RedPatch.Us
Headlines refreshed Fri Nov 13, 5:30 PM ET (2 h ago) · content checked against vendor docs

Patch what attackers are using. Today.

Sourced fixes for macOS, Windows 11, Windows Server and Linux. Every fix links to the vendor's own documentation.

Top story 5 sources reporting · 13 h ago

Hackers Exploit Check Point PHP2Shell Flaws to Gain Root Access and Deploy Wiper Malware

GBHackers

Just in · headlines checked 1 h ago

The full feed → · Older alerts → · RSS →

Pick your platform

⌘macOS 33 tips · 15 tools ⊞Windows 11 40 tips · 17 tools ▣Windows Server 44 tips · 17 tools 🐧Linux 44 tips · 16 tools

Today's headlines

NewsGovernmentVendorLinux advisories

  1. Live airband on all frequencies from KORS. Victoria, CA also ground stoppedHacker News · 2 h ago
  2. Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean WatersSchneier on Security · 2 h ago
  3. mingw-poppler-26.01.0-3.fc45Fedora security updates (Bodhi) · 2 h ago
  4. mingw-poppler-26.01.0-3.fc44Fedora security updates (Bodhi) · 2 h ago
  5. FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’SecurityWeek · 2 h ago
  6. FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’The Record · 2 h ago
  7. SCKit abuses ScreenConnect to deploy remote access and target technician sessionsMicrosoft Security Blog · 2 h ago
  8. FAA issues nationwide ground stop due to "extraordinary circumstances"Hacker News · 3 h ago
  9. ARTEX and beyond: AI-enabled penetration testing platformsCisco Talos · 3 h ago
  10. Amazon Threat Intelligence observes threat actors running cybercrime campaigns with ARTEX AI agentsAWS Security Blog · 3 h ago

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

  1. CVE-2026-114713 — UnrealIRCd UnrealIRCd: UnrealIRCd Improper Neutralization of Delimiters VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 12 h ago
  2. CVE-2026-123039 — Check Point Multiple Products: Check Point Multiple Products Incorrect Permission Assignment for Critical Resource VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 12 h ago
  3. CVE-2026-124194 — Microsoft Office: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 3 d ago
  4. CVE-2026-111793 — Openwave Messaging Limited Webtop Media Transcoder: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 3 d ago
  5. CVE-2026-20320 — Cisco BroadWorks: Cisco BroadWorks Improper Restriction of XML External Entity Reference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 3 d ago
  6. CVE-2026-111560 — Barracuda Networks Multiple Products: Barracuda Networks Multiple Products OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 3 d ago
  7. CVE-2026-116606 — Barracuda Networks Barracuda Email Security Gateway (ESG): Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 3 d ago
  8. CVE-2026-125350 — Google Chromium: Google Chromium Use-After-Free VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 3 d ago

Full KEV catalog →

The link wall

Government & standards

Threat research

News

AI security

Open a Channel

Reporting a threat, asking about a tip, or want a hand hardening your own machines? Send a note — it goes straight to the RedPatch desk, and you get a reference number back.

› Reference ID on receipt  › DKIM-signed acknowledgement  › Read by a human

Go deeper

networks.jelia.nycHow the internet actually moves your data — packets, DNS, routing, TLS. waves.jelia.nycElectromagnetism explained — Wi-Fi, 2.4 GHz, Bluetooth and why RF leaks. lib.jelia.nycThe library — security, Linux, assembly and networking books on the shelf. blog.redpatch.usRedPatch field notes.