Patch what attackers are using. Today.

Sourced fixes for macOS, Windows 11, Windows Server and Linux. Every fix links to the vendor's own documentation.

Latest 6 h ago

Cursor confirms security breach led to malicious Claude Code extension

BleepingComputer

Just in · headlines checked 1 h ago

Upcoming Speaking EngagementsSchneier on Security · 6 h ago
Is AI Making Us Worse at Cybersecurity?SecurityWeek · 10 h ago
Beware the New AI-Fueled Ransomware BoomWIRED Security · 11 h ago
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command InjectionThe Hacker News · 11 h ago
BlackNevas Ransomware Attacks VMware ESXi Servers, Destroying Virtual Machines and Backup InfrastructureGBHackers · 16 h ago

The full feed → · Older alerts → · RSS →

Pick your platform

⌘macOS 33 tips · 15 tools ⊞Windows 11 40 tips · 17 tools ▣Windows Server 44 tips · 17 tools 🐧Linux 44 tips · 16 tools

Today's headlines

NewsGovernmentVendorLinux advisories

DSA-6629-1 network-manager-iodine - security updateDebian Security Advisories (DSA) · 1 min ago
radsecproxy-1.11.5-1.el10_3Fedora security updates (Bodhi) · 2 h ago
radsecproxy-1.11.5-1.fc45Fedora security updates (Bodhi) · 2 h ago
SpaceX Catches the Starship to end Flight 15Hacker News · 2 h ago
Dartmouth (Guarini) will not admit math PhD cohort this yearHacker News · 4 h ago
Cursor confirms security breach led to malicious Claude Code extensionBleepingComputer · 6 h ago
Upcoming Speaking EngagementsSchneier on Security · 6 h ago
US disrupts North Korean campaign behind $400 million crypto theftBleepingComputer · 8 h ago
Is AI Making Us Worse at Cybersecurity?SecurityWeek · 10 h ago
Beware the New AI-Fueled Ransomware BoomWIRED Security · 11 h ago

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

CVE-2026-114713 — UnrealIRCd UnrealIRCd: UnrealIRCd Improper Neutralization of Delimiters VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 1 d ago
CVE-2026-123039 — Check Point Multiple Products: Check Point Multiple Products Incorrect Permission Assignment for Critical Resource VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 1 d ago
CVE-2026-124194 — Microsoft Office: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 4 d ago
CVE-2026-111793 — Openwave Messaging Limited Webtop Media Transcoder: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 4 d ago
CVE-2026-20320 — Cisco BroadWorks: Cisco BroadWorks Improper Restriction of XML External Entity Reference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 4 d ago
CVE-2026-111560 — Barracuda Networks Multiple Products: Barracuda Networks Multiple Products OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 4 d ago
CVE-2026-116606 — Barracuda Networks Barracuda Email Security Gateway (ESG): Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 4 d ago
CVE-2026-125350 — Google Chromium: Google Chromium Use-After-Free VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · 4 d ago

Full KEV catalog →

The link wall

Government & standards

Threat research

News

AI security

Open a Channel

Reporting a threat, asking about a tip, or want a hand hardening your own machines? Send a note — it goes straight to the RedPatch desk, and you get a reference number back.

› Reference ID on receipt › DKIM-signed acknowledgement › Read by a human