Patch what attackers are using. Today.

Today's headlines

1. CVE-2026-92707 MessagePack-CSharp Denial of Service VulnerabilityMicrosoft Security Update Guide · Nov 10
2. US Army member arrested in UK over allegations of spying for RussiaThe Record · Nov 10
3. Artex: The AI Pen-Test Tool Hackers Turned Into a WeaponDark Reading · Nov 10
4. Six Math Essentials by Terence TaoHacker News · Nov 10
5. Sherman Anti-Trust Act (1890Hacker News · Nov 10
6. Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a rowThe Record · Nov 10
7. Japanese furniture giant Nitori says hackers stole 37.6M customer recordsBleepingComputer · Nov 10
8. firefox-160.0-1.fc45Fedora security updates (Bodhi) · Nov 10
9. firefox-160.0-1.fc43Fedora security updates (Bodhi) · Nov 10
10. RHSA-2026:97578: Important: buildah security, bug fix, and enhancement updateRed Hat Security Advisories (RHSA) · Nov 10

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-124194 — Microsoft Office: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
2. KEV: CVE-2026-111793 — Openwave Messaging Limited Webtop Media Transcoder: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
3. KEV: CVE-2026-20320 — Cisco BroadWorks: Cisco BroadWorks Improper Restriction of XML External Entity Reference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
4. KEV: CVE-2026-111560 — Barracuda Networks Multiple Products: Barracuda Networks Multiple Products OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
5. KEV: CVE-2026-116606 — Barracuda Networks Barracuda Email Security Gateway (ESG): Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
6. KEV: CVE-2026-125350 — Google Chromium: Google Chromium Use-After-Free VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
7. KEV: CVE-2026-102895 — GPUStack GPUStack: GPUStack Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 9
8. KEV: CVE-2026-123158 — OpenBSD OpenSSH: OpenBSD OpenSSH Unexpected Status Code or Return Value VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 9

Full KEV catalog →