Patch what attackers are using. Today.

Today's headlines

1. Corelight Warns AI Agents Can Silently Run Unreviewed Code With Privileged Access to Enterprise NetworksGBHackers · Nov 11
2. Notion AI Data Breach Exposes Customer Chat Transcripts After Third-Party Fireworks AI CyberattackGBHackers · Nov 11
3. RHSA-2026:98547: Important: xorg-x11-server-Xwayland security updateRed Hat Security Advisories (RHSA) · Nov 11
4. RHSA-2026:98549: Important: xorg-x11-server-Xwayland security updateRed Hat Security Advisories (RHSA) · Nov 11
5. Microsoft Fixes 1235 Flaws in Another Record Patch TuesdayInfosecurity Magazine · Nov 11
6. Microsoft fixes Exchange sign-ins broken by Windows Server updatesBleepingComputer · Nov 11
7. Threat Actors Exploit Openwave, Cisco BroadWorks VulnerabilitiesSecurityWeek · Nov 11
8. OSS projects banning AI-generated contributionsHacker News · Nov 11
9. Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMDSecurityWeek · Nov 11
10. USN-9040-1: Linux kernel (Low Latency NVIDIA) vulnerabilitiesUbuntu Security Notices (USN) · Nov 11

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-124194 — Microsoft Office: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
2. KEV: CVE-2026-111793 — Openwave Messaging Limited Webtop Media Transcoder: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
3. KEV: CVE-2026-20320 — Cisco BroadWorks: Cisco BroadWorks Improper Restriction of XML External Entity Reference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
4. KEV: CVE-2026-111560 — Barracuda Networks Multiple Products: Barracuda Networks Multiple Products OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
5. KEV: CVE-2026-116606 — Barracuda Networks Barracuda Email Security Gateway (ESG): Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
6. KEV: CVE-2026-125350 — Google Chromium: Google Chromium Use-After-Free VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
7. KEV: CVE-2026-102895 — GPUStack GPUStack: GPUStack Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 9
8. KEV: CVE-2026-123158 — OpenBSD OpenSSH: OpenBSD OpenSSH Unexpected Status Code or Return Value VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 9

Full KEV catalog →