RedPatch
Headlines refreshed Mon Nov 9, 4:30 AM ET (7 h ago) · content checked against vendor docs

Security Watch

Patch what attackers are using. Today.

RedPatch tracks the vulnerabilities being exploited in the wild and turns them into clear, sourced fixes for macOS, Windows 11, Windows Server and Linux.

Every recommendation links to the vendor's own documentation. Threat feeds refresh twice a day, and CISA's Known Exploited Vulnerabilities catalog drives the watch list.

11 actively exploited vulnerabilities added to CISA's catalog in the last 14 days · See the list

Total visitors51,810all time
Today589Mon, Nov 9
Unique IPs7,922distinct sources
Countries107global reach

⚡ Threat Radar

500 signals · last 0.9 days · ● last hour ● today

🌍 Top Origins

by visits
🇳🇱Netherlands 16,837
🇺🇸United States 15,263
🇦🇩Andorra 1,826
🇩🇪Germany 940
🇨🇳China 889
🇸🇬Singapore 856
🇫🇷France 749
🇧🇷Brazil 512
🇭🇰Hong Kong 504
🇯🇵Japan 408

Pick your platform

⌘macOS 33 tips · 15 tools ⊞Windows 11 40 tips · 17 tools ▣Windows Server 44 tips · 17 tools 🐧Linux 44 tips · 16 tools

Today's headlines

  1. Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to AttackSecurityWeek · Nov 9
  2. RHSA-2026:96206: Important: gd security updateRed Hat Security Advisories (RHSA) · Nov 9
  3. PixelOSHacker News · Nov 9
  4. Next-Concept Modeling: Fast, Parallel Coarse-to-Fine Text GenerationHacker News · Nov 9
  5. PolinRider Malware Returns in 10 Hijacked npm Packages Using Ethereum Blockchain to Deliver Malicious CodeGBHackers · Nov 9
  6. Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting RoomThe Hacker News · Nov 9
  7. SonicWall Warns of Actively Exploited SSL-VPN Vulnerability That Bypasses SAML and MFA ProtectionGBHackers · Nov 9
  8. U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory LossesThe Hacker News · Nov 9
  9. RHSA-2026:96120: Moderate: ruby:4.0 security, bug fix, and enhancement updateRed Hat Security Advisories (RHSA) · Nov 9
  10. python-httplib2-0.32.1-1.fc46Fedora security updates (Bodhi) · Nov 8

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

  1. KEV: CVE-2026-19868 — SonicWall SonicOS SSLVPN: SonicWall SonicOS SSLVPN Use of Single-factor Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 6
  2. KEV: CVE-2024-27834 — Apple Multiple Products: Apple Multiple Products Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 4
  3. KEV: CVE-2026-119977 — WordPress WordPress Core: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 3
  4. KEV: CVE-2026-118527 — Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
  5. KEV: CVE-2026-111357 — Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
  6. KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
  7. KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
  8. KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28

Full KEV catalog →

📡 Live Visitor Feed

LIVE auto-refresh 30s
WhenIPLocationPageAgent
2s216.73.217.✱ 🇺🇸 Columbus, United States https://redpatch.us/Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@a
2m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
4m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
7m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
12m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
17m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
19m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
21m172.31.0.✱ 🌐 https://redpatch.us/je9-site-sweep/1.0 (+admin.je9.us)
22m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
27m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
32m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
34m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
37m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
42m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
47m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
47m143.246.203.✱ 🌐 Chisinau, Moldova https://redpatch.us/Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/11
49m164.90.204.✱ 🇳🇱 Amsterdam, The Netherlands https://redpatch.us/Python-urllib/3.14
52m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
57m172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0
1h172.31.0.✱ 🌐 https://redpatch.us/Uptime-Kuma/2.5.0

The link wall

Government & standards

Threat research

News

AI security

Open a Channel

Reporting a threat, asking about a tip, or want a hand hardening your own machines? Send a note — it goes straight to the RedPatch desk, and you get a reference number back.

› Reference ID on receipt  › DKIM-signed acknowledgement  › Read by a human

Go deeper

networks.jelia.nycHow the internet actually moves your data — packets, DNS, routing, TLS. waves.jelia.nycElectromagnetism explained — Wi-Fi, 2.4 GHz, Bluetooth and why RF leaks. lib.jelia.nycThe library — security, Linux, assembly and networking books on the shelf. blog.redpatch.usRedPatch field notes.