Patch what attackers are using. Today.

Today's headlines

1. Distributed ProofreadersHacker News · Oct 31
2. With 86% of the words, you might understand only 38% of an anime's linesHacker News · Oct 31
3. suricata-8.0.7-1.el10_2Fedora security updates (Bodhi) · Oct 31
4. suricata-8.0.7-1.el10_3Fedora security updates (Bodhi) · Oct 31
5. Northflank security breach leads to abuse of customers' AI API keysBleepingComputer · Oct 31
6. New Android SMS of Death exploit can remotely crash unpatched phonesBleepingComputer · Oct 31
7. Chromium: CVE-2026-118304 Improper input validation in SVGMicrosoft Security Update Guide · Oct 31
8. Chromium: CVE-2026-118313 Use after free in VideoMicrosoft Security Update Guide · Oct 31
9. Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity DataThe Hacker News · Oct 31
10. Spooky New Infostealer Malware Uses AI to ‘Autodox’ VictimsWIRED Security · Oct 31

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-118527 — Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
2. KEV: CVE-2026-111357 — Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
3. KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
4. KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
5. KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
6. KEV: CVE-2026-46300 — Linux Kernel: Linux Kernel Missing Initialization of a Variable VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
7. KEV: CVE-2026-48356 — Adobe Commerce and Magento: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27
8. KEV: CVE-2026-111497 — Google Brotli: Google Brotli Unchecked Return Value VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27

Full KEV catalog →