Patch what attackers are using. Today.

Today's headlines

1. WorkOS says attacker used ARTEX AI to breach internal sales appBleepingComputer · Nov 3
2. Show HN: Kairos – Open-source risk and fraud decisioning platformHacker News · Nov 3
3. I dumped Apple’s word listHacker News · Nov 3
4. RHSA-2026:94749: Important: python-dns security updateRed Hat Security Advisories (RHSA) · Nov 3
5. Binance says fake job interview led to $6.3 billion crypto heistBleepingComputer · Nov 3
6. Google dismantles massive botnet hidden in Android TV boxesThe Record · Nov 3
7. REJECTED: CVE-2026-99217: fork: release the files of a failed fork after sched_cancel_fork()Linux Kernel CVE Announce · Nov 3
8. Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion HeistWIRED Security · Nov 3
9. mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious ActivityThe Hacker News · Nov 3
10. Several German lawmakers and foreign policy staff received Apple warnings on spywareThe Record · Nov 3

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-119977 — WordPress WordPress Core: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 3
2. KEV: CVE-2026-118527 — Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
3. KEV: CVE-2026-111357 — Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
4. KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
5. KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
6. KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
7. KEV: CVE-2026-46300 — Linux Kernel: Linux Kernel Missing Initialization of a Variable VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28
8. KEV: CVE-2026-48356 — Adobe Commerce and Magento: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 27

Full KEV catalog →