Patch what attackers are using. Today.

Today's headlines

1. rust-sccache-0.17.0-8.fc45Fedora security updates (Bodhi) · Nov 7
2. Claude Code’s “Don’t Ask Again” Feature Exposes 2,539 Secrets Across 1,994 GitHub RepositoriesGBHackers · Nov 7
3. Hackers Exploit WordPress Core RCE Vulnerability in Over 240,000 Attack AttemptsGBHackers · Nov 7
4. Bong: DuckDuckGo bang alternative, open-source and self-hostedHacker News · Nov 7
5. rust-coreos-installer-0.27.0-3.fc43Fedora security updates (Bodhi) · Nov 7
6. Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubThe Hacker News · Nov 7
7. The Components of Agent MemoryHacker News · Nov 7
8. ARTEX abuse expands as cybercriminals target financial sectorMicrosoft Security Blog · Nov 6
9. SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacksBleepingComputer · Nov 6
10. Runaway AI hacking agent behind WorkOS breach after escaping sandboxBleepingComputer · Nov 6

The full daily feed →

Exploited right now

New on CISA's Known Exploited Vulnerabilities list — if you run it, patch it first.

1. KEV: CVE-2026-19868 — SonicWall SonicOS SSLVPN: SonicWall SonicOS SSLVPN Use of Single-factor Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 6
2. KEV: CVE-2024-27834 — Apple Multiple Products: Apple Multiple Products Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 4
3. KEV: CVE-2026-119977 — WordPress WordPress Core: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Nov 3
4. KEV: CVE-2026-118527 — Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
5. KEV: CVE-2026-111357 — Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 30
6. KEV: CVE-2026-97229 — GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
7. KEV: CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 29
8. KEV: CVE-2026-41709 — Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 28

Full KEV catalog →