Patch what attackers are using. Today.

Today's headlines

1. MetaMask says recent attack didn't affect wallet infrastructureBleepingComputer · Nov 6
2. Claude AI Flaw Lets Malicious Browser Extensions Execute Commands on Remote ComputersGBHackers · Nov 6
3. dnf5-5.2.18.0-6.fc43Fedora security updates (Bodhi) · Nov 6
4. Half of Security Leaders Report Sensitive Data Exposure Through AI ToolsInfosecurity Magazine · Nov 6
5. UK Warns Its Critical Infrastructure Faces Grave RiskDark Reading · Nov 6
6. ChatGPT Lockdown Mode Bypass Allowed Hackers to Steal Private Chats Without User InteractionGBHackers · Nov 6
7. Living Maps: Bay Area tech since 1960sHacker News · Nov 6
8. Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key ServicesThe Hacker News · Nov 6
9. App Store 2026 in numbers: AI, pricing, abandoned appsHacker News · Nov 6
10. python-h5io-0.2.6-2.fc43Fedora security updates (Bodhi) · Nov 6

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2024-27834 — Apple Multiple Products: Apple Multiple Products Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 4
2. KEV: CVE-2026-119977 — WordPress WordPress Core: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 3
3. KEV: CVE-2026-118527 — Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
4. KEV: CVE-2026-111357 — Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
5. KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
6. KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
7. KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
8. KEV: CVE-2026-46300 — Linux Kernel: Linux Kernel Missing Initialization of a Variable VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28

Full KEV catalog →