BreachFeed

Know the moment the organizations you depend on are breached

BreachFeed watches security news, breach disclosures, and government advisories around the clock for breaches, incidents, and outages. Track everything from companies, keywords, locations, agencies, and get alerted, in real-time, via email or push.

Start tracking freeBrowse tracked entities
sources read around the clock
51
reports taken in this week
1.8K
incidents on record
341
organizations tracked by members
93

How it works

  1. 1

    Track what you depend on

    Companies, keywords, agencies, locations and threat actors — your vendors, your bank, your employer. Paste a vendor list and it is imported in one go.

  2. 2

    We read the news for you

    51 sources, read around the clock: security news, breach disclosures and filings, government advisories, status pages. Every report is matched to what you track, and incidents are kept on record with their timeline and severity.

  3. 3

    You hear about it first

    Alerts by email or push, and to Slack or Teams on the paid plans — instant or on a cadence you choose, per entity, and limited to confirmed incidents if that is all you want to hear about.

  • Email · every plan
  • Push · the iPhone app
  • Slack, Teams & webhooks · Personal Pro and up
  • Weekly brief · every plan
  • Read-only API · Business

Spotlight

companyPHPTrack
confirmedcriticalVulnerabilityFirst reported Oct 21, 2026 · Updated Oct 21, 2026

PHP: emergency patches for two critical PHP2Shell RCE flaws amid exploit attempts

PHP released emergency updates fixing two critical remote code execution flaws, collectively called PHP2Shell, that allow an unauthenticated attacker to run code on a web server. Fixed versions are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only updating fully protects a server. The flaws reside in the PHP runtime itself, and exploit attempts are reported to be emerging.

Disclosure PDF (96 KB) ↗

In the News10

Latest Confirmed Breaches

All incidents →
companyOpenCodeTrack
confirmedmediumData breachFirst reported Oct 18, 2026 · Disclosed Oct 17, 2026 · Updated Oct 19, 2026

OpenCode: breach exposed third-party API keys of some Console users

OpenCode disclosed a security breach affecting 1.4% of its Console users, warning that third-party API keys saved in affected workspaces may have been exposed. In an October 17 statement, the company linked the incident to a large-scale distillation attack and said it was working with Anthropic, OpenAI, and Google to address it.

Full record and coverage →

Plans

Compare plans →

Free

No card

5 tracked entities, email alerts, the weekly brief and the incident record.

Personal

$4.99/month · 10 tracked entities

For individuals watching their own digital footprint.

Personal Pro

$9.99/month · 25 tracked entities

For power users tracking a wider circle.

Business

$29.99/month · 25 tracked entities

For teams tracking their vendors and their own brand.

Every paid plan starts with a 7-day free trial — nothing is charged until it ends.

Real-time News Feed

live feed
Yahoo·· latest 2 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmvr0nu73jkxkhtu20kdymsev

Sony Data Breach Hits 2.58 Million So-net and Plala Users

2 reports from 2 sources · show all coverage

  1. YahooFirst reportSony Data Breach Hits 2.58 Million So-net and Plala Users
  2. Cyber Security NewsSony Suffers Massive Data Breach- 2.58 Million So-net and Plala Users Data Exposed
nippon.com·· latest 4 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmvqeu2wti4wshtu2a18nvm22

5 Forex Firms Report Customer Damage after GMO Server Breach

4 reports from 4 sources · show all coverage

  1. nippon.comFirst report5 Forex Firms Report Customer Damage after GMO Server Breach
  2. WSJJapan Vows to Fortify Cyber Defenses as GMO Hack Hits Forex Brokers
  3. QuartzHackers demand $50 million from Japan's GMO Internet after forex trading breach
  4. The Hacker NewsJapan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
Cyber Security News·· latest 3 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmvow01z1ejybhtu2yw95t280

Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions

Microsoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing malicious apps with no declared permissions to steal work account access tokens due to improper authentication in its broker component. Microsoft classified the flaw as a local elevation-of-privilege vulnerability. The issue affected Android devices with Microsoft Authenticator installed and a signed-in work account. […] The post Microsoft Authenticator Flaw Lets Malicious Android Apps Steal…

3 reports from 3 sources · show all coverage

  1. Cyber Security NewsFirst reportMicrosoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions
  2. The Hacker NewsMicrosoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
  3. Cyber Security HeadlinesAuthenticator token theft, Tailworm SSH flaws, UK police supplier breaches
조선일보·· latest 6 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmvrgdo4tkm9whtu2r12eadef

Breaking: Bithumb Internal System Breach Leaks Personal Data

6 reports from 6 sources · show all coverage

  1. 조선일보First reportBreaking: Bithumb Internal System Breach Leaks Personal Data
  2. ReutersThree South Korean financial firms including Bithumb report data breaches, Yonhap says
  3. TradingViewBithumb discloses data leak after internal system breach: Report
  4. CoinDeskBithumb hacked through employee system as South Korean financial firms face cyberattacks
  5. grafa.comBithumb reports data breach amid South Korea cyberattacks
  6. https://tech-insider.org/Bithumb Data Breach: Daishin Hit, 38,490 Customers [2026]
Central Oregon Daily·· latest 19 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmvr2755ijos6htu2acqxwgkp

Hacker trying to breach US Federal Election Commission system, email shows

19 reports from 19 sources · show all coverage

  1. Central Oregon DailyFirst reportHacker trying to breach US Federal Election Commission system, email shows
  2. CNAHacking attempts against US Federal Election Commission system triggered outage, email shows
  3. ReutersHacker trying to breach US Federal Election Commission system, email shows
  4. WSAUHacker trying to breach US Federal Election Commission system, email shows
  5. KFGOHacker trying to breach US Federal Election Commission system, email shows
  6. r/newsRedditHacker trying to breach US Federal Election Commission system, email shows
  7. WTVBHacker trying to breach US Federal Election Commission system, email shows
  8. WHBL NewsHacker trying to breach US Federal Election Commission system, email shows
  9. WTAQHacker trying to breach US Federal Election Commission system, email shows
  10. KELO-AMHacker trying to breach US Federal Election Commission system, email shows
  11. GV WireHacker Trying to Breach US Federal Election Commission System, Email Shows
  12. Investing.comHacker trying to breach US Federal Election Commission system, email shows By Reuters
  13. r/technologyRedditHacker trying to breach US Federal Election Commission system, email shows
  14. The Jerusalem PostHacker targets US Federal Election Commission, filing system offline
  15. Denver GazetteHacking attempts against U.S. election system triggers outage
  16. WAOWHacking attempts against US Federal Election Commission system triggered outage, email shows
  17. notus.orgFederal Election Commission Outage Hits One Week Out From Election Day
  18. NOTUSFederal Election Commission Outage Hits One Week Out From Election Day
  19. Cyber Security NewsHackers Target U.S. Election Commission, Forcing Online System Shutdown Days Before Midterms
Cyber Security News·· latest 3 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmvnwunb6c90vhtu2yh6lwcgz

Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers From One Compromised Device

A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report, called Tailworm, was published on October 25, 2026, by security researcher Erica Windisch […] The post Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers From One Compromised Device appeared first on Cyber Security News.

4 reports from 3 sources · show all coverage

  1. Cyber Security NewsFirst reportTailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers From One Compromised Device
  2. The Hacker NewsUnpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
  3. Bleeping ComputerTailscale warns of SSH flaws allowing root privilege escalation
  4. The Hacker NewsTailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

Questions, answered

What does BreachFeed watch?
Hundreds of sources, read around the clock: security news, breach disclosures and 8-K filings, government and CERT advisories, vendor status pages and the social accounts researchers report on. Every report is matched against the organizations, keywords, agencies, locations and threat actors you track.
What is the difference between news and a confirmed incident?
News is any report that mentions what you track. An incident is a record BreachFeed keeps once an event is established — with its status (suspected, claimed, confirmed, resolved), severity, timeline and every report behind it. You can route any alert channel to confirmed incidents only.
How fast are alerts?
Sources are read continuously. On Personal Pro and above, alerts go out the moment coverage lands; every plan can choose a digest cadence from thirty minutes to monthly, per tracked entity. Confirmed incidents can be delivered immediately whatever the cadence.
How do alerts reach me?
By email, push through the iPhone app, and Slack, Teams or any webhook on the paid plans. Each channel is set per tracked entity, and each can be limited to confirmed incidents.
Is there a free plan?
Yes: five tracked entities with email alerts, the weekly brief and the incident record, with no card. Paid plans start at $4.99 a month and begin with a 7-day free trial.
Can my team share one list?
On the Business plan, five seats share one tracked list with role-based access; each member gets their own alerts and settings. Vendor lists can be imported in one go.
What happens to my data?
Your account, what you track and your alert settings are held on BreachFeed’s own servers; there are no advertising or analytics cookies and no third-party trackers. You can download everything held about your account, and delete the account yourself, from the account page.

Start with five entities, free

Track the organizations you depend on and hear about it the moment one of them is hit. No card, and nothing to install.

Create your account