Patch what attackers are using. Today.

Today's headlines

1. Fake Interview of Software Engineer Led to Binance Mega-HeistInfosecurity Magazine · Nov 4
2. North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance HackSecurityWeek · Nov 4
3. Hackers Use Stolen Credentials to Fake Major Data Breaches and Pressure Companies for MoneyGBHackers · Nov 4
4. Verification Is Not Knowledge: Science needs more than answersHacker News · Nov 4
5. Kitty 0.50Hacker News · Nov 4
6. mSecure Password Manager Reports Suspicious Activity, Urges Users to Change All Stored PasswordsGBHackers · Nov 4
7. Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 MillionSecurityWeek · Nov 4
8. Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal InfrastructureThe Hacker News · Nov 4
9. RHSA-2026:95048: Important: bind security, bug fix, and enhancement updateRed Hat Security Advisories (RHSA) · Nov 4
10. RHSA-2026:95014: Important: opentelemetry-collector security updateRed Hat Security Advisories (RHSA) · Nov 4

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-119977 — WordPress WordPress Core: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 3
2. KEV: CVE-2026-118527 — Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
3. KEV: CVE-2026-111357 — Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
4. KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
5. KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
6. KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
7. KEV: CVE-2026-46300 — Linux Kernel: Linux Kernel Missing Initialization of a Variable VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
8. KEV: CVE-2026-48356 — Adobe Commerce and Magento: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27

Full KEV catalog →