About
Fresh breaches, brewed hourly.
pwned.coffee tracks security incidents that are happening right now: what's affected, whether there's a fix, which versions fix it, and where the news came from.
Every hour it reads the CISA Known Exploited Vulnerabilities catalog, critical GitHub security advisories, and a handful of security news feeds. CVSS scores come from NVD. A language model groups reports about the same thing into one incident and writes the short summary. Versions and CVE numbers are only shown when a source states them. News-only incidents are reviewed by a human before they go on the board.
An incident stays on today's specials while it's still changing. Fully patched ones move to past orders after a quiet week; anything without a full fix stays up to a month.
The brew temperature and the mug's mood come from the live incidents: unpatched criticals heat things up fastest. At the top of the scale the readout gives up on numbers.
Use the data
incidents.json, RSS and llms.txt are free to use. Add ?stack=nextjs,php to any of them to filter. Agents can use the MCP server.
This is not security advice. Always read the vendor advisory before acting. It's not coffee either.