Security
Are we still getting pwned?
Contributes to: Is software cheaper and more reliable?. Signal score: 25 / 100. Relative weight within this question: 1.
StatusGetting worse
Latest value313
Year over year+24%
Distance from highAt its high
Caution
The data behind this score starts in January 2024, so it misses the first 14 months after ChatGPT launched.
The score divides this count by git pushes. If AI agents are inflating the number of pushes, it can improve even if software is no more reliable.
Observed trend
Rolling 12-month total, with one point per month.
This chart shows counts. The score below adjusts counts for git pushes, so the two can move in opposite directions.
Rolling 12-month total, with one point per month. · 2024-01-14 – 2026-10-30
View data table
| Period / observation | Rolling 12-month total, with one point per month. |
|---|---|
| 2024-01-14 | 196 |
| 2024-02-13 | 203 |
| 2024-03-14 | 195 |
| 2024-04-13 | 184 |
| 2024-05-13 | 174 |
| 2024-06-12 | 176 |
| 2024-07-12 | 159 |
| 2024-08-11 | 162 |
| 2024-09-10 | 178 |
| 2024-10-10 | 174 |
| 2024-11-09 | 180 |
| 2024-12-09 | 177 |
| 2025-01-08 | 182 |
| 2025-02-07 | 189 |
| 2025-03-09 | 200 |
| 2025-04-08 | 222 |
| 2025-05-08 | 231 |
| 2025-06-07 | 242 |
| 2025-07-07 | 251 |
| 2025-08-06 | 253 |
| 2025-09-05 | 251 |
| 2025-10-05 | 241 |
| 2025-11-04 | 252 |
| 2025-12-04 | 240 |
| 2026-01-03 | 245 |
| 2026-02-02 | 248 |
| 2026-03-04 | 242 |
| 2026-04-03 | 244 |
| 2026-05-03 | 256 |
| 2026-06-02 | 254 |
| 2026-07-02 | 257 |
| 2026-08-01 | 265 |
| 2026-08-31 | 281 |
| 2026-09-30 | 308 |
| 2026-10-30 | 313 |
What it measures
- Metric
- Added to CISA's exploited list, last 12 months
- Solved if
- Exploited vulnerabilities trend toward zero
- Signal score
- 25 / 100. Per git push: Down 44% since January 2024, when the data starts. How it is scored
- Status rule
- Getting worse when more exploited vulnerabilities are listed than a year before.
Update history
The reading on each date we checked, separate from the historical observations above.
| Date | Value | Year over year | Status |
|---|---|---|---|
| 2026-11-02 | 313 | +24% | Getting worse |
| 2026-11-01 | 313 | +24% | Getting worse |
Sources
| Source | Role | Measures | Latest data |
|---|---|---|---|
| CISA Known Exploited Vulnerabilities | Scored measurement | Vulnerabilities confirmed as exploited in the wild | Oct 30, 2026 |
| Exploit-DB | Supporting context | Public exploits published | Oct 22, 2026 |
| Have I Been Pwned | Supporting context | Verified data breaches and accounts exposed | Oct 27, 2026 |
| OSV | Supporting context | npm and PyPI advisories, including malicious packages | Nov 1, 2026 |
| pwn.watch | Supporting context | Security incidents, breaches and supply chain attacks | Nov 1, 2026 |