Patch what attackers are using. Today.

Today's headlines

1. python-pymdown-extensions-12.3-1.fc45Fedora security updates (Bodhi) · Nov 8
2. Agent memory needs its OpenTelemetry momentHacker News · Nov 8
3. python-pymdown-extensions-12.3-1.fc46Fedora security updates (Bodhi) · Nov 8
4. Kirlian Photography: Building Your Own EquipmentHacker News · Nov 7
5. CVE-2026-99284: net: skbuff: propagate shared-frag marker in skb_zerocopy()Linux Kernel CVE Announce · Nov 7
6. CVE-2026-99283: netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packetsLinux Kernel CVE Announce · Nov 7
7. CVE-2026-83844 Windows Paint Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Nov 7
8. Hackers pull off $133 million French bank heist via service providerBleepingComputer · Nov 7
9. RHSA-2026:96039: Important: Red Hat build of Keycloak 26.6.9 Images Security UpdateRed Hat Security Advisories (RHSA) · Nov 7
10. RHSA-2026:96040: Important: Red Hat build of Keycloak 26.6.9 Security UpdateRed Hat Security Advisories (RHSA) · Nov 7

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-19868 — SonicWall SonicOS SSLVPN: SonicWall SonicOS SSLVPN Use of Single-factor Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 6
2. KEV: CVE-2024-27834 — Apple Multiple Products: Apple Multiple Products Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 4
3. KEV: CVE-2026-119977 — WordPress WordPress Core: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 3
4. KEV: CVE-2026-118527 — Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
5. KEV: CVE-2026-111357 — Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
6. KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
7. KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
8. KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28

Full KEV catalog →