BreachFeed

Know the moment the organizations you depend on are breached

BreachFeed watches security news, breach disclosures, and government advisories around the clock for breaches, incidents, and outages. Track everything from companies, keywords, locations, agencies, and get alerted, in real-time, via email or push.

Start tracking freeBrowse tracked entities
sources read around the clock
51
reports taken in this week
1.8K
incidents on record
346
organizations tracked by members
93

How it works

  1. 1

    Track what you depend on

    Companies, keywords, agencies, locations and threat actors — your vendors, your bank, your employer. Paste a vendor list and it is imported in one go.

  2. 2

    We read the news for you

    51 sources, read around the clock: security news, breach disclosures and filings, government advisories, status pages. Every report is matched to what you track, and incidents are kept on record with their timeline and severity.

  3. 3

    You hear about it first

    Alerts by email or push, and to Slack or Teams on the paid plans — instant or on a cadence you choose, per entity, and limited to confirmed incidents if that is all you want to hear about.

  • Email · every plan
  • Push · the iPhone app
  • Slack, Teams & webhooks · Personal Pro and up
  • Weekly brief · every plan
  • Read-only API · Business

Spotlight

companyPHPTrack
confirmedcriticalVulnerabilityFirst reported Oct 21, 2026 · Updated Oct 21, 2026

PHP: emergency patches for two critical PHP2Shell RCE flaws amid exploit attempts

PHP released emergency updates fixing two critical remote code execution flaws, collectively called PHP2Shell, that allow an unauthenticated attacker to run code on a web server. Fixed versions are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only updating fully protects a server. The flaws reside in the PHP runtime itself, and exploit attempts are reported to be emerging.

Disclosure PDF (96 KB) ↗

In the News10

Latest Confirmed Breaches

All incidents →
companyOpenCodeTrack
confirmedmediumData breachFirst reported Oct 18, 2026 · Disclosed Oct 17, 2026 · Updated Oct 19, 2026

OpenCode: breach exposed third-party API keys of some Console users

OpenCode disclosed a security breach affecting 1.4% of its Console users, warning that third-party API keys saved in affected workspaces may have been exposed. In an October 17 statement, the company linked the incident to a large-scale distillation attack and said it was working with Anthropic, OpenAI, and Google to address it.

Full record and coverage →

Plans

Compare plans →

Free

No card

5 tracked entities, email alerts, the weekly brief and the incident record.

Personal

$4.99/month · 10 tracked entities

For individuals watching their own digital footprint.

Personal Pro

$9.99/month · 25 tracked entities

For power users tracking a wider circle.

Business

$29.99/month · 25 tracked entities

For teams tracking their vendors and their own brand.

Every paid plan starts with a 7-day free trial — nothing is charged until it ends.

Real-time News Feed

live feed
Cyber Security News·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmwaw04sd4au0gou26tqzhyjv

Barracuda Confirms Active Exploitation of Email Gateway Flaws Allowing Unauthenticated Root Access

Barracuda has confirmed active exploitation of security flaws affecting its Email Security Gateway (ESG), warning that attackers could combine two vulnerabilities to gain root access without logging in. In a November 9, 2026, update issued at 9:00 p.m. EST, the company said exploitation had affected a small number of organizations. The flaws, tracked as CVE-2026-116606 […] The post Barracuda Confirms Active Exploitation of Email Gateway Flaws Allowing Unauthenticated Root Access appeared first…

The Vanderbilt Hustler·· latest 21 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmw9ho5i30w18gou2iegy67nq

BREAKING: Vanderbilt networks reportedly hacked, VUIT yet to confirm

21 reports from 21 sources · show all coverage

  1. The Vanderbilt HustlerFirst reportBREAKING: Vanderbilt networks reportedly hacked, VUIT yet to confirm
  2. Nashville SceneRansomware Attack Puts Vanderbilt on Lockdown
  3. The Record from Recorded Future NewsVanderbilt cybersecurity incident impacting campus devices and systems
  4. Nashville BannerCybersecurity breach impacts Vanderbilt University
  5. GizmodoAttackers Claim to Have Stolen Data on Over 1 Million Vanderbilt Students and Staff
  6. Bleeping ComputerVanderbilt University hit in BYOD ransomware attack, data theft claimed
  7. LinkedInVanderbilt University hit in BYOD ransomware attack, data theft claimed
  8. BigGo FinanceRansomware Group BYOD Claims It Stole Data on 1 Million People From Vanderbilt
  9. The Washington PostVanderbilt University shuts down devices after cyber attack
  10. WPLN NewsVanderbilt University facing active cybersecurity threat
  11. Hindustan TimesVanderbilt University tells students to disconnect devices after ransomware gang claims theft of 1 million records | Hindustan Times
  12. NeowinVanderbilt University suffers potential ransomware attack, data breach
  13. Cybersecurity InsidersVanderbilt University reportedly targeted by BYOD Ransomware Group in Cyber Attack
  14. Cyber Security NewsVanderbilt University Shuts Down Campus Devices After BYOD Ransomware Group Claims Network Breach
  15. The RegisterRansomware threat blares from Vanderbilt University computers during cyberattack
  16. SC MediaVanderbilt University responds to cyberattack by BYOD ransomware group
  17. QuartzVanderbilt University asked campus to shut down devices amid claimed ransomware attack
  18. HotHardwareVanderbilt Orders Urgent PC Shutdown In Crippling Hack Claiming 1M SSNs
  19. Campus Security TodayVanderbilt University Battles Ransomware Attack on Campus Network
  20. The TennesseanVanderbilt restores WiFi, some services after cybersecurity hack
  21. WSMVVanderbilt Wi-Fi now available as access to schools systems, applications remain restricted amid cybersecurity breach. Here’s what we know
The Hacker News·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmwaw5a0j4axzgou2og2h0en1

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor

Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two

Cyber Security News·· latest 3 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmwafw5e437hzgou2at6a5eci

Apple Fixes 9 Security Vulnerabilities in iOS 27.2.1, Including Bluetooth Pairing and iMessage Flaws

Apple released iOS 27.2.1 and iPadOS 27.2.1 on November 9, 2026. The update fixes nine security flaws in Bluetooth, AirPlay, Messages, and other parts of the system. It runs on iPhone 11 and later, and on several recent iPad models, including iPad Pro, iPad Air, iPad 9th generation, and iPad mini 6th generation. Apple’s security […] The post Apple Fixes 9 Security Vulnerabilities in iOS 27.2.1, Including Bluetooth Pairing and iMessage Flaws appeared first on Cyber Security News.

5 reports from 3 sources · show all coverage

  1. Cyber Security NewsFirst reportApple Fixes 9 Security Vulnerabilities in iOS 27.2.1, Including Bluetooth Pairing and iMessage Flaws
  2. The Hacker NewsApple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities
  3. Cyber Security NewsBinance Warns iPhone Users of Major iOS Flaw That May Expose Crypto Wallet, Private Keys
  4. The Hacker NewsBinance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
  5. Bleeping ComputerBinance warns of iOS flaw that could leak crypto wallet secrets
Cyber Security News·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmwavlzf649tagou2npxw4rh0

One Identity Unveils Safeguard 9.0 for Simpler PAM

Alisa Vijeo, California, November 10th, 2026, CyberNewswire One Identity today unveiled Safeguard 9.0, a major update designed to reduce the infrastructure, administrative overhead and operational complexity associated with enterprise privileged access management. As privileged access management becomes more critical and complex, One Identity Safeguard continues to advance around a straightforward goal: make enterprise-grade privileged access […] The post One Identity Unveils Safeguard 9.0 for…

Questions, answered

What does BreachFeed watch?
Hundreds of sources, read around the clock: security news, breach disclosures and 8-K filings, government and CERT advisories, vendor status pages and the social accounts researchers report on. Every report is matched against the organizations, keywords, agencies, locations and threat actors you track.
What is the difference between news and a confirmed incident?
News is any report that mentions what you track. An incident is a record BreachFeed keeps once an event is established — with its status (suspected, claimed, confirmed, resolved), severity, timeline and every report behind it. You can route any alert channel to confirmed incidents only.
How fast are alerts?
Sources are read continuously. On Personal Pro and above, alerts go out the moment coverage lands; every plan can choose a digest cadence from thirty minutes to monthly, per tracked entity. Confirmed incidents can be delivered immediately whatever the cadence.
How do alerts reach me?
By email, push through the iPhone app, and Slack, Teams or any webhook on the paid plans. Each channel is set per tracked entity, and each can be limited to confirmed incidents.
Is there a free plan?
Yes: five tracked entities with email alerts, the weekly brief and the incident record, with no card. Paid plans start at $4.99 a month and begin with a 7-day free trial.
Can my team share one list?
On the Business plan, five seats share one tracked list with role-based access; each member gets their own alerts and settings. Vendor lists can be imported in one go.
What happens to my data?
Your account, what you track and your alert settings are held on BreachFeed’s own servers; there are no advertising or analytics cookies and no third-party trackers. You can download everything held about your account, and delete the account yourself, from the account page.

Start with five entities, free

Track the organizations you depend on and hear about it the moment one of them is hit. No card, and nothing to install.

Create your account