I've been compiling a list of cybersecurity RSS feeds to build a small automation (with oversight from Hermes agent) to ping me (ntfy.sh or just Telegram) when a CVE requires my intervention (matching them to a list of services I run for clients and myself.)
My list (of feeds) is still small, but this CVE did not show up, do any of you have any tips for RSS feeds to use for this purpose?
https://pwn.watch/ has an RSS feed available
Thanx, this seems to be the most relevant feed: https://pwn.watch/feed.xml
That heat map this month
alright alright, what's going on? This doesn't seem to correlate with a big model release? (or does it? Claude Haiku 5.5 is in the vicinity) Is this just Anthropic/OpenAI causing this trouble by themselves to validate their existence? Is this related to Anthropic's IPO?
Lines up pretty well with the undisclosed anthropic model. But most likely there's some other explanation/combination of explanations.
Maybe broad adoption is the answer? More people are starting to understand how to apply LLMs as tools, some people who previously might have been hesitant are now willing since they're seeing the benefits?
I don't know for sure, but over the past few months I've seen a bunch of skeptical people do a complete 180 and start using LLMs more actively.
For that it's too sudden. Yes, people flip, but not absolutely everyone and their mom flips within a week.
Its just what exponential growth looks like?
Coincidentally, this month was also huge for reverse engineering and recompilation of games.
Any chance you’d mind sharing your list?
From Claude:
_If you’d rather get messages in real time, you can subscribe to the list itself by sending an empty email to oss-security-subscribe@lists.openwall.com. Be aware that the volume is high; October 2026 alone had 460 messages._
That's also well into clanker managed territory ;) (I mean the clanker builds a small automation, no LLM involved after that, I do a lot of that, just use clanker to build, update, organize, monitor and handle edge cases.) I have used free (and therefore limited) agentmail.to for this. I find the subscription to be a bit expensive for my hobby, but it's a nice service if you do this professionally.
[dead]
The openwall oss-security list usually covers a decent number of issues and this CVE was mentioned there yesterday:
https://www.openwall.com/lists/oss-security/
Thanx, the relevant rss feeds seems to be presented here: https://seclists.org/oss-sec/, being https://seclists.org/rss/oss-sec.rss