Hi, I'm John.

Today's headlines

1. Critical Collabora Online Flaw Lets Attackers Execute Commands on Nextcloud ServersGBHackers · Oct 16
2. Hackers Use Hundreds of AI Agents to Exploit PaperCut Servers and Steal Windows CredentialsGBHackers · Oct 16
3. Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy NoticingInfosecurity Magazine · Oct 16
4. Microsoft: October Windows update may break Smart App ControlBleepingComputer · Oct 16
5. perl-Badger-0.16-2.fc43 perl-CLI-Simple-2.2.5-1.fc43 perl-CSS-Inliner-4027-1.fc43 perl-Encoding-FixLatin-1.04-2.fc43 perl-HTML-Query-0.09-2.fc43 perl-Markdown-Render-2.0.4-1.fc43 perl-Text-Markdown-Discount-0.18-2.fc43 rFedora security updates (Bodhi) · Oct 16
6. perl-Badger-0.16-2.fc44 perl-CLI-Simple-2.2.5-1.fc44 perl-CSS-Inliner-4027-1.fc44 perl-Encoding-FixLatin-1.04-2.fc44 perl-HTML-Query-0.09-2.fc44 perl-Markdown-Render-2.0.4-1.fc44 perl-Text-Markdown-Discount-0.18-2.fc44 rFedora security updates (Bodhi) · Oct 16
7. Microsoft Patches Two Dozen RCE Flaws in OfficeSecurityWeek · Oct 16
8. BAE Systems cyberattack disrupts US federal court operationsBleepingComputer · Oct 16
9. Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire VaronisSecurityWeek · Oct 16
10. The insider trading you're allowed to doHacker News · Oct 16

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-21589 — Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 15
2. KEV: CVE-2026-105134 — Ahsay AhsayCBS: Ahsay AhsayCBS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 14
3. KEV: CVE-2026-76519 — Cisco Secure Email Gateway: Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 14
4. KEV: CVE-2026-105133 — Ahsay AhsayCBS: Ahsay AhsayCBS Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 14
5. KEV: CVE-2026-0322 — Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 14
6. KEV: CVE-2026-104935 — Ivanti Connect Secure: Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 13
7. KEV: CVE-2026-96951 — Microsoft Windows: Microsoft Windows Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 13
8. KEV: CVE-2015-5477 — ISC BIND: ISC BIND Data Processing Errors VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 8

Full KEV catalog →