pwned.coffeeUpdated 16 min ago

Today's specials: 82 live security incidents, brew temperature 666°C

Head on fireIced. Chilling.

Arista VeloCloud Orchestrator's exploited. Fix is ready, and I'm not.Decaf. Everything is fine. Really.

The baristaRead the ticket

Spills, last 30 daysOn the board now: 34 exploited, 12 no fix, 39 critical

Exploited now
34
No fix yet
12
Critical
39
Days since a spill
0 record 8

Decaf: just the things that can hurt you. Breaches, news and anything below high are off the menu.

5 of 82 specials. Clear

86'dNo fix yet5

Nobody has a patch. Unplug things.

  1. Arista VeloCloud Orchestrator Improper Input Validation 🔥 On the fly · exploitedKEV overdue 29d
    Do now Upgrade VeloCloud Orchestrator to 6.4.2.8 or 5.2.3.16 now, since this flaw is being exploited. Advisory
    Re-plated 24 Oct Order up (fix available) → 86'd (no fix yet) Under the heat lamp: 32 days KEV ✓ Record ✓ Vendor ✓
  2. Murrelektronik AAS Edge Client Critical vulnerability
    Do now Vendor won't fix: replace or isolate it. Murrelektronik will not provide a fix. Advisory
    Re-plated 24 Oct On hold (status unknown) → 86'd (no fix yet) KEV – Record ✓ Vendor –
  3. openapi-typescript-codegen Code injection
    Do now Avoid generating code from untrusted OpenAPI documents with openapi-typescript-codegen, and watch for a vendor fix. Advisory
    Re-plated 24 Oct On hold (status unknown) → 86'd (no fix yet) KEV – Record ✓ Vendor ✓
  1. Siemens SIMATIC S7 PLCs Web Server
    Do now Restrict access to the S7-1500 web server and disable it if unused until a vendor fix is available. Advisory
    Re-plated 24 Oct On hold (status unknown) → 86'd (no fix yet) KEV – Record ✓ Vendor –

359 spills in 12 months

Worst days: 23 Oct 2026 (33 new), 22 Oct 2026 (19 new), 24 Oct 2026 (5 new), 21 Oct 2026 (9 new), 2 Sept 2026 (6 new)

Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.