Today's cyber threats: patches, scams and warnings, updated daily

A daily briefing for businesses, schools, churches and families. The government's list of actively exploited flaws updates automatically, and our team adds plain English warnings about the scams hitting California and the High Desert.

Keep my office patched Call or text (760) 684-4139

📅 Updated November 3, 2026✓ From CISA, FBI and FTC sources

Today's top 3 actions

Make sure every Windows PC has the latest monthly update and has restarted. Next Patch Tuesday: November 10, 2026.
Update firewalls, VPNs and remote access tools. They are the most attacked devices this year.
Remind your team: no payment, password or bank change from an email or text without a callback.

Patch now

Windows: install the October 2026 updates nowEvery business, school and homeMicrosoft's October update fixed a record of about 1,400 flaws, including a Windows Shell zero day (CVE-2026-96951) that attackers already use to slip past the warning you normally see on downloaded files. Make sure every PC has the October update and has restarted. Source

Next Microsoft Patch Tuesday: November 10, 2026IT teams and officesMicrosoft releases security updates on the second Tuesday of each month. Plan restarts that evening, and check servers and PCs by the end of the week. Source

Ivanti Connect Secure VPN: exploited zero dayOffices with remote access VPNs, IT companiesAttackers broke into fully patched Ivanti VPN appliances before a fix existed. A patch has been out since October 13. If you use Ivanti remote access, update it and review it for signs of compromise. Source

Citrix NetScaler and Fortinet FortiMail: patch nowIT companies and larger officesCitrix NetScaler ADC and Gateway (CVE-2026-88779) and Fortinet FortiMail (CVE-2026-104286) were attacked before patches were released. Apply the vendor updates. Source

Plex Media Server: four flaws under attackHome offices, small offices with media serversCISA added four Plex Media Server flaws to its actively exploited list on October 20. Update Plex on any office or home server or NAS, or turn it off if it is not needed. Source

Firewalls, VPNs and remote access tools are top targetsEvery office with a firewallMost of the flaws on the government's actively exploited list this year hit edge devices: firewalls, VPNs, email gateways and remote support tools. Keep firmware current and turn off remote admin access from the internet. Source

Scams and warnings

California text scams: courts, DMV, FasTrak and tax refundsEveryone in CaliforniaFake texts claim unpaid tolls, traffic tickets, court fines or a Franchise Tax Board refund. California courts and agencies do not text for payment. Do not tap the link. Forward to 7726 and delete. Source

AI voice clones asking for moneyBusinesses, churches, familiesThe FBI warns criminals use AI voice cloning to sound like a boss, family member or escrow officer and request wires or gift cards. Hang up and call back on a number you already trust. Source

Fake FBI crime reporting sitesScam victimsLook alike sites pretend to be the FBI's IC3 complaint page to steal victims' details. Type ic3.gov yourself. The real IC3 never charges to recover money. Source

Phishing that looks like your own IT or HREvery employeeMost failed phishing tests now imitate internal messages: password expiring, benefits update, shared file. Verify with IT before you sign in from an email link. Source

Fake job applicants and impostor IT workersIT companies, tech hiring, remote teamsFederal agencies have warned about overseas impostors, including North Korean IT workers, using fake identities to get hired remotely and gain access to company systems. Verify identity on video and check references independently. Source

Web store checkout skimmingWeb stores and online sellersCriminals inject code into online store checkout pages to copy card numbers. Keep store software and plugins updated, use strong unique admin passwords with multi factor sign in, and remove plugins you do not use. Source

Government list: actively exploited flaws (last 45 days)

These come straight from the CISA Known Exploited Vulnerabilities catalog, the federal list of flaws attackers are using right now. If you own any of these products, update them. Items marked ransomware are tied to known ransomware attacks.

Loading the latest list from CISA...

Latest official alerts

CISA advisories

FBI public warnings

FBI industry alerts

FTC consumer alerts

Who is behind the attacks

🌎Overseas crime groupsRansomware gangs and fraud rings outside the U.S. run most large scale phishing, ransomware and business email scams.

🏛State backed hackersGovernment advisories regularly name groups tied to China, Russia, Iran and North Korea. They target firewalls, VPNs, utilities, schools and suppliers.

🏠Domestic fraud ringsU.S. based scammers run text, toll, rental, romance and impersonation scams, and recruit money mules to move stolen funds.

👤Insiders and mistakesFormer employees with old passwords, shared logins and simple errors cause a large share of incidents.

Watch list by business type

Realtors and escrow: wire fraud and seller impersonation. See the current watch list.
Attorneys: trust account and fake new client scams. Law firm security.
Schools: payroll diversion and student data. School security.
Churches and nonprofits: gift card and donation scams. Church IT.
Medical and dental: patient data and ransomware. HIPAA.
IT companies: remote access tools, admin accounts and impostor job applicants.
Managed print: copier firmware, scan to email abuse and drive wiping at lease end. Managed print.
Web stores: checkout skimming and account takeovers. PCI.

Report it

Money sent by mistake: call your bank first and ask for a recall, then report at ic3.gov.
Scam texts: forward to 7726, then block and delete.
Scams and identity theft: reportfraud.ftc.gov and identitytheft.gov.
WENO customers: call or text us at (760) 684-4139 right away.

Cybersecurity training classes Phishing and spam training Quick security lessons Real estate and escrow wire fraud Ransomware protection Cybersecurity and firewalls

Patch. Verify. Report.Keep my office patched

Sources: CISA Known Exploited Vulnerabilities catalog and advisories, FBI Internet Crime Complaint Center, Federal Trade Commission, Microsoft Security Response Center, California Attorney General. General information only. Check with your IT provider before changing systems.