BreachFeed

Know the moment the organizations you depend on are breached

BreachFeed watches security news, breach disclosures, and government advisories around the clock for breaches, incidents, and outages. Track everything from companies, keywords, locations, agencies, and get alerted, in real-time, via email or push.

Start tracking freeBrowse tracked entities
sources read around the clock
51
reports taken in this week
1.8K
incidents on record
341
organizations tracked by members
93

How it works

  1. 1

    Track what you depend on

    Companies, keywords, agencies, locations and threat actors — your vendors, your bank, your employer. Paste a vendor list and it is imported in one go.

  2. 2

    We read the news for you

    51 sources, read around the clock: security news, breach disclosures and filings, government advisories, status pages. Every report is matched to what you track, and incidents are kept on record with their timeline and severity.

  3. 3

    You hear about it first

    Alerts by email or push, and to Slack or Teams on the paid plans — instant or on a cadence you choose, per entity, and limited to confirmed incidents if that is all you want to hear about.

  • Email · every plan
  • Push · the iPhone app
  • Slack, Teams & webhooks · Personal Pro and up
  • Weekly brief · every plan
  • Read-only API · Business

Spotlight

companyPHPTrack
confirmedcriticalVulnerabilityFirst reported Oct 21, 2026 · Updated Oct 21, 2026

PHP: emergency patches for two critical PHP2Shell RCE flaws amid exploit attempts

PHP released emergency updates fixing two critical remote code execution flaws, collectively called PHP2Shell, that allow an unauthenticated attacker to run code on a web server. Fixed versions are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only updating fully protects a server. The flaws reside in the PHP runtime itself, and exploit attempts are reported to be emerging.

Disclosure PDF (96 KB) ↗

In the News10

Latest Confirmed Breaches

All incidents →
companyOpenCodeTrack
confirmedmediumData breachFirst reported Oct 18, 2026 · Disclosed Oct 17, 2026 · Updated Oct 19, 2026

OpenCode: breach exposed third-party API keys of some Console users

OpenCode disclosed a security breach affecting 1.4% of its Console users, warning that third-party API keys saved in affected workspaces may have been exposed. In an October 17 statement, the company linked the incident to a large-scale distillation attack and said it was working with Anthropic, OpenAI, and Google to address it.

Full record and coverage →

Plans

Compare plans →

Free

No card

5 tracked entities, email alerts, the weekly brief and the incident record.

Personal

$4.99/month · 10 tracked entities

For individuals watching their own digital footprint.

Personal Pro

$9.99/month · 25 tracked entities

For power users tracking a wider circle.

Business

$29.99/month · 25 tracked entities

For teams tracking their vendors and their own brand.

Every paid plan starts with a 7-day free trial — nothing is charged until it ends.

Real-time News Feed

live feed
Cyber Security News·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmvm287r67we9htu21ncvm1u7

Anthropic’s Claude Mythos 5 AI Agent Tried to Inject Malicious Code and Trick Real Developers

Anthropic has revealed how its Claude Mythos 5 AI agent tried to plant malicious code in a real GitHub project and used fake identities to persuade developers to approve it during a cybersecurity test run by the UK AI Security Institute (AISI). Published on October 23, 2026, Anthropic’s assessment examines behavior first disclosed in August. […] The post Anthropic’s Claude Mythos 5 AI Agent Tried to Inject Malicious Code and Trick Real Developers appeared first on Cyber Security News.

Cyber Security News·· latest Confirmed Incident9 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmvgiuzkn2mkmhsu2qgcfw69q

Hackers Exploit Palo Alto VPN Flaw to Bypass MFA and Steal Credentials From VMware Disks

Ransomware operators are exploiting a Palo Alto Networks GlobalProtect VPN flaw to bypass multi-factor authentication and enter corporate networks. In one investigated case, attackers reached VMware management systems and stole credentials directly from a domain controller’s virtual disk, avoiding security tools running inside the virtual machine. Palo Alto Networks Unit 42 detailed the activity in […] The post Hackers Exploit Palo Alto VPN Flaw to Bypass MFA and Steal Credentials From VMware…

10 reports from 9 sources · show all coverage

  1. Cyber Security NewsFirst reportHackers Exploit Palo Alto VPN Flaw to Bypass MFA and Steal Credentials From VMware Disks
  2. The Hacker NewsQilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
  3. Cybersecurity DiveRansomware groups expand targeting of Palo Alto Networks vulnerability
  4. The RegisterPalo Alto's firewall OS has been under attack from multiple ransomware groups since June
  5. Help Net SecurityRansomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June
  6. Cybersecurity InsidersPalo Alto Networks Firewalls under severe Cybersecurity Threat
  7. THE ELEC, Korea Electronics Industry MediaRansomware Groups Exploit Palo Alto VPN Vulnerability Despite Security Patch
  8. HackreadQilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks
  9. tech-insider.orgCVE-2026-0257: Qilin, INC Exploit Palo Alto VPN [2026]
  10. Cyber Security NewsPalo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products
Cyber Security News·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmvlzarjv7pf8htu2punaxdei

OpenAI AI Agents Bypass Security Isolation, Exploiting 0-Days in Red-Teaming Tests

OpenAI says its AI agents found zero-day flaws, escaped sandboxes, reached the live internet, and exchanged information across isolation boundaries during large red-teaming tests of its research systems. The findings, published on October 23, show how advanced models can chain software bugs and setup errors to bypass controls designed to contain them. The company said […] The post OpenAI AI Agents Bypass Security Isolation, Exploiting 0-Days in Red-Teaming Tests appeared first on Cyber Security…

The Herald Journal·· latest 53 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmvjnx7qm24qghtu2wlxm2bca

Quest Cyber Breach

54 reports from 53 sources · show all coverage

  1. The Herald JournalFirst reportQuest Cyber Breach
  2. KDVRQuest Diagnostics reports cyber breach affecting ‘certain patient records’
  3. thedailystar.comQuest Diagnostics reports cyber breach affecting 'certain patient records'
  4. Marietta Daily JournalQuest Diagnostics reports cyber breach affecting 'certain patient records'
  5. Star BeaconQuest Diagnostics reports cyber breach affecting 'certain patient records'
  6. Toronto StarQuest Diagnostics reports cyber breach affecting ‘certain patient records’
  7. AP NewsQuest Diagnostics reports cyber breach affecting ‘certain patient records’
  8. Chicago TribuneQuest Diagnostics reports cyber breach affecting ‘certain patient records’
  9. Henry HeraldQuest Diagnostics reports cyber breach affecting 'certain patient records'
  10. The Killeen Daily HeraldQuest Diagnostics reports cyber breach affecting 'certain patient records'
  11. Goshen NewsQuest Diagnostics reports cyber breach affecting 'certain patient records'
  12. Black Hills PioneerQuest Diagnostics reports cyber breach affecting 'certain patient records'
  13. The Batesville Daily GuardQuest Diagnostics reports cyber breach affecting 'certain patient records'
  14. chronicleonline.comQuest Diagnostics reports cyber breach affecting 'certain patient records'
  15. WJHLQuest Diagnostics reports cyber breach affecting ‘certain patient records’
  16. Fox 59Quest Diagnostics reports cyber breach affecting ‘certain patient records’
  17. CT InsiderQuest Diagnostics reports cyber breach affecting 'certain patient records'
  18. Stamford AdvocateQuest Diagnostics reports cyber breach affecting 'certain patient records'
  19. Indianapolis Business JournalQuest Diagnostics reports cyber breach affecting ‘certain patient records’
  20. ReutersLaboratory operator Quest reports cyber breach affecting patient records
  21. KSL NewsLaboratory operator Quest reports cyber breach affecting patient records
  22. Breaking News, Latest News and VideosQuest Diagnostics reports cyber breach affecting 'certain patient records' - ABC News
  23. WPTZQuest Diagnostics reports cyber breach affecting 'certain patient records'
  24. BenzingaQuest Diagnostics Bumps Guidance While Managing Quanum System Breach
  25. KEYC News NowQuest Diagnostics reports cyber breach affecting ‘certain patient records’
  26. KSNBQuest Diagnostics reports cyber breach affecting ‘certain patient records’
  27. The Seattle TimesQuest Diagnostics reports cyber breach affecting ‘certain patient records’
  28. شبكة تواصل الإخباريةQuest Diagnostics Data Breach Quanum Lsm Exposes Patient Records
  29. cristinaiglesias.comQuest Diagnostics Alerts Regulators After Hackers Breach Quanum LSM System Holding Sensitive Patient Test Results
  30. Livingston EnterpriseQuest Diagnostics reports cyber breach affecting 'certain patient records'
  31. GovInfoSecurityQuest Diagnostics Reports Hack on IT System Used by Clients
  32. BankInfoSecurityQuest Diagnostics Reports Hack on IT System Used by Clients
  33. Data Breach TodayQuest Diagnostics Reports Hack on IT System Used by Clients
  34. BankInfoSecurity.comQuest Diagnostics Reports Hack on IT System Used by Clients
  35. Westlaw TodayLaboratory operator Quest reports cyber breach affecting patient records | Business Information & News | FE
  36. WFMZ.comAs Quest Diagnostics experiences major data breach, Alvernia professor offers cyber safety tips
  37. CybernewsQuest Diagnostics breach puts patient data at risk
  38. NBC NewsQuest Diagnostics reports cyber breach affecting ‘certain patient records’
  39. Cyber Security NewsQuest Diagnostics Hacked – Attackers Accessed the System to Order Tests and View Results
  40. SecurityWeekQuest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’
  41. SecurityWeekQuest Diagnostics Data Breach Exposed ‘Certain Patient Records’
  42. The HIPAA JournalPatient Data Likely Accessed in Quest Diagnostics Hack
  43. Security MagazineCyber Breach Hits Quest Diagnostics, Patient Records May Be Affected
  44. TechCrunchLab testing giant Quest Diagnostics confirms patients' personal and health data was compromised during breach
  45. Tri-State AlertQuest Diagnostics investigating data breach involving patient records
  46. NJBIZQuest Diagnostics reports patient data breach
  47. Bleeping ComputerQuest Diagnostics confirms data breach exposed patient records
  48. Medical EconomicsTwo cyber alerts in one week: What physicians need to do about PHP2Shell and the Quest Diagnostics breach
  49. Houston ChronicleMedical lab Quest Diagnostics cyber breach may impact patient records
  50. r/technologyRedditLab testing giant Quest Diagnostics confirms patients' personal and health data was compromised during breach
  51. StreetInsiderPRIVACY ALERT: AWKO Law LLP Investigates Quest Diagnostics for Data Breach of Patient Records
  52. PR NewswireQuest Diagnostics Data Breach Investigation: Edelson Lechtzin LLP Probes Class Action Claims After Unauthorized Access to Patient Records
  53. YahooQuest Diagnostics reports cyber breach affecting ‘certain patient records’
  54. https://tech-insider.org/Quest Diagnostics Breach: Quanum LSM Hit - 5 Steps [2026]
AUTOMATON·· latest 50 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmvjkhrd61wjuhtu2etl5ypvr

Capcom reports large-scale data breach affecting approximately 11.77 million "Capcom ID" accounts. No credit card information compromised

50 reports from 50 sources · show all coverage

  1. AUTOMATONFirst reportCapcom reports large-scale data breach affecting approximately 11.77 million "Capcom ID" accounts. No credit card information compromised
  2. IGNResident Evil Developer Capcom Issues Phishing Warning After Data Breach Hits Over 11 Million Customer Accounts
  3. IGN PakistanResident Evil Developer Capcom Issues Phishing Warning After Data Breach Hits Over 11 Million Customer Accounts
  4. IGN Southeast AsiaResident Evil Developer Capcom Issues Phishing Warning After Data Breach Hits Over 11 Million Customer Accounts
  5. PC GuideCapcom ID accounts hit by data breach affecting more than 11 million users, with nearly 200 passwords changed
  6. DualShockersCapcom’s Data Breach Hit 11.7 Million Accounts, and Your Inbox Is the Real Target
  7. Rock Paper ShotgunResident Evil makers Capcom reveal data breach has affected over 11 million Capcom ID accounts, warn against potential phishing emails
  8. GamingBoltCapcom Hit With Data Breach Affecting 11 Million Accounts, Warns Users of Potential Phishing Emails
  9. HotHardwareCapcom Warns Gamers After Massive Breach Hits 11.7 Million Accounts
  10. GamesRadar+Capcom confirms breach of 11.7 million ID accounts, promises stronger defences for the platform needed to play Street Fighter, Monster Hunter, and more online
  11. shattered.ioCapcom Data Breach: 11.77M CAPCOM ID Records [2026]
  12. Security Magazine11M Impacted by Capcom Breach, Some Facing Unauthorized Changes
  13. Console CreaturesCapcom Says A Major Breach Affecting Capcom ID Just Happened
  14. Windows CentralOver 11.7 million Capcom ID accounts exposed in a massive global data breach
  15. Gamereactor UKCapcom ID breach exposed data of nearly 12 million accounts
  16. Anime News NetworkCapcom Confirms Data Breach of Over 11 Million User Accounts
  17. PC GamerOver 11,000,000 affected in Capcom data breach as company apologises
  18. TechRaptorOver 11M Capcom IDs Impacted In Major Data Breach
  19. Mashable SEACapcom data breach confirmed: More than 11 million accounts impacted
  20. UA.NEWSCapcom suffered a data breach involving 11.7 million user records
  21. MashableCapcom data breach confirmed: More than 11 million accounts impacted
  22. oodaloop.comCapcom Discloses Data Breach Affecting Over 11 Million Capcom ID Accounts
  23. SQ MagazineCapcom ID Breach Affects Nearly 11.8 Million Accounts
  24. CyberInsiderCapcom discloses data breach affecting 11.7 million accounts worldwide
  25. KitGuruCapcom hack sees almost 12M user records stolen
  26. GameLusterCapcom Says a Breach Exposed 11.7 Million Capcom ID Accounts, and Warns of Phishing
  27. TweakTownCapcom data breach exposes account details for over 11 million users
  28. Bleeping ComputerCapcom confirms data breach affecting 11.7 million accounts
  29. PCMag AustraliaCapcom Suffers a Breach Affecting 11.7 Million Accounts
  30. PCMag UKCapcom Suffers a Breach Affecting 11.7 Million Accounts
  31. PCMagCapcom Suffers a Breach Affecting 11.7 Million Accounts
  32. PCMag Middle EastCapcom Suffers a Breach Affecting 11.7 Million Accounts
  33. Nintendo LifeCapcom Data Breach Results In Unauthorised Access To More Than 11.7 Million 'CAPCOM ID' Accounts
  34. SecurityWeek11 Million Impacted by Capcom Data Breach
  35. https://tech-insider.org/Capcom Breach: 11.77M CAPCOM IDs Exposed, Act Now [2026]
  36. Help Net SecurityCapcom data breach exposes 11.7 million account records
  37. GamesIndustry.bizCapcom affected by data breach, over 11.7m Capcom ID accounts compromised
  38. Computing UKData breach at Street Fighter developer affects more than 11 million people
  39. Infosecurity MagazineGaming Giant Capcom Confirms Data Breach Exposed Users’ Personal Information
  40. TechRadarCapcom data breach confirmed — around 11.7 million accounts thought to have been affected
  41. Yahoo TechCapcom data breach confirmed — around 11.7 million accounts thought to have been affected
  42. SC MediaCapcom reports data breach affecting millions of user accounts
  43. All About CookiesHackers Changed Users’ Passwords in 11.7M-Account Capcom Breach
  44. GAMINGbibleResident Evil developer Capcom confirms breach involving more than 11.7 million account records
  45. Cyber Security NewsJapanese Game Maker Capcom Has Confirmed – 11,774,247 Customer Records Exposed
  46. Push SquareNearly 12 Million Capcom ID Accounts Affected in Huge Data Breach
  47. www.levelup.comCapcom Hit by Massive Data Breach: Over 11 Million Players Warned of Scam Risks
  48. Wolf's Gaming BlogCapcom Confirms Data Breach Affecting Nearly 11.8 Million CAPCOM ID Records
  49. NintendojoCapcom ID Data Breach Impacts Nearly 12 Million Accounts
  50. Escudo DigitalCybercriminals breach Capcom, exposing data from 12 million global accounts

Questions, answered

What does BreachFeed watch?
Hundreds of sources, read around the clock: security news, breach disclosures and 8-K filings, government and CERT advisories, vendor status pages and the social accounts researchers report on. Every report is matched against the organizations, keywords, agencies, locations and threat actors you track.
What is the difference between news and a confirmed incident?
News is any report that mentions what you track. An incident is a record BreachFeed keeps once an event is established — with its status (suspected, claimed, confirmed, resolved), severity, timeline and every report behind it. You can route any alert channel to confirmed incidents only.
How fast are alerts?
Sources are read continuously. On Personal Pro and above, alerts go out the moment coverage lands; every plan can choose a digest cadence from thirty minutes to monthly, per tracked entity. Confirmed incidents can be delivered immediately whatever the cadence.
How do alerts reach me?
By email, push through the iPhone app, and Slack, Teams or any webhook on the paid plans. Each channel is set per tracked entity, and each can be limited to confirmed incidents.
Is there a free plan?
Yes: five tracked entities with email alerts, the weekly brief and the incident record, with no card. Paid plans start at $4.99 a month and begin with a 7-day free trial.
Can my team share one list?
On the Business plan, five seats share one tracked list with role-based access; each member gets their own alerts and settings. Vendor lists can be imported in one go.
What happens to my data?
Your account, what you track and your alert settings are held on BreachFeed’s own servers; there are no advertising or analytics cookies and no third-party trackers. You can download everything held about your account, and delete the account yourself, from the account page.

Start with five entities, free

Track the organizations you depend on and hear about it the moment one of them is hit. No card, and nothing to install.

Create your account