Patch what attackers are using. Today.

Today's headlines

1. NATS Air Traffic Control Failure Cost UK Economy £33mInfosecurity Magazine · Nov 5
2. GhostMap Android flaw lets malicious app trigger persistent boot loopBleepingComputer · Nov 5
3. DigiCert Confirms Data Breach After Security Misconfiguration Exposes Customer Personal InformationGBHackers · Nov 5
4. prometheus-3.15.1-1.el10_2Fedora security updates (Bodhi) · Nov 5
5. Critical Citrix XenServer Flaw Allows Unauthenticated Attackers to Take Control of Virtualization HostsGBHackers · Nov 5
6. RHSA-2026:95466: Important: dogtag-pki security updateRed Hat Security Advisories (RHSA) · Nov 5
7. python-PyMuPDF-1.27.2.2-3.fc43Fedora security updates (Bodhi) · Nov 5
8. Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command ExecutionThe Hacker News · Nov 5
9. Want to Rent an Internet Address at the White House?Hacker News · Nov 5
10. Altera Announces Agilex 2X, a Complete FPGA and SoC PortfolioHacker News · Nov 5

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2024-27834 — Apple Multiple Products: Apple Multiple Products Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 4
2. KEV: CVE-2026-119977 — WordPress WordPress Core: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 3
3. KEV: CVE-2026-118527 — Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
4. KEV: CVE-2026-111357 — Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
5. KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
6. KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
7. KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
8. KEV: CVE-2026-46300 — Linux Kernel: Linux Kernel Missing Initialization of a Variable VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28

Full KEV catalog →