RedPatch
Headlines refreshed Tue Oct 20, 5:30 AM ET (12 h ago) · content checked against vendor docs

Security Watch

Patch what attackers are using. Today.

RedPatch tracks the vulnerabilities being exploited in the wild and turns them into clear, sourced fixes for macOS, Windows 11, Windows Server and Linux.

Every recommendation links to the vendor's own documentation. Threat feeds refresh twice a day, and CISA's Known Exploited Vulnerabilities catalog drives the watch list.

14 actively exploited vulnerabilities added to CISA's catalog in the last 14 days · See the list

Total visitors37,069all time
Today694Tue, Oct 20
Unique IPs7,238distinct sources
Countries102global reach

⚡ Threat Radar

500 signals · last 1.6 days · ● last hour ● today

🌍 Top Origins

by visits
🇳🇱Netherlands 14,777
🇺🇸United States 10,067
🇦🇩Andorra 1,671
🇩🇪Germany 834
🇸🇬Singapore 795
🇨🇳China 751
🇫🇷France 702
🇧🇷Brazil 447
🇭🇰Hong Kong 425
🇯🇵Japan 374

Pick your platform

⌘macOS 33 tips · 15 tools ⊞Windows 11 40 tips · 17 tools ▣Windows Server 44 tips · 17 tools 🐧Linux 44 tips · 16 tools

Today's headlines

  1. libmodplug-0.8.9.0-31.fc46Fedora security updates (Bodhi) · Oct 20
  2. Fizzpoker – No-login Online Poker with friendsHacker News · Oct 20
  3. Hackers Exploit Zimbra Zero-Click Flaw to Take Control of Email ServersGBHackers · Oct 20
  4. RHSA-2026:85848: Important: rust-sequoia-sq security updateRed Hat Security Advisories (RHSA) · Oct 20
  5. Hackers Turn Low-Cost Android Phones Into Hidden Proxy Botnets Through Preinstalled MalwareGBHackers · Oct 20
  6. ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access TrojanThe Hacker News · Oct 20
  7. RHSA-2026:85814: Important: postgresql:18 security updateRed Hat Security Advisories (RHSA) · Oct 20
  8. MicroG: Free-libre re-implementation of Google's proprietary Android user spaceHacker News · Oct 20
  9. Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts EmergeThe Hacker News · Oct 20
  10. ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th)SANS Internet Storm Center · Oct 19

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

  1. KEV: CVE-2026-102764 — BeyondTrust Remote Support: BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 16
  2. KEV: CVE-2025-61624 — Fortinet Multiple Products: Fortinet Multiple Products Path Traversal VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 16
  3. KEV: CVE-2026-21589 — Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 15
  4. KEV: CVE-2026-105134 — Ahsay AhsayCBS: Ahsay AhsayCBS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 14
  5. KEV: CVE-2026-76519 — Cisco Secure Email Gateway: Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 14
  6. KEV: CVE-2026-105133 — Ahsay AhsayCBS: Ahsay AhsayCBS Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 14
  7. KEV: CVE-2026-0322 — Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 14
  8. KEV: CVE-2026-104935 — Ivanti Connect Secure: Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 13

Full KEV catalog →

📡 Live Visitor Feed

LIVE auto-refresh 30s
WhenIPLocationPageAgent
2s216.73.216.✱ 🇺🇸 Columbus, United States https://redpatch.us/Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@a
1m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
4m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
6m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
9m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
11m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
11m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
14m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
16m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
19m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
21m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
24m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
26m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
26m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
27m205.185.114.✱ 🇺🇸 Las Vegas, United States https://redpatch.us/Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0
27m205.185.114.✱ 🇺🇸 Las Vegas, United States https://redpatch.us/?rest_route=/Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) V
29m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
31m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
31m205.185.114.✱ 🇺🇸 Las Vegas, United States https://redpatch.us/Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa
34m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0

The link wall

Government & standards

Threat research

News

AI security

Open a Channel

Reporting a threat, asking about a tip, or want a hand hardening your own machines? Send a note — it goes straight to the RedPatch desk, and you get a reference number back.

› Reference ID on receipt  › DKIM-signed acknowledgement  › Read by a human

Go deeper

networks.jelia.nycHow the internet actually moves your data — packets, DNS, routing, TLS. waves.jelia.nycElectromagnetism explained — Wi-Fi, 2.4 GHz, Bluetooth and why RF leaks. lib.jelia.nycThe library — security, Linux, assembly and networking books on the shelf. blog.redpatch.usRedPatch field notes.