RedPatch
Headlines refreshed Wed Oct 21, 5:30 PM ET (10 h ago) · content checked against vendor docs

Security Watch

Patch what attackers are using. Today.

RedPatch tracks the vulnerabilities being exploited in the wild and turns them into clear, sourced fixes for macOS, Windows 11, Windows Server and Linux.

Every recommendation links to the vendor's own documentation. Threat feeds refresh twice a day, and CISA's Known Exploited Vulnerabilities catalog drives the watch list.

20 actively exploited vulnerabilities added to CISA's catalog in the last 14 days · See the list

Total visitors38,107all time
Today208Thu, Oct 22
Unique IPs7,274distinct sources
Countries103global reach

⚡ Threat Radar

500 signals · last 1.2 days · ● last hour ● today

🌍 Top Origins

by visits
🇳🇱Netherlands 14,923
🇺🇸United States 10,448
🇦🇩Andorra 1,671
🇩🇪Germany 840
🇸🇬Singapore 801
🇨🇳China 760
🇫🇷France 707
🇧🇷Brazil 451
🇭🇰Hong Kong 428
🇯🇵Japan 375

Pick your platform

⌘macOS 33 tips · 15 tools ⊞Windows 11 40 tips · 17 tools ▣Windows Server 44 tips · 17 tools 🐧Linux 44 tips · 16 tools

Today's headlines

  1. Resolved issues in Windows 11, version 24H2Windows Release Health · Oct 21
  2. Windows Server 2022 known issues and notificationsWindows Release Health · Oct 21
  3. Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)SANS Internet Storm Center · Oct 21
  4. RHSA-2026:87408: Important: rsyslog security updateRed Hat Security Advisories (RHSA) · Oct 21
  5. Compromised eMudhra intermediate certificatesCisco Talos · Oct 21
  6. RHSA-2026:87079: Important: php:8.3 security updateRed Hat Security Advisories (RHSA) · Oct 21
  7. Lazarus hackers use post-quantum cryptography for malware deliveryBleepingComputer · Oct 21
  8. openssh-10.6p1-1.fc45Fedora security updates (Bodhi) · Oct 21
  9. Meta on the spot for $25 billion under New Mexico privacy rulingThe Record · Oct 21
  10. Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware SecurityDark Reading · Oct 21

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

  1. KEV: CVE-2026-106931 — EG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
  2. KEV: CVE-2026-96656 — Plex Media Server: Plex Media Server External Control of File Name or Path VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
  3. KEV: CVE-2026-96655 — Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
  4. KEV: CVE-2026-96654 — Plex Media Server: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
  5. KEV: CVE-2026-96652 — Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
  6. KEV: CVE-2026-110936 — Siemens Software Center: Siemens Software Center Uncontrolled Search Path Element VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
  7. KEV: CVE-2026-102764 — BeyondTrust Remote Support: BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 16
  8. KEV: CVE-2025-61624 — Fortinet Multiple Products: Fortinet Multiple Products Path Traversal VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 16

Full KEV catalog →

📡 Live Visitor Feed

LIVE auto-refresh 30s
WhenIPLocationPageAgent
2s216.73.216.✱ 🇺🇸 Columbus, United States https://redpatch.us/Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@a
2m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
3m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
3m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
7m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
8m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
12m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
13m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
17m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
18m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
18m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
22m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
22m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
27m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
32m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
33m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
35m172.31.0.✱ 🌐 https://redpatch.us/je9-site-sweep/1.0 (+admin.je9.us)
37m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
39m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
42m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0

The link wall

Government & standards

Threat research

News

AI security

Open a Channel

Reporting a threat, asking about a tip, or want a hand hardening your own machines? Send a note — it goes straight to the RedPatch desk, and you get a reference number back.

› Reference ID on receipt  › DKIM-signed acknowledgement  › Read by a human

Go deeper

networks.jelia.nycHow the internet actually moves your data — packets, DNS, routing, TLS. waves.jelia.nycElectromagnetism explained — Wi-Fi, 2.4 GHz, Bluetooth and why RF leaks. lib.jelia.nycThe library — security, Linux, assembly and networking books on the shelf. blog.redpatch.usRedPatch field notes.