Was hunting for a real time graph of incidents and patches, like a stock market chart of the end of the software world, or the birth of artificial consciousness, depending on how squiggly the lines are.
Would be interesting to see what 2025 looked like in comparison.
The rate at which flaws are being found is just insane. Many people warned us in the past that our lax security postures would come back to bite us, and we're finally here.
Well, an economist would say, we have as much security as we collectively decided we were willing to pay for.
And theres really only one of 2 outcomes as this progresses as I can see it:
1) The AI's are well matched, and the outcome is balanced, and it ends up being a metric of the internet itself that gets monitored, like this website is doing.
or
2) It crashes in such a spectacular fashion that important utilities and industries are distrupted, with the length of time for recovery being the determining factor in how many people lose their minds, start looting, etc ... you know the story.
This may be a side conversation, but wondered how far away we are to a small LLM being prompted to turn itself into a worm that uses all exploits it knows, and prompts other LLM's when it has access.
I've seen this discussed on HN a few times under articles, and is a risk I've seen communicated in AI safety.
I guess it's being called an AI prompt worm. It's not quite to the stage of sovereign AI where the entire model weights are moved with the 'virus', but still presents a pretty big risk.
It’s orders of magnitude easier to destroy something than it is to build something up. It’s why bad leaders can be much more devastating than the best leaders.
This is survivor bias because bad guys that suck are ignored as "noise". There is a ton of very low-tech outdated vulnerability scanning going on that is not at all current.
And since the problem is mostly cultural, not technical, all the technical means that we do have in theory won't help much in practice. So my bet would be a self-inflicted 2).
I was curios if there was a noticable increase in the number of security incidents before 2026 - and the answer seems to be "no". The Identity Theft Resource Center has the following data for Reported Data Compromises in the US (keep in mind that the internet itself has been growing as well):
I really don’t know what else to say. The numbers are right there. ChatGPT launched in 2022 as the other person pointed out. Correlation is not causation yada yada but you’re dismissing the rate doubling in one year and sitting there right after ChatGPT released.
the flaws you're seeing are the same that didn't convict donald trump on January 6th.
That's all. full stop. all this AI agent stuff is jazz hands. Large VC funded labs are just "more valuable" to the political establishment than anything else.
> Ongoing security incidents, newest first: CVEs, what's affected, which versions fix it, and the advisories and posts behind each one.
For fucks sake. The author could have invested at least half an hour to replace this obvious LLM slop regurgitation of the prompt with something of their own.
"Buy sponsor slot for 149$/month", yeah, spotted the grift. For that level of payment it's at least reasonable to expect the design to be something else than the usual LLM garbage mixture of 30 different font styles.
we've got to tell these agents to chill out on the density a little, this page could be more informative with half the data because it would be easier to ingest
After the first 8 hours of playing with Mythos, I was asked what I thought. My response, "this generation of LLMs is going to drive the largest wave of security incidents the world has ever seen."
This has been true for at least 24 months. The smart attackers have injected their backdoors and are lying low. The current hype is just marketing. Severe incidents will pop off when you least expect them to.
Im not, its like everyone is using the same font/color/layout. Like they dont even take a second to change the generic color palette all these llms output.
These styles only change after a model gets updated, then they all start having a different font, some cursive red font and a beige background maybe.
I knew what this site was going to look like before I clicked the link.
Its so ugly and unoriginal, I assume the content/information trying to be communicated lacks any sort of expertise or original insights.
Yesterday these topics went viral and this guy used some llm to farm engagement. It was literally built to get attention for a singular day after this topic went viral. It will not exist in 3 months.
Edit. Its actually an attempt to bandwagon jump ontp a viral topic and sell $150 ad spots and probably to promote their own $299 club for vibecoders.
I found that if you make the base styling and components, and then vibecode the layout/content, you get better results than letting the LLM make the base itself.
Obviously if your base is just unmodified shadcn, then it will look like any other toy site out there.
Seriously - why can't the browsers just natively support a common UI component framework. Its 2026 and they still haven't done it. That old excuse of: webtech needs individual flair and diversity is now a fraudulent argument considering that everyone uses Claude to generate the same look and feel everywhere.
Might as well get it natively supported in the browser.
Until Google and Apple agree to create a new "web app" standard, it's not gonna happen HTML moves painfully slow. Then solutions come out (input datetime) and people don't use them.
My biggest issue is the dark theme, which makes it more or less impossible to consume for people with astigmatism. I looked at the page half a minute ago and my eyes are still trying to recover fully.
There's so much potential here. It just takes a human who barely knows what they're doing to sit and make critical decisions about it all. You don't even have to have design experience. Just some common sense about consistency and intent.
Within incidents.json are JSON files for each incident with further details
A user could easily construct their own "web page" (or SQL database, CSV, formatted textfile, etc.) that caters to the user's own aesthetic and functional preferences
I've become accustomed to reading JSON, Markdown, etc. For me these text-only formats are "human readable"
In the text-only browser I use, incidents.json is easier for me to read than the pwn.watch web page
No Javascript, cookies, data collection, surveillance, ads, etc.
> Major U.S. banks detect unauthorized third-party AI agents inside customer accounts
Step 2 is instead of waiting to be caught, the instigators should issue a press release blaming cunning rogue agents as part of their research, call no felonies because they’re working for the greater good of eliminating a shitload of jobs, say the real problem is a lack of regulation. They could even return the money if it looks like they’re going to get sued, and collect some sweet, sweet reflexive investment money.
Misleading title; it's not pwnage, or at least not known. The customers authorized the agents. The "unauthorized" part is that the bank didn't want customers using agents.
This was the most concerning part of that report for me:
>Some banks also saw agents contact call centers or take actions that appeared independent of user instructions, and executives say they often can't tell a human from an agent, or an authorized agent from a rogue one.
_Most_ people park liquid money in mainstream bank's checking accounts. This money is FDIC insured(upto 250K). The job of this bank is to is money is used by banks to make loans (duh!). There are three "modes" (in increasing yield_ order offered by these banks to account holders:
1. [FDIC] Put it in a Chase, BofA account. < 1% typically. Abysmal returns.
3. [Not FDIC but pretty good**] A higher yield Money market mutual fund. You still need to place a buy order[2]. Something you have to do manually can give you around 3.86% today(See SNAXX)
This last case is more _interesting_ because its easy for agents. But consider what happens when a lot of people use muse to enmasse do this. There can be a run on the banks because[3] its not the same "money" in the balance sheet of the bank. Money leaving checking/savings and entering a MMF is not on the balance sheet of the bank(even though it can be coincidentally the same institution e.g. schwab checkig and schwab brokerage). Agents are a BIG threat to regular banks. I don't even see how it can be prevented, local agents are ubiquitous now.
[1] Exceptions are HY checkings but its hard to chase yield logistically: more hoops to jump like minimum balance or max ceiling, minimum transactions etc.
[2] See this from schwab's site:
```
For uninvested cash you do not plan to spend soon, you can consider investing in a money market fund such as the Schwab Prime Advantage Money Fund (SWVXX), which currently yields 3.71%, (7-day yield as of 2026-10-21), and can be purchased in a single trade with no minimum* and no transaction fee. Visit the Schwab Money Funds page to view all available funds and their current yields.
```
** MM funds are banks lending to each other to park overnight cash and borrow temporarily for actitivities, think of its like a bank's bank. In 2008 when the GFC was happening the fed had to step in and "ensure" this supply because a lot of banks were teetering and if one bank could not access its money or borrow for daily activities, no more cash would come from an atm.
> But consider what happens when a lot of people use muse to enmasse do this. There can be a run on the banks because it's not the same "money" in the balance sheet of the bank.
But isn't this self-correcting? If everybody starts moving money from checking/savings accounts to money market funds to get better rates, then the bank will start offering better interest rates in their checking/savings accounts so people won't do that.
The thing to watch is what the CCP will do once people start abusing Chinese model capabilities. I don't think China wants to be the face of widespread cyber destruction (and definitely not a victim of it), and it only takes a single unhinged asshole to ruin it for everyone.
The banking story reads as anticompetitive FUD to preempt regulations that would stop funds from being withdrawn at banks making a killing offering uncompetitive rates.
How are these rogue agents obtaining and inputting the required 2FA codes?
thanks for sharing!! i vibeslopped this in the middle of doing 1389418934 security tasks today out of panic. i will clean up the design and make it better :) i also made an x acccount if you wanna follow there: https://twitter.com/pwnwatch_app if you want to join our crazy group of self hosting dorks we are at https://tinkerer.club <3
I don't understand the categorization for incidents. This signal vulnerability[1] is listed as "Live" and "ongoing" but was patched over a month ago (just announced today). If an incident with no known exploits is "ongoing" 1.5 months after the patch is released, when would it be over?
Most AI-written code is still less thorough about security than a human in most ways, aside from things humans are notoriously bad at like UB in C. I can see a world where maybe a more expensive model audits code afterwards, but the past ~3 years were very sloppy, and it's going to get ugly.
I agree to a certain extent. The code will keep getting better because the training datasets will be built on solid AI-generated code. Maybe in the future, training datasets will be 100% AI-generated code and 0% human-written code. Companies are already rushing to develop self-training AI systems to achieve AGI.
But the solid ai generated code is still theoretical. Currently they’re being trained on human code and AI generated code with issues.
If there’s one thing we’ve learned about LLMs so far it’s that they don’t just invent new or better solutions generally. Nearly everything they do is a facsimile or is otherwise derivative. It’s rarely more than the sum of its parts and often it’s lesser than if we did it ourselves, it’s just fast and cheap. So this idea that AI is going to suddenly magically improve its own code and just get better… I don’t know, I’m not convinced we’ve seen anything like that yet and we’re just speculating it will happen because “it should,” which just feels akin to the crazy promises these companies have been making for years that are clearly not happening.
I think agents will loop probes internally, a swarm of them, to test everything until there will be no doubt what is best, what is performant, what will produce a bug, what would be insecure until there's nothing else to probe.
This fixes specific classes of problems like memory safety. So does writing in any memory-safe language. But there are still vulns in JS, Py, etc code because it's something like screwed up oauth that the lang of course won't catch.
Rogue AI agents in banks is going to be wild when it hits mainstream notice. This might honestly be one of the most organic shifts that we see back to crypto. At least with bitcoin etc, you can self-custody all your money, and you don't have to worry about banks running on 1990s software being one-shot by some one-off hacker running Qwen3.8-heretic on their GPU. (also, what a great use case for qURL's time-bound permissions links! basically a more security-aware alternative to ngrok/tailscale tunnels)
No just with BTC you have to worry about your money not being insured, high transaction fees, and when you do lose your wallet the only one you can blame is yourself for being an idiot.
127 comments
[ 0.30 ms ] story [ 9.4 ms ] threadWas hunting for a real time graph of incidents and patches, like a stock market chart of the end of the software world, or the birth of artificial consciousness, depending on how squiggly the lines are.
Just the heatmap apparently. :|
The rate at which flaws are being found is just insane. Many people warned us in the past that our lax security postures would come back to bite us, and we're finally here.
And theres really only one of 2 outcomes as this progresses as I can see it:
1) The AI's are well matched, and the outcome is balanced, and it ends up being a metric of the internet itself that gets monitored, like this website is doing.
or
2) It crashes in such a spectacular fashion that important utilities and industries are distrupted, with the length of time for recovery being the determining factor in how many people lose their minds, start looting, etc ... you know the story.
I guess it's being called an AI prompt worm. It's not quite to the stage of sovereign AI where the entire model weights are moved with the 'virus', but still presents a pretty big risk.
The bad guys are historically much better at keeping their systems current.
| Year | Reported US data compromises |
|---|---:|
| 2016 | 1,099 |
| 2017 | 1,506 |
| 2018 | 1,175 |
| 2019 | 1,279 |
| 2020 | 1,107 |
| 2021 | 1,859 |
| 2022 | 1,798 |
| 2023 | 3,202 |
| 2024 | 3,152 |
| 2025 | 3,322 |
Curios what 2026 will look like...
Sources:
https://www.idtheftcenter.org/wp-content/uploads/2022/04/ITR...
https://www.idtheftcenter.org/wp-content/uploads/2026/01/202...
https://lwn.net/Articles/961978/
But that happened in the first few months of 2024.
That's all. full stop. all this AI agent stuff is jazz hands. Large VC funded labs are just "more valuable" to the political establishment than anything else.
Like "people use AI they paid for to access their bank account, that they paid for" is not exactly exploited CVE
An over time graph with a rolling window of 7d and 28d would likely be a nice addition.
Great work!
For fucks sake. The author could have invested at least half an hour to replace this obvious LLM slop regurgitation of the prompt with something of their own.
"Buy sponsor slot for 149$/month", yeah, spotted the grift. For that level of payment it's at least reasonable to expect the design to be something else than the usual LLM garbage mixture of 30 different font styles.
and fyi my sponsors are not only for this, they come from https://kitze.io/sponsors :D
It is still getting started.
(But still not great, evidenced by the fact that most of the upvotes on my comment are from after you improved it.)
What I don't like is that every site now looks the same.
These styles only change after a model gets updated, then they all start having a different font, some cursive red font and a beige background maybe.
I knew what this site was going to look like before I clicked the link.
Its so ugly and unoriginal, I assume the content/information trying to be communicated lacks any sort of expertise or original insights.
Yesterday these topics went viral and this guy used some llm to farm engagement. It was literally built to get attention for a singular day after this topic went viral. It will not exist in 3 months.
Edit. Its actually an attempt to bandwagon jump ontp a viral topic and sell $150 ad spots and probably to promote their own $299 club for vibecoders.
Obviously if your base is just unmodified shadcn, then it will look like any other toy site out there.
Might as well get it natively supported in the browser.
It would be more readable if every AI-generated page didn't go for the dark-mode + glowing neon cyber aesthetic.
https://pwn.watch/llms.txt
https://pwn.watch/all/feed.xml
https://pwn.watch/incidents.json
Within incidents.json are JSON files for each incident with further details
A user could easily construct their own "web page" (or SQL database, CSV, formatted textfile, etc.) that caters to the user's own aesthetic and functional preferences
I've become accustomed to reading JSON, Markdown, etc. For me these text-only formats are "human readable"
In the text-only browser I use, incidents.json is easier for me to read than the pwn.watch web page
No Javascript, cookies, data collection, surveillance, ads, etc.
1. Also, MCP
Step 2 is instead of waiting to be caught, the instigators should issue a press release blaming cunning rogue agents as part of their research, call no felonies because they’re working for the greater good of eliminating a shitload of jobs, say the real problem is a lack of regulation. They could even return the money if it looks like they’re going to get sued, and collect some sweet, sweet reflexive investment money.
>Some banks also saw agents contact call centers or take actions that appeared independent of user instructions, and executives say they often can't tell a human from an agent, or an authorized agent from a rogue one.
1. [FDIC] Put it in a Chase, BofA account. < 1% typically. Abysmal returns.
2. [FDIC] A higher yield checking/saving account(Ally at ~3.1 is a good example): But more hoops[1] to get more than 3.5%(today). Here https://www.wsj.com/buyside/personal-finance/banking/best-hi... the list.
3. [Not FDIC but pretty good**] A higher yield Money market mutual fund. You still need to place a buy order[2]. Something you have to do manually can give you around 3.86% today(See SNAXX)
This last case is more _interesting_ because its easy for agents. But consider what happens when a lot of people use muse to enmasse do this. There can be a run on the banks because[3] its not the same "money" in the balance sheet of the bank. Money leaving checking/savings and entering a MMF is not on the balance sheet of the bank(even though it can be coincidentally the same institution e.g. schwab checkig and schwab brokerage). Agents are a BIG threat to regular banks. I don't even see how it can be prevented, local agents are ubiquitous now.
[1] Exceptions are HY checkings but its hard to chase yield logistically: more hoops to jump like minimum balance or max ceiling, minimum transactions etc.
[2] See this from schwab's site: ``` For uninvested cash you do not plan to spend soon, you can consider investing in a money market fund such as the Schwab Prime Advantage Money Fund (SWVXX), which currently yields 3.71%, (7-day yield as of 2026-10-21), and can be purchased in a single trade with no minimum* and no transaction fee. Visit the Schwab Money Funds page to view all available funds and their current yields. ```
[3] https://www.youtube.com/watch?v=iPkJH6BT7dM
** MM funds are banks lending to each other to park overnight cash and borrow temporarily for actitivities, think of its like a bank's bank. In 2008 when the GFC was happening the fed had to step in and "ensure" this supply because a lot of banks were teetering and if one bank could not access its money or borrow for daily activities, no more cash would come from an atm.
But isn't this self-correcting? If everybody starts moving money from checking/savings accounts to money market funds to get better rates, then the bank will start offering better interest rates in their checking/savings accounts so people won't do that.
In the U.S., only the inner circle gets access to "defense" capabilities that match "attack" capabilities.
How are these rogue agents obtaining and inputting the required 2FA codes?
In fact, it seems to be the case for the "json" and "llms.txt" buttons, too.
yeah no thanks lmao
[1] https://pwn.watch/i/signal-ringrtc-cve-2026-113380
If there’s one thing we’ve learned about LLMs so far it’s that they don’t just invent new or better solutions generally. Nearly everything they do is a facsimile or is otherwise derivative. It’s rarely more than the sum of its parts and often it’s lesser than if we did it ourselves, it’s just fast and cheap. So this idea that AI is going to suddenly magically improve its own code and just get better… I don’t know, I’m not convinced we’ve seen anything like that yet and we’re just speculating it will happen because “it should,” which just feels akin to the crazy promises these companies have been making for years that are clearly not happening.