Security Watch

Patch what attackers are using. Today.

RedPatch tracks the vulnerabilities being exploited in the wild and turns them into clear, sourced fixes for macOS, Windows 11, Windows Server and Linux.

Every recommendation links to the vendor's own documentation. Threat feeds refresh twice a day, and CISA's Known Exploited Vulnerabilities catalog drives the watch list.

20 actively exploited vulnerabilities added to CISA's catalog in the last 14 days · See the list

Total visitors37,124all time

Today749Tue, Oct 20

Unique IPs7,243distinct sources

Countries102global reach

⚡ Threat Radar

500 signals · last 1.5 days · ● last hour ● today

🌍 Top Origins

by visits

🇳🇱Netherlands 14,787

🇺🇸United States 10,087

🇦🇩Andorra 1,671

🇩🇪Germany 835

🇸🇬Singapore 795

🇨🇳China 752

🇫🇷France 702

🇧🇷Brazil 447

🇭🇰Hong Kong 425

🇯🇵Japan 374

Pick your platform

⌘macOS 33 tips · 15 tools ⊞Windows 11 40 tips · 17 tools ▣Windows Server 44 tips · 17 tools 🐧Linux 44 tips · 16 tools

Today's headlines

RHSA-2026:86124: Important: rsyslog security updateRed Hat Security Advisories (RHSA) · Oct 20
rust-rustls-webpki-0.103.16-1.fc43 rust-webpki-root-certs-1.0.10-1.fc43 rust-webpki-roots-1.0.10-1.fc43Fedora security updates (Bodhi) · Oct 20
rust-rustls-webpki-0.103.16-1.el10_2 rust-webpki-roots-1.0.10-1.el10_2Fedora security updates (Bodhi) · Oct 20
PHP warns admins of two critical flaws, emergency patches coming tomorrowBleepingComputer · Oct 20
RHSA-2026:83540: Important: OpenShift Container Platform 4.22.19 bug fix and security updateRed Hat Security Advisories (RHSA) · Oct 20
Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 20)Unit 42 (Palo Alto Networks) · Oct 20
FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024The Record · Oct 20
On AI writingHacker News · Oct 20
Zeabur shutting down after second security breach in two monthsBleepingComputer · Oct 20
California warns all public school students of data stolen in contractor breachThe Record · Oct 20

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

KEV: CVE-2026-106931 — EG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
KEV: CVE-2026-96656 — Plex Media Server: Plex Media Server External Control of File Name or Path VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
KEV: CVE-2026-96655 — Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
KEV: CVE-2026-96654 — Plex Media Server: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
KEV: CVE-2026-96652 — Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
KEV: CVE-2026-110936 — Siemens Software Center: Siemens Software Center Uncontrolled Search Path Element VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
KEV: CVE-2026-102764 — BeyondTrust Remote Support: BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 16
KEV: CVE-2025-61624 — Fortinet Multiple Products: Fortinet Multiple Products Path Traversal VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 16

Full KEV catalog →

📡 Live Visitor Feed

LIVE auto-refresh 30s

When	IP	Location	Page	Agent
2s	216.73.216.✱	🇺🇸 Columbus, United States	https://redpatch.us/	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@a
2m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
4m	98.113.241.✱	🇺🇸 Queens, United States	https://redpatch.us/	Uptime-Kuma/2.5.0
7m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
9m	98.113.241.✱	🇺🇸 Queens, United States	https://redpatch.us/	Uptime-Kuma/2.5.0
12m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
14m	164.90.204.✱	🇳🇱 Amsterdam, The Netherlands	https://redpatch.us/	Python-urllib/3.14
14m	98.113.241.✱	🇺🇸 Queens, United States	https://redpatch.us/	Uptime-Kuma/2.5.0
15m	87.250.224.✱	🇷🇺 Moscow, Russia	https://redpatch.us/	Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)
16m	172.31.0.✱	🌐	https://redpatch.us/	je9-site-sweep/1.0 (+admin.je9.us)
17m	217.142.31.✱	🌐 Baghdad, Iraq	https://redpatch.us/	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chr
17m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
19m	98.113.241.✱	🇺🇸 Queens, United States	https://redpatch.us/	Uptime-Kuma/2.5.0
22m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
24m	98.113.241.✱	🇺🇸 Queens, United States	https://redpatch.us/	Uptime-Kuma/2.5.0
27m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
29m	164.90.204.✱	🇳🇱 Amsterdam, The Netherlands	https://redpatch.us/	Python-urllib/3.14
29m	98.113.241.✱	🇺🇸 Queens, United States	https://redpatch.us/	Uptime-Kuma/2.5.0
32m	192.53.165.✱	🇺🇸 Richardson, United States	https://redpatch.us/	Mozilla/5.0 (compatible; Example3/1.0; +https://www.example4.com/domain/redpatch.us)
32m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0

The link wall

Government & standards

Threat research

News

AI security

Open a Channel

Reporting a threat, asking about a tip, or want a hand hardening your own machines? Send a note — it goes straight to the RedPatch desk, and you get a reference number back.

› Reference ID on receipt › DKIM-signed acknowledgement › Read by a human