Patch what attackers are using. Today.

Today's headlines

1. RHSA-2026:91580: Important: webkit2gtk3 security updateRed Hat Security Advisories (RHSA) · Oct 29
2. RHSA-2026:92800: Important: perl-XML-LibXML security updateRed Hat Security Advisories (RHSA) · Oct 29
3. A tiny world model running games on a Raspberry Pi Pico 2 WHacker News · Oct 29
4. ruby-build-20261023-1.el10_3Fedora security updates (Bodhi) · Oct 29
5. ruby-build-20261023-1.el9Fedora security updates (Bodhi) · Oct 29
6. Limited reports of PHP bug exploitation emergeThe Record · Oct 29
7. GM settles with 36 states for selling driver data, agrees to $220 million fine and reformsThe Record · Oct 29
8. Patrick Stewart has diedHacker News · Oct 29
9. Fake crypto app on Apple App Store linked to $23K wallet theftBleepingComputer · Oct 29
10. ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesThe Hacker News · Oct 29

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
2. KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
3. KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
4. KEV: CVE-2026-46300 — Linux Kernel: Linux Kernel Missing Initialization of a Variable VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
5. KEV: CVE-2026-48356 — Adobe Commerce and Magento: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27
6. KEV: CVE-2026-111497 — Google Brotli: Google Brotli Unchecked Return Value VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27
7. KEV: CVE-2026-109618 — PHP Group PHP: PHP Memory Corruption VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 26
8. KEV: CVE-2026-109619 — PHP Group PHP: PHP Stale Internal Request-State VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 26

Full KEV catalog →