RedPatch
Headlines refreshed Fri Oct 23, 5:30 PM ET (10 h ago) · content checked against vendor docs

Security Watch

Patch what attackers are using. Today.

RedPatch tracks the vulnerabilities being exploited in the wild and turns them into clear, sourced fixes for macOS, Windows 11, Windows Server and Linux.

Every recommendation links to the vendor's own documentation. Threat feeds refresh twice a day, and CISA's Known Exploited Vulnerabilities catalog drives the watch list.

17 actively exploited vulnerabilities added to CISA's catalog in the last 14 days · See the list

Total visitors39,565all time
Today237Sat, Oct 24
Unique IPs7,324distinct sources
Countries104global reach

⚡ Threat Radar

500 signals · last 1.2 days · ● last hour ● today

🌍 Top Origins

by visits
🇳🇱Netherlands 15,128
🇺🇸United States 10,967
🇦🇩Andorra 1,671
🇩🇪Germany 853
🇸🇬Singapore 806
🇨🇳China 772
🇫🇷France 708
🇧🇷Brazil 452
🇭🇰Hong Kong 429
🇯🇵Japan 378

Pick your platform

⌘macOS 33 tips · 15 tools ⊞Windows 11 40 tips · 17 tools ▣Windows Server 44 tips · 17 tools 🐧Linux 44 tips · 16 tools

Today's headlines

  1. glow-3.0.0-1.el10_4Fedora security updates (Bodhi) · Oct 23
  2. Friday Squid Blogging: Increasing Squid PopulationsSchneier on Security · Oct 23
  3. Trust Is Not What It Seems — And Fraudsters Are Counting on ItDark Reading · Oct 23
  4. Abandoned Popcorn Time app exposed millions of device to RCE attacksBleepingComputer · Oct 23
  5. A whirlwind tour of systemd-nspawn containersHacker News · Oct 23
  6. (Reliable)? php2shell exploitability, (Fri, Oct 23rd)SANS Internet Storm Center · Oct 23
  7. accessibility-inspector-26.08.2-1.fc45 akonadi-calendar-26.08.2-1.fc45 akonadi-calendar-tools-26.08.2-1.fc45 akonadi-contacts-26.08.2-1.fc45 akonadi-import-wizard-26.08.2-1.fc45 akonadi-mime-26.08.2-1.fc45 akonadi-searchFedora security updates (Bodhi) · Oct 23
  8. Sony Retires Its Last 4K Blu-ray Player in Japan, PS5 Is All That's LeftHacker News · Oct 23
  9. RHSA-2026:88779: Critical: ca-certificates security updateRed Hat Security Advisories (RHSA) · Oct 23
  10. Exposed to PHP2Shell? Cyber Experts Weigh in With AdviceDark Reading · Oct 23

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

  1. KEV: CVE-2026-114625 — Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator SQL Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 23
  2. KEV: CVE-2026-110447 — Collabora Collabora Online – Built-in CODE Server: Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 23
  3. KEV: CVE-2026-106931 — EG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
  4. KEV: CVE-2026-96656 — Plex Media Server: Plex Media Server External Control of File Name or Path VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
  5. KEV: CVE-2026-96655 — Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
  6. KEV: CVE-2026-96654 — Plex Media Server: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
  7. KEV: CVE-2026-96652 — Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
  8. KEV: CVE-2026-110936 — Siemens Software Center: Siemens Software Center Uncontrolled Search Path Element VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20

Full KEV catalog →

📡 Live Visitor Feed

LIVE auto-refresh 30s
WhenIPLocationPageAgent
1s216.73.217.✱ 🇺🇸 Columbus, United States https://redpatch.us/Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@a
1m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
1m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
3m172.31.0.✱ 🌐 https://redpatch.us/je9-site-sweep/1.0 (+admin.je9.us)
4m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
6m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
9m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
11m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
14m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
16m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
16m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
19m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
21m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
24m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
26m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
29m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
31m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
31m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
34m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
36m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0

The link wall

Government & standards

Threat research

News

AI security

Open a Channel

Reporting a threat, asking about a tip, or want a hand hardening your own machines? Send a note — it goes straight to the RedPatch desk, and you get a reference number back.

› Reference ID on receipt  › DKIM-signed acknowledgement  › Read by a human

Go deeper

networks.jelia.nycHow the internet actually moves your data — packets, DNS, routing, TLS. waves.jelia.nycElectromagnetism explained — Wi-Fi, 2.4 GHz, Bluetooth and why RF leaks. lib.jelia.nycThe library — security, Linux, assembly and networking books on the shelf. blog.redpatch.usRedPatch field notes.