversBleepingComputer · news · 2026-10-30 21:09 UTC
3. [The Record] DOJ raises privacy concerns over potential sale of Character.AI chatsThe Record · news · 2026-10-30 20:45 UTC
4. [The Record] Fashion retailer Resolve says hackers stole payment card informationThe Record · news · 2026-10-30 19:00 UTC
5. [CCCS Alerts] Ivanti security advisory (AV26-1035) - Update 2CCCS Alerts · advisory · 2026-10-30 18:01 UTC
6. [BleepingComputer] Trezor warns of suspected crypto-theft implant in hardware walletBleepingComputer · news · 2026-10-30 15:58 UTC
7. [The Record] Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breachThe Record · news · 2026-10-30 15:54 UTC
8. [CCCS Alerts] MongoDB security advisory (AV26-1107)CCCS Alerts · advisory · 2026-10-30 15:53 UTC
9. [CCCS Alerts] HashiCorp security advisory (AV26-1106)CCCS Alerts · advisory · 2026-10-30 15:49 UTC
10. [CCCS Alerts] Drupal security advisory (AV26-1105)CCCS Alerts · advisory · 2026-10-30 15:43 UTC
11. [BleepingComputer] Malicious Claude Code extension on Cursor planted SSH backdoorsBleepingComputer · news · 2026-10-30 14:36 UTC
12. [The Record] Syrian Electronic Army hacker gets prison time for attacks on Western targetsThe Record · news · 2026-10-30 14:24 UTC
13. [NCSC-NL Advisories/nl] NCSC-2026-0463 [1.00] [M/H] Kwetsbaarheid verholpen in Cisco Secure Firewall ASA en FTD SoftwareNCSC-NL Advisories · advisory · 2026-10-30 14:11 UTC
14. [BleepingComputer] SS7 and Diameter Attacks: How Signaling Flaws Expose Your PhoneBleepingComputer · news · 2026-10-30 14:00 UTC
15. [Microsoft MSRC] CVE-2026-69446 Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft MSRC · advisory · 2026-10-30 14:00 UTC
16. [Microsoft MSRC] CVE-2026-118147 Visual Studio Spoofing VulnerabilityMicrosoft MSRC · advisory · 2026-10-30 14:00 UTC
17. [Microsoft MSRC] CVE-2026-70125 Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft MSRC · advisory · 2026-10-30 14:00 UTC
18. [CERT.PL] Vulnerabilities in Request Tracker and RT for Incident Response softwareCERT.PL · advisory · 2026-10-30 13:55 UTC
19. [NCSC-NL Advisories/nl] NCSC-2026-0462 [1.00] [M/H] Kwetsbaarheden verholpen in Juniper Networks Session Smart Router en Session Smart ConductorNCSC-NL Advisories · advisory · 2026-10-30 13:15 UTC
20. [BleepingComputer] CISA says max severity GitLab flaw now exploited in the wildBleepingComputer · news · 2026-10-30 13:00 UTC
21. [The Record] British spy agency cannot account for thousands of data storage devices, watchdog saysThe Record · news · 2026-10-30 12:52 UTC
22. [The Record] Hackers target government Windows systems in Asia with new malwareThe Record · news · 2026-10-30 12:36 UTC
23. [NCSC-NL Advisories/nl] NCSC-2026-0461 [1.00] [M/H] Kwetsbaarheden verholpen in Linux kernelNCSC-NL Advisories · advisory · 2026-10-30 12:08 UTC
24. [CISA Advisories] CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Advisories · advisory · 2026-10-30 12:00 UTC
25. [CERT.PL] Vulnerabilities in Płatnik softwareCERT.PL · advisory · 2026-10-30 11:55 UTC
26. [The Record] Polymarket confirms cyberattack on third-party provider after outagesThe Record · news · 2026-10-30 11:33 UTC
27. [The Record] Russian popular home goods chain faces days of disruption following cyberattackThe Record · news · 2026-10-30 11:30 UTC
28. [BleepingComputer] Microsoft finally fixes VPN issues caused by September updatesBleepingComputer · news · 2026-10-30 11:20 UTC
29. [CERT.PL] Vulnerabilities in ARKETEAM Protectel softwareCERT.PL · advisory · 2026-10-30 10:55 UTC
30. [KrCERT/CC/ko] 다우기술 제품 보안 업데이트 권고KrCERT/CC · advisory · 2026-10-30 09:20 UTC
31. [NCSC-NL Advisories/nl] NCSC-2026-0460 [1.00] [M/H] Kwetsbaarheden verholpen in Dell PowerProtect Data DomainNCSC-NL Advisories · advisory · 2026-10-30 09:10 UTC
32. [INCIBE-CERT] Exposición de información en el editor de comentarios de ForocochesINCIBE-CERT · advisory · 2026-10-30 08:24 UTC
33. [KrCERT/CC/ko] Sophos 제품 보안 업데이트 권고KrCERT/CC · advisory · 2026-10-30 07:07 UTC
34. [KrCERT/CC/ko] Atlassian 제품 보안 업데이트 권고KrCERT/CC · advisory · 2026-10-30 07:07 UTC
35. [KrCERT/CC/ko] Oracle 제품 보안 업데이트 권고KrCERT/CC · advisory · 2026-10-30 07:06 UTC
36. [KrCERT/CC/ko] VMware 제품 보안 업데이트 권고KrCERT/CC · advisory · 2026-10-30 07:05 UTC
37. [KrCERT/CC/ko] Linux 제품 보안 업데이트 권고KrCERT/CC · advisory · 2026-10-30 06:55 UTC
38. [KrCERT/CC/ko] Cisco 제품 보안 업데이트 권고KrCERT/CC · advisory · 2026-10-30 06:54 UTC
39. [KrCERT/CC/ko] Synology 제품 보안 업데이트 권고KrCERT/CC · advisory · 2026-10-30 06:53 UTC
40. [ZDI Upcoming] ZDI-CAN-35872: LiteLLMZDI Upcoming · exploited · 2026-10-30 05:00 UTC
41. [ZDI Upcoming] ZDI-CAN-35871: LiteLLMZDI Upcoming · exploited · 2026-10-30 05:00 UTC
42. [ZDI Upcoming] ZDI-CAN-31757: NVIDIAZDI Upcoming · exploited · 2026-10-30 05:00 UTC
43. [ZDI Upcoming] ZDI-CAN-34752: LiteLLMZDI Upcoming · exploited · 2026-10-30 05:00 UTC
44. [ZDI Upcoming] ZDI-CAN-36736: AutodeskZDI Upcoming · exploited · 2026-10-30 05:00 UTC
45. [ZDI Upcoming] ZDI-CAN-35866: LiteLLMZDI Upcoming · exploited · 2026-10-30 05:00 UTC
46. [CISA KEV] CVE-2026-118527 Ivanti Connect SecureCISA KEV · exploited · 2026-10-30 00:00 UTC
47. [CISA KEV] CVE-2026-111357 Ivanti Connect SecureCISA KEV · exploited · 2026-10-30 00:00 UTC
48. [Feodo Tracker] Feodo Tracker online C2 count 1Feodo Tracker · indicators · 2026-10-30 00:00 UTC
49. [CERT-FR Avis/fr] Multiples vulnérabilités dans les produits Apple (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
50. [CERT-FR Avis/fr] Multiples vulnérabilités dans Google Chrome (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
51. [CERT-FR Avis/fr] Vulnérabilité dans CPython (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
52. [CERT-FR Avis/fr] Vulnérabilité dans Ruby on Rails trilogy (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
53. [CERT-FR Avis/fr] Vulnérabilité dans Tenable Nessus Plugin (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
54. [CERT-FR Avis/fr] Multiples vulnérabilités dans Veeam Management Pack (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
55. [CERT-FR Avis/fr] Vulnérabilité dans GitLab (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
56. [CERT-FR Avis/fr] Multiples vulnérabilités dans Suricata (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
57. [CERT-FR Avis/fr] Vulnérabilité dans Stormshield Management Center (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
58. [CERT-FR Avis/fr] Multiples vulnérabilités dans les produits MongoDB (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
59. [CERT-FR Avis/fr] Multiples vulnérabilités dans le noyau Linux de Red Hat (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
60. [CERT-FR Avis/fr] Multiples vulnérabilités dans le noyau Linux de SUSE (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
61. [CERT-FR Avis/fr] Multiples vulnérabilités dans les produits IBM (30 octobre 2026)CERT-FR Avis · advisory · 2026-10-30 00:00 UTC
62. [The Record] Binance hit by record $6.3 billion crypto hack, scrambles to freeze fundsThe Record · news · 2026-10-30 00:00 UTC
63. [Palo Alto PSIRT] CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)Palo Alto PSIRT · advisory · 2026-10-29 23:54 UTC
64. [CIRCL OSINT] CIRCL OSINT MoustachedBouncer: Espionage against foreign diplomats in BelarusCIRCL OSINT · indicators · 2026-10-29 23:09 UTC
65. [Cisco PSIRT] Cisco Finesse Server-Side Request Forgery VulnerabilityCisco PSIRT · advisory · 2026-10-29 21:22 UTC
66. [Cisco PSIRT] Vulnerabilities in Node.js Affecting Cisco Products: October 2026Cisco PSIRT · advisory · 2026-10-29 20:24 UTC
67. [CCCS Alerts] Cisco security advisory (AV26-1102) - Update 1CCCS Alerts · advisory · 2026-10-29 20:20 UTC
68. [CCCS Alerts] GitLab security advisory (AV26-1028) - Update 1CCCS Alerts · advisory · 2026-10-29 20:14 UTC
69. [The Record] Limited reports of PHP bug exploitation emergeThe Record · news · 2026-10-29 20:01 UTC
70. [The Record] GM settles with 36 states for selling driver data, agrees to $220 million fine and reformsThe Record · news · 2026-10-29 19:45 UTC
71. [Unit 42] Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)Unit 42 · research · 2026-10-29 18:00 UTC
72. [Cisco Talos] A quiet week in infosec <.<Cisco Talos · research · 2026-10-29 18:00 UTC
73. [INCIBE-CERT] Múltiples vulnerabilidades en la aplicación de SABBATICINCIBE-CERT · advisory · 2026-10-29 16:47 UTC
74. [KrCERT/CC/ko] 美 CISA 발표 주요 Exploit 정보공유(Update. 2026-10-30)KrCERT/CC · advisory · 2026-10-29 15:00 UTC
75. [CERT.PL] Vulnerabilities in Zimbra Collaboration softwareCERT.PL · advisory · 2026-10-29 14:55 UTC
76. [Check Point Research] Cohere’s Qwen Story: Looks More Like Model JaggednessCheck Point Research · research · 2026-10-29 14:08 UTC
77. [CCCS Alerts] Mattermost security advisory (AV26-1104)CCCS Alerts · advisory · 2026-10-29 14:04 UTC
78. [Cisco Talos] IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increasesCisco Talos · research · 2026-10-29 14:00 UTC
79. [Microsoft MSRC] CVE-2026-88078 Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft MSRC · advisory · 2026-10-29 14:00 UTC
80. [CCCS Alerts] n8n security advisory (AV26-1103)CCCS Alerts · advisory · 2026-10-29 13:55 UTC

Sources