Security Watch

Patch what attackers are using. Today.

RedPatch tracks the vulnerabilities being exploited in the wild and turns them into clear, sourced fixes for macOS, Windows 11, Windows Server and Linux.

Every recommendation links to the vendor's own documentation. Threat feeds refresh twice a day, and CISA's Known Exploited Vulnerabilities catalog drives the watch list.

12 actively exploited vulnerabilities added to CISA's catalog in the last 14 days · See the list

Total visitors47,531all time

Today551Tue, Nov 3

Unique IPs7,764distinct sources

Countries107global reach

⚡ Threat Radar

500 signals · last 1.3 days · ● last hour ● today

🌍 Top Origins

by visits

🇳🇱Netherlands 16,228

🇺🇸United States 13,852

🇦🇩Andorra 1,717

🇩🇪Germany 910

🇨🇳China 853

🇸🇬Singapore 840

🇫🇷France 728

🇧🇷Brazil 494

🇭🇰Hong Kong 477

🇯🇵Japan 401

Pick your platform

⌘macOS 33 tips · 15 tools ⊞Windows 11 40 tips · 17 tools ▣Windows Server 44 tips · 17 tools 🐧Linux 44 tips · 16 tools

Today's headlines

Google Dismantles XCPE Botnet of 1.3 Million Android DevicesSecurityWeek · Nov 3
Hackers Exploit DLL Sideloading in Signed OpenAI and Anthropic Binaries to Deploy YobaLoader MalwareGBHackers · Nov 3
luksmeta-11-1.fc45Fedora security updates (Bodhi) · Nov 3
RHSA-2026:94449: Important: libXtst security updateRed Hat Security Advisories (RHSA) · Nov 3
luksmeta-11-1.fc44Fedora security updates (Bodhi) · Nov 3
NATO’s Crossed Swords Exercise Brings AI Agents Into Cyber Operations TrainingSecurityWeek · Nov 3
Hackers Exploit Critical Magento StyleSmuggler Vulnerability to Deploy PSK Agent RAT and Hijack ServersGBHackers · Nov 3
RHSA-2026:94437: Moderate: pipewire security updateRed Hat Security Advisories (RHSA) · Nov 3
Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot WalletsThe Hacker News · Nov 3
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM FlawThe Hacker News · Nov 3

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

KEV: CVE-2026-118527 — Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
KEV: CVE-2026-111357 — Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
KEV: CVE-2026-46300 — Linux Kernel: Linux Kernel Missing Initialization of a Variable VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
KEV: CVE-2026-48356 — Adobe Commerce and Magento: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27
KEV: CVE-2026-111497 — Google Brotli: Google Brotli Unchecked Return Value VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27

Full KEV catalog →

📡 Live Visitor Feed

LIVE auto-refresh 30s

When	IP	Location	Page	Agent
2s	216.73.216.✱	🇺🇸 Columbus, United States	https://redpatch.us/	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@a
2m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
7m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
8m	164.90.204.✱	🇳🇱 Amsterdam, The Netherlands	https://redpatch.us/	Python-urllib/3.14
10m	172.31.0.✱	🌐	https://redpatch.us/	je9-site-sweep/1.0 (+admin.je9.us)
12m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
12m	66.132.195.✱	🇺🇸 Ann Arbor, United States	https://www.redpatch.us:443/	Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
13m	66.132.195.✱	🇺🇸 Ann Arbor, United States	https://www.redpatch.us/	Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
16m	195.178.110.✱	🇦🇩 Andorra la Vella, Andorra	https://redpatch.us/	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/12
17m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
22m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
23m	164.90.204.✱	🇳🇱 Amsterdam, The Netherlands	https://redpatch.us/	Python-urllib/3.14
27m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
31m	66.132.172.✱	🇺🇸 Ann Arbor, United States	https://redpatch.us:443/	Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
32m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
32m	66.132.172.✱	🇺🇸 Ann Arbor, United States	https://redpatch.us/	Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
37m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
38m	164.90.204.✱	🇳🇱 Amsterdam, The Netherlands	https://redpatch.us/	Python-urllib/3.14
42m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0
47m	172.31.0.✱	🌐	https://redpatch.us/	Uptime-Kuma/2.5.0

The link wall

Government & standards

Threat research

News

AI security

Open a Channel

Reporting a threat, asking about a tip, or want a hand hardening your own machines? Send a note — it goes straight to the RedPatch desk, and you get a reference number back.

› Reference ID on receipt › DKIM-signed acknowledgement › Read by a human