What’s getting pwned right now
- ID
- 38677
- Status
- summarized
- Published
- 22 Oct 2026, 10:08 PM
- Fetched
- 23 Oct 2026, 4:59 PM
- Provider
- Hacker News
- Category
- dev-community
- Original URL
- https://pwn.watch/
- Source URL
- https://hnrss.org/best
Summary
- Score
- 6.5
- Created
- 23 Oct 2026, 5:00 PM
- Tags
- Audience
- developersai_agent_users
What happened
pwn.watch is a live security incident dashboard that currently lists 42 active incidents—19 critical and 21 not fully patched—against 241 incidents in the last 12 months, with zero days without an incident and a longest quiet run of 11 days (Jan 2–Jan 12). It publishes machine-readable feeds (RSS, JSON, llms.txt) and a 'Copy brief for your AI' feature, and its example entry is an actively exploited Arista VeloCloud Orchestrator SQL injection (CVE-2026-114625, CVSS 9.9) that has been patched.
Why it matters
If you run AI agents for on-call or security monitoring, this gives you a concrete, structured incident feed to plug in—llms.txt and JSON are directly consumable—but the current live list is broad infrastructure CVEs, so you still need to filter for what your stack actually runs. For most app developers, the actionable part is the feed format, not the Arista CVE.
Discussion angle
Would you pipe a live incident feed like pwn.watch into an AI agent for triage, or does 42 concurrent incidents with no quiet days create more noise than signal?