HN

Comments (116)

• Menu

  DrewADesign
  > Major U.S. banks detect unauthorized third-party AI agents inside customer accountsStep 2 is instead of waiting to be caught, the instigators should issue a press release blaming cunning rogue agents as part of their research, call no felonies because they’re working for the greater good of eliminating a shitload of jobs, say the real problem is a lack of regulation. They could even return the money if it looks like they’re going to get sued, and collect some sweet, sweet reflexive investment money.
• Menu

  pixl97
  Would be interesting to see what 2025 looked like in comparison.The rate at which flaws are being found is just insane. Many people warned us in the past that our lax security postures would come back to bite us, and we're finally here.
• Menu

  demibabs
  Every ai generated page tries to cram way too much information in way too small a place
• aduwah
  Missed opportunity not to call it pwnhub
• Menu

  xbar
  After the first 8 hours of playing with Mythos, I was asked what I thought. My response, "this generation of LLMs is going to drive the largest wave of security incidents the world has ever seen."It is still getting started.
• Menu

  aeturnum
  I don't understand the categorization for incidents. This signal vulnerability[1] is listed as "Live" and "ongoing" but was patched over a month ago (just announced today). If an incident with no known exploits is "ongoing" 1.5 months after the patch is released, when would it be over?[1] https://pwn.watch/i/signal-ringrtc-cve-2026-113380
• Menu

  meerita
  We are just witnessing the last days of sloppy human-written code. We'll reach a point where most bugs will be fixed.
• WarmWash
  The thing to watch is what the CCP will do once people start abusing Chinese model capabilities. I don't think China wants to be the face of widespread cyber destruction (and definitely not a victim of it), and it only takes a single unhinged asshole to ruin it for everyone.Also the flip side where Chinese models are used to attack US infra, just loading artillery shells into the "Ban Chinese Models" cannon.
• Menu

  dunder_cat
  The rss button doesn't work, kicks back a 404 when you are redirected to https://pwn.watch/feed.xml :-(.In fact, it seems to be the case for the "json" and "llms.txt" buttons, too.
• Menu

  hk__2
  The "sponsors" are just other random AI-generated websites by the same author.
• thekitze
  thanks for sharing!! i vibeslopped this in the middle of doing 1389418934 security tasks today out of panic. i will clean up the design and make it better :) i also made an x acccount if you wanna follow there: https://twitter.com/pwnwatch_app if you want to join our crazy group of self hosting dorks we are at https://tinkerer.club <3
• Menu

  layerv-ai
  Rogue AI agents in banks is going to be wild when it hits mainstream notice. This might honestly be one of the most organic shifts that we see back to crypto. At least with bitcoin etc, you can self-custody all your money, and you don't have to worry about banks running on 1990s software being one-shot by some one-off hacker running Qwen3.8-heretic on their GPU. (also, what a great use case for qURL's time-bound permissions links! basically a more security-aware alternative to ngrok/tailscale tunnels)
• Menu

  ceuk
  That "copy instructions got agents" thing is a really great idea. I just used it :)
• Kevin_Flynn
  This is a nice website.Was hunting for a real time graph of incidents and patches, like a stock market chart of the end of the software world, or the birth of artificial consciousness, depending on how squiggly the lines are.Just the heatmap apparently. :|Also, as all the humans are installing their "AI on every device" clustering software, the pace of it all should really pick up, and this reminds me of the following SFW movie clip:"The suspense is terrible. I hope it will last." - Willy Wonkahttps://www.youtube.com/watch?v=Oci1CuCht7E
• loloquwowndueo
  Please don’t default to extremely-hard-to-read dark mode. Honor my system preference - it’s there for a reason.
• pelagicAustral
  I'd probably add the on-hold queue of Zone-H... and verified stuff from the past week. Maybe just the Special Defacement reports.
• Menu

  prodigycorp
  A simple line chart would be more helpful, informative and humbling than a heat map.
• Menu

  goody71
  The bots love that whatever tailwind theme that is.
• Menu

  micromacrofoot
  we've got to tell these agents to chill out on the density a little, this page could be more informative with half the data because it would be easier to ingest
• stemonteduro
  what a wonderful day october 21 has been
• weezing
  Hope it makes banks lose a lot of money.
• anon
  undefined
• Menu

  par
  Cool but i am immediately averse to AI UI slop interfaces.
• Menu

  mschuster91
  > Ongoing security incidents, newest first: CVEs, what's affected, which versions fix it, and the advisories and posts behind each one.For fucks sake. The author could have invested at least half an hour to replace this obvious LLM slop regurgitation of the prompt with something of their own."Buy sponsor slot for 149$/month", yeah, spotted the grift. For that level of payment it's at least reasonable to expect the design to be something else than the usual LLM garbage mixture of 30 different font styles.
• Menu

  VCFundedGenYer
  AI slop site. At least change the fonts and don't use the stereotypical smelly AI aesthetic.
• Menu

  HardCodedBias
  Beautiful website, well done.An over time graph with a rolling window of 7d and 28d would likely be a nice addition.Great work!