Free weekly email
The Monday Patch List
Every Monday: what's under attack, who needs to act, and exactly what to update. Five minutes to read.
Launching soon
Plain English
What's a zero-day?
A security hole that attackers found and used before the company that makes the software could fix it. "Zero days" is how much warning defenders got. Once a fix exists, the danger is people who haven't installed it yet. We use the term loosely: this list also includes older flaws attackers are still using.
How we check
Every entry comes from CISA's catalog of vulnerabilities known to be exploited, or from the maker's own advisory, and links to its source. Always confirm version numbers with the vendor before you update. We never publish attack code.
