Patch what attackers are using. Today.

Today's headlines

1. RHSA-2026:99566: Important: libX11 security updateRed Hat Security Advisories (RHSA) · Nov 12
2. 12 Adversarial Exposure Validation Tools: The 2026 Buyer’s Verdict GuideGBHackers · Nov 12
3. roundcubemail-1.7.6-1.fc45Fedora security updates (Bodhi) · Nov 12
4. roundcubemail-1.7.6-1.fc44Fedora security updates (Bodhi) · Nov 12
5. Maersk Reveals Data Breach as Extortion Group Demands $5mInfosecurity Magazine · Nov 12
6. Maersk Confirms Data Theft Amid $5 Million Extortion AttemptSecurityWeek · Nov 12
7. Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' DataThe Hacker News · Nov 12
8. Microsoft Finds Hackers Using GSocket to Hide Linux Backdoors as Legitimate System ProcessesGBHackers · Nov 12
9. Humble Bundle just killed most of their security through vibecodingHacker News · Nov 12
10. Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ RepositoriesThe Hacker News · Nov 12

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-124194 — Microsoft Office: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
2. KEV: CVE-2026-111793 — Openwave Messaging Limited Webtop Media Transcoder: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
3. KEV: CVE-2026-20320 — Cisco BroadWorks: Cisco BroadWorks Improper Restriction of XML External Entity Reference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
4. KEV: CVE-2026-111560 — Barracuda Networks Multiple Products: Barracuda Networks Multiple Products OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
5. KEV: CVE-2026-116606 — Barracuda Networks Barracuda Email Security Gateway (ESG): Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
6. KEV: CVE-2026-125350 — Google Chromium: Google Chromium Use-After-Free VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 10
7. KEV: CVE-2026-102895 — GPUStack GPUStack: GPUStack Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 9
8. KEV: CVE-2026-123158 — OpenBSD OpenSSH: OpenBSD OpenSSH Unexpected Status Code or Return Value VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 9

Full KEV catalog →