RedPatch
Headlines refreshed Tue Oct 27, 5:30 PM ET (10 h ago) · content checked against vendor docs

Security Watch

Patch what attackers are using. Today.

RedPatch tracks the vulnerabilities being exploited in the wild and turns them into clear, sourced fixes for macOS, Windows 11, Windows Server and Linux.

Every recommendation links to the vendor's own documentation. Threat feeds refresh twice a day, and CISA's Known Exploited Vulnerabilities catalog drives the watch list.

19 actively exploited vulnerabilities added to CISA's catalog in the last 14 days · See the list

Total visitors42,735all time
Today257Wed, Oct 28
Unique IPs7,466distinct sources
Countries104global reach

⚡ Threat Radar

500 signals · last 1.1 days · ● last hour ● today

🌍 Top Origins

by visits
🇳🇱Netherlands 15,544
🇺🇸United States 12,235
🇦🇩Andorra 1,671
🇩🇪Germany 865
🇸🇬Singapore 814
🇨🇳China 806
🇫🇷France 713
🇧🇷Brazil 470
🇭🇰Hong Kong 442
🇯🇵Japan 387

Pick your platform

⌘macOS 33 tips · 15 tools ⊞Windows 11 40 tips · 17 tools ▣Windows Server 44 tips · 17 tools 🐧Linux 44 tips · 16 tools

Today's headlines

  1. Hackers hijack Convertr analytics script to steal payment card dataBleepingComputer · Oct 27
  2. Early progress on accelerating drug development with ClaudeHacker News · Oct 27
  3. Raspberry Pi Zero 3W and Pi 4 Model A spotted in device treesHacker News · Oct 27
  4. External Teams Chats Anchor 15-Minute Malware DeliveryDark Reading · Oct 27
  5. Nefilim, Hive ransomware operator given five-year-plus sentence after guilty pleaThe Record · Oct 27
  6. sofia-sip-1.13.18-2.fc45Fedora security updates (Bodhi) · Oct 27
  7. sofia-sip-1.13.18-2.fc44Fedora security updates (Bodhi) · Oct 27
  8. US indicts Malaysian national after Madagascar scam operation uncoveredThe Record · Oct 27
  9. CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan TargetsThe Hacker News · Oct 27
  10. Microsoft releases Windows OOB updates to distrust eMudhra certificatesBleepingComputer · Oct 27

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

  1. KEV: CVE-2026-48356 — Adobe Commerce and Magento: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27
  2. KEV: CVE-2026-111497 — Google Brotli: Google Brotli Unchecked Return Value VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27
  3. KEV: CVE-2026-109618 — PHP Group PHP: PHP Memory Corruption VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 26
  4. KEV: CVE-2026-109619 — PHP Group PHP: PHP Stale Internal Request-State VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 26
  5. KEV: CVE-2026-114625 — Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator SQL Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 23
  6. KEV: CVE-2026-110447 — Collabora Collabora Online – Built-in CODE Server: Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 23
  7. KEV: CVE-2026-106931 — EG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20
  8. KEV: CVE-2026-96656 — Plex Media Server: Plex Media Server External Control of File Name or Path VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 20

Full KEV catalog →

📡 Live Visitor Feed

LIVE auto-refresh 30s
WhenIPLocationPageAgent
2s216.73.216.✱ 🇺🇸 Columbus, United States https://redpatch.us/Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@a
2m173.183.69.✱ 🇨🇦 Surrey, Canada https://redpatch.us/Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
2m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
4m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
7m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
9m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
11m20.194.45.✱ 🇰🇷 Seoul, South Korea https://redpatch.us/Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/12
12m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
12m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
14m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
14m172.31.0.✱ 🌐 https://redpatch.us/je9-site-sweep/1.0 (+admin.je9.us)
17m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
19m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
22m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
24m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
27m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/ATLAS-drift/1.0
27m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
27m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0
29m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
32m98.113.241.✱ 🇺🇸 Queens, United States https://redpatch.us/Uptime-Kuma/2.5.0

The link wall

Government & standards

Threat research

News

AI security

Open a Channel

Reporting a threat, asking about a tip, or want a hand hardening your own machines? Send a note — it goes straight to the RedPatch desk, and you get a reference number back.

› Reference ID on receipt  › DKIM-signed acknowledgement  › Read by a human

Go deeper

networks.jelia.nycHow the internet actually moves your data — packets, DNS, routing, TLS. waves.jelia.nycElectromagnetism explained — Wi-Fi, 2.4 GHz, Bluetooth and why RF leaks. lib.jelia.nycThe library — security, Linux, assembly and networking books on the shelf. blog.redpatch.usRedPatch field notes.