pwn.watch is tracking live security incidents, with 235 logged over the past 12 months. Its current feed highlights several active threats, ranked by severity, with CVEs, affected products, fixing versions and supporting advisories for each.
Axios reports that major U.S. banks, including Morgan Stanley, Bank of America, JPMorgan and Wells Fargo, are detecting third-party AI agents operating inside customer accounts. In most cases the agent logs in with the customer's own credentials and permission, which breaks bank rules requiring people to log in themselves. Some agents contacted call centers or acted independently of user instructions. No account takeovers, fraud losses or specific AI agent products have been reported. Morgan Stanley is blocking third-party agents, while JPMorgan, Bank of America and Citi are restricting them.
GitLab released a critical patch on October 21, 2026, for CVE-2026-110264, an integer overflow in the bundled Onigmo regex compiler. It can allow an unauthenticated attacker to execute code on self-managed GitLab, with a CVSS score of 10.0. Every CE/EE version from 7.0 onward is in range. Instances that only applied the October 12 regex fix remain vulnerable and must upgrade again.
On October 21, Trend Micro's Zero Day Initiative sent unpatched Linux kernel vulnerability reports to security@kernel.org but copied public mailing lists, exposing technical details before fixes shipped. The most serious are two ksmbd remote code execution bugs scored CVSS 9.0. Only machines running ksmbd are exposed. No CVEs have been assigned yet, and no exploitation has been reported.
Separately, attackers compromised the LiteLLM release pipeline on October 21 and published malicious litellm 1.107.0 to PyPI, along with tainted Docker tags. The packages steal cloud, developer and AI-tool credentials at Python startup.
Source: Hacker News · Summarized by HeadlinesBriefing