RedPatch
Headlines refreshed Sun Nov 1, 4:30 PM ET (12 h ago) · content checked against vendor docs

Security Watch

Patch what attackers are using. Today.

RedPatch tracks the vulnerabilities being exploited in the wild and turns them into clear, sourced fixes for macOS, Windows 11, Windows Server and Linux.

Every recommendation links to the vendor's own documentation. Threat feeds refresh twice a day, and CISA's Known Exploited Vulnerabilities catalog drives the watch list.

18 actively exploited vulnerabilities added to CISA's catalog in the last 14 days · See the list

Total visitors46,604all time
Today323Mon, Nov 2
Unique IPs7,712distinct sources
Countries106global reach

⚡ Threat Radar

500 signals · last 1 days · ● last hour ● today

🌍 Top Origins

by visits
🇳🇱Netherlands 16,074
🇺🇸United States 13,629
🇦🇩Andorra 1,693
🇩🇪Germany 899
🇨🇳China 845
🇸🇬Singapore 838
🇫🇷France 723
🇧🇷Brazil 491
🇭🇰Hong Kong 462
🇯🇵Japan 394

Pick your platform

⌘macOS 33 tips · 15 tools ⊞Windows 11 40 tips · 17 tools ▣Windows Server 44 tips · 17 tools 🐧Linux 44 tips · 16 tools

Today's headlines

  1. libopenmpt-0.8.10-1.el9Fedora security updates (Bodhi) · Nov 1
  2. libopenmpt-0.8.10-1.el8Fedora security updates (Bodhi) · Nov 1
  3. John Leeson (the voice of K9) has diedHacker News · Nov 1
  4. FBI links $6.3 billion Binance crypto heist to North Korean hackersBleepingComputer · Nov 1
  5. US Jobs Pickup May Keep Fed on Track to Hike Rates AgainHacker News · Nov 1
  6. Alpine Linux rebuilds GitLab after attempted RCE attackBleepingComputer · Nov 1
  7. Northstar Security Exits Stealth With $7M to Expose Toxic Risk CombinationsSecurityWeek · Nov 1
  8. OneNote File Extraction, (Sun, Nov 1st)SANS Internet Storm Center · Nov 1
  9. CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private KeyThe Hacker News · Nov 1
  10. Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear ScriptThe Hacker News · Nov 1

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

  1. KEV: CVE-2026-118527 — Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
  2. KEV: CVE-2026-111357 — Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
  3. KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
  4. KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
  5. KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
  6. KEV: CVE-2026-46300 — Linux Kernel: Linux Kernel Missing Initialization of a Variable VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
  7. KEV: CVE-2026-48356 — Adobe Commerce and Magento: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27
  8. KEV: CVE-2026-111497 — Google Brotli: Google Brotli Unchecked Return Value VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27

Full KEV catalog →

📡 Live Visitor Feed

LIVE auto-refresh 30s
WhenIPLocationPageAgent
2s216.73.216.✱ 🇺🇸 Columbus, United States https://redpatch.us/Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@a
18s172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
1m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
4m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
5m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
9m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
10m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
14m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
15m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
16m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
18m172.31.0.✱ 🌐 https://redpatch.us/je9-site-sweep/1.0 (+admin.je9.us)
19m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
20m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
24m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
25m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
28m111.225.149.✱ 🇨🇳 Shijiazhuang, China https://redpatch.us/Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.
29m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
30m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
31m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/ATLAS-drift/1.0
31m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14

The link wall

Government & standards

Threat research

News

AI security

Open a Channel

Reporting a threat, asking about a tip, or want a hand hardening your own machines? Send a note — it goes straight to the RedPatch desk, and you get a reference number back.

› Reference ID on receipt  › DKIM-signed acknowledgement  › Read by a human

Go deeper

networks.jelia.nycHow the internet actually moves your data — packets, DNS, routing, TLS. waves.jelia.nycElectromagnetism explained — Wi-Fi, 2.4 GHz, Bluetooth and why RF leaks. lib.jelia.nycThe library — security, Linux, assembly and networking books on the shelf. blog.redpatch.usRedPatch field notes.