Patch what attackers are using. Today.

Today's headlines

1. DSA-6597-1 dpdk - security updateDebian Security Advisories (DSA) · Oct 30
2. java-21-openjdk-21.0.13.0.9-3.0.fc43 java-21-openjdk-portable-21.0.13.0.9-3.0.fc43Fedora security updates (Bodhi) · Oct 30
3. Critical Linux kernel flaw allows remote root attacks on MPTCP serversBleepingComputer · Oct 30
4. Friday Squid Blogging: Bigfin Squid Off California CoastSchneier on Security · Oct 30
5. Show HN: Ultrafast Rust Based ADEHacker News · Oct 30
6. DOJ raises privacy concerns over potential sale of Character.AI chatsThe Record · Oct 30
7. A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of DevicesWIRED Security · Oct 30
8. Through Captain Jean-Luc Picard, Patrick Stewart taught us the measure of a manHacker News · Oct 30
9. Devs Hit by Trojanized Claude Code Extension for CursorDark Reading · Oct 30
10. kernel-7.2.14-200.fc44Fedora security updates (Bodhi) · Oct 30

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-118527 — Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
2. KEV: CVE-2026-111357 — Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
3. KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
4. KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
5. KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
6. KEV: CVE-2026-46300 — Linux Kernel: Linux Kernel Missing Initialization of a Variable VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
7. KEV: CVE-2026-48356 — Adobe Commerce and Magento: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27
8. KEV: CVE-2026-111497 — Google Brotli: Google Brotli Unchecked Return Value VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27

Full KEV catalog →