Security Watch

Hi, I'm John.

I'm a Marine Corps veteran and I keep systems running for a living. I run a small fleet of my own — a Mac, three Windows machines and a Linux server — and RedPatch is where I write down what actually keeps them safe.

Pick your platform below. Every tip links to the vendor's own documentation, and the news feed refreshes every morning.

— John

Total visitors129,840all time

Today1,407Sat, Oct 17

Unique IPs16,156distinct sources

Countries132global reach

⚡ Threat Radar

500 signals · last 0.4 days · ● last hour ● today

🌍 Top Origins

by visits

🇺🇸United States 43,919

🇳🇱Netherlands 30,441

🇦🇩Andorra 4,717

🇨🇳China 3,342

🇩🇪Germany 2,834

🇸🇬Singapore 2,824

🇫🇷France 2,516

🇭🇰Hong Kong 1,492

🇧🇷Brazil 1,286

🇬🇧United Kingdom 981

Pick your platform

⌘macOS 33 tips · 15 tools ⊞Windows 11 40 tips · 17 tools ▣Windows Server 44 tips · 17 tools 🐧Linux 44 tips · 16 tools

Today's headlines

Chrome and Edge are removing XSLT: what breaks and what does notHacker News · Oct 17
Microsoft and CMU Team Up to Train Early Career Software EngineersHacker News · Oct 17
nix-2.31.6-1.el10_3Fedora security updates (Bodhi) · Oct 17
libindi-2.2.5-1.el10_4Fedora security updates (Bodhi) · Oct 17
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attackBleepingComputer · Oct 17
Drupal patches critical RCE flaws, warns exploits may emerge soonBleepingComputer · Oct 17
Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud BackupsGBHackers · Oct 17
Encryption Is Getting Squeezed From All SidesWIRED Security · Oct 17
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native AddonThe Hacker News · Oct 17
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery ChannelSecurityWeek · Oct 17

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

KEV: CVE-2026-102764 — BeyondTrust Remote Support: BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 16
KEV: CVE-2025-61624 — Fortinet Multiple Products: Fortinet Multiple Products Path Traversal VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 16
KEV: CVE-2026-21589 — Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 15
KEV: CVE-2026-105134 — Ahsay AhsayCBS: Ahsay AhsayCBS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 14
KEV: CVE-2026-76519 — Cisco Secure Email Gateway: Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 14
KEV: CVE-2026-105133 — Ahsay AhsayCBS: Ahsay AhsayCBS Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 14
KEV: CVE-2026-0322 — Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 14
KEV: CVE-2026-104935 — Ivanti Connect Secure: Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 13

Full KEV catalog →

📡 Live Visitor Feed

LIVE auto-refresh 30s

When	IP	Location	Page	Agent
0s	216.73.217.✱	🇺🇸 Columbus, United States	https://redpatch.us/	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@a
1m	34.62.189.✱	🇧🇪 Brussels, Belgium	https://redpatch.us/	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/12
1m	152.32.156.✱	🇮🇳 Mumbai, India	https://redpatch.us/	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chr
1m	93.114.133.✱	🇬🇧 Coventry, United Kingdom	https://johnelia.com/	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/12
2m	172.31.0.✱	🌐	https://johnelia.com/	Uptime-Kuma/2.5.0
2m	98.113.241.✱	🇺🇸 Queens, United States	https://redpatch.us/	Uptime-Kuma/2.5.0
2m	98.113.241.✱	🇺🇸 Queens, United States	https://johnelia.com/	Uptime-Kuma/2.5.0
2m	98.113.241.✱	🇺🇸 Queens, United States	https://mugszm.com/	Uptime-Kuma/2.5.0
6m	124.156.179.✱	🇭🇰 Hong Kong, Hong Kong	https://www.johnelia.com/	Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like
6m	164.90.204.✱	🇳🇱 Amsterdam, The Netherlands	https://redpatch.us/	Python-urllib/3.14
7m	172.31.0.✱	🌐	https://johnelia.com/	Uptime-Kuma/2.5.0
7m	98.113.241.✱	🇺🇸 Queens, United States	https://redpatch.us/	Uptime-Kuma/2.5.0
7m	98.113.241.✱	🇺🇸 Queens, United States	https://johnelia.com/	Uptime-Kuma/2.5.0
7m	98.113.241.✱	🇺🇸 Queens, United States	https://mugszm.com/	Uptime-Kuma/2.5.0
12m	172.31.0.✱	🌐	https://johnelia.com/	Uptime-Kuma/2.5.0
12m	98.113.241.✱	🇺🇸 Queens, United States	https://redpatch.us/	Uptime-Kuma/2.5.0
12m	98.113.241.✱	🇺🇸 Queens, United States	https://johnelia.com/	Uptime-Kuma/2.5.0
12m	98.113.241.✱	🇺🇸 Queens, United States	https://mugszm.com/	Uptime-Kuma/2.5.0
13m	31.6.41.✱	🇨🇭 Zurich, Switzerland	https://mugszm.com/	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/11
13m	31.6.41.✱	🇨🇭 Zurich, Switzerland	https://mugszm.com/	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/11

The link wall

Government & standards

Threat research

News

AI security

Open a Channel

Reporting a threat, asking about a tip, or want a hand hardening your own machines? Send a note — it comes straight to me, and you get a reference number back.

› Reference ID on receipt › DKIM-signed acknowledgement › Read by a human