Patch what attackers are using. Today.

Today's headlines

1. Chainalysis Warns Customers After “Offensive Agentic” Security IncidentInfosecurity Magazine · Nov 2
2. RHSA-2026:93583: Important: libsoup3 security updateRed Hat Security Advisories (RHSA) · Nov 2
3. gpsd-3.27.5-8.fc45Fedora security updates (Bodhi) · Nov 2
4. gpsd-3.27.5-8.fc44Fedora security updates (Bodhi) · Nov 2
5. FBI Flags Over 600 Addresses Tied to North Korea’s Binance HeistSecurityWeek · Nov 2
6. Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API KeysGBHackers · Nov 2
7. Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack ChainSecurityWeek · Nov 2
8. China's First Frontier AI Export Controls: Mofcom Announcement No. 48Hacker News · Nov 2
9. From Charlemagne to the Kitchen Boy: Reading the Hamburg RathausHacker News · Nov 2
10. Hackers Gain Unauthorized Access to WS Audiology CRM Environment and Operational IT SystemsGBHackers · Nov 2

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-118527 — Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
2. KEV: CVE-2026-111357 — Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
3. KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
4. KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
5. KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
6. KEV: CVE-2026-46300 — Linux Kernel: Linux Kernel Missing Initialization of a Variable VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
7. KEV: CVE-2026-48356 — Adobe Commerce and Magento: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27
8. KEV: CVE-2026-111497 — Google Brotli: Google Brotli Unchecked Return Value VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27

Full KEV catalog →