Patch what attackers are using. Today.

Today's headlines

1. RHSA-2026:99695: Important: glib-networking security updateRed Hat Security Advisories (RHSA) · Nov 12
2. aws-26.0.0-6.fc45Fedora security updates (Bodhi) · Nov 12
3. Microsoft 365 Outage Disrupts Outlook, Exchange Online and TeamsSecurityWeek · Nov 12
4. RHSA-2026:99849: Important: perl-CGI security updateRed Hat Security Advisories (RHSA) · Nov 12
5. Microsoft Status: "We are re-routing the protocols"Hacker News · Nov 12
6. Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwideBleepingComputer · Nov 12
7. Extortion Group Luna Moth Flits Into Law Firms a Second TimeDark Reading · Nov 12
8. USN-8895-2: Sudo vulnerabilityUbuntu Security Notices (USN) · Nov 12
9. Major Microsoft Outlook Outage Leaves People With Email Jobs Unable to EmailWIRED Security · Nov 12
10. python3.6-3.6.15-60.fc46Fedora security updates (Bodhi) · Nov 12

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-124194 — Microsoft Office: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
2. KEV: CVE-2026-111793 — Openwave Messaging Limited Webtop Media Transcoder: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
3. KEV: CVE-2026-20320 — Cisco BroadWorks: Cisco BroadWorks Improper Restriction of XML External Entity Reference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
4. KEV: CVE-2026-111560 — Barracuda Networks Multiple Products: Barracuda Networks Multiple Products OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
5. KEV: CVE-2026-116606 — Barracuda Networks Barracuda Email Security Gateway (ESG): Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
6. KEV: CVE-2026-125350 — Google Chromium: Google Chromium Use-After-Free VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
7. KEV: CVE-2026-102895 — GPUStack GPUStack: GPUStack Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 9
8. KEV: CVE-2026-123158 — OpenBSD OpenSSH: OpenBSD OpenSSH Unexpected Status Code or Return Value VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 9

Full KEV catalog →