BreachFeed

Know the moment the organizations you depend on are breached

BreachFeed watches security news, breach disclosures, and government advisories around the clock for breaches, incidents, and outages. Track everything from companies, keywords, locations, agencies, and get alerted, in real-time, via email or push.

Start tracking freeBrowse tracked entities
sources read around the clock
51
reports taken in this week
1.8K
incidents on record
346
organizations tracked by members
93

How it works

  1. 1

    Track what you depend on

    Companies, keywords, agencies, locations and threat actors — your vendors, your bank, your employer. Paste a vendor list and it is imported in one go.

  2. 2

    We read the news for you

    51 sources, read around the clock: security news, breach disclosures and filings, government advisories, status pages. Every report is matched to what you track, and incidents are kept on record with their timeline and severity.

  3. 3

    You hear about it first

    Alerts by email or push, and to Slack or Teams on the paid plans — instant or on a cadence you choose, per entity, and limited to confirmed incidents if that is all you want to hear about.

  • Email · every plan
  • Push · the iPhone app
  • Slack, Teams & webhooks · Personal Pro and up
  • Weekly brief · every plan
  • Read-only API · Business

Spotlight

companyPHPTrack
confirmedcriticalVulnerabilityFirst reported Oct 21, 2026 · Updated Oct 21, 2026

PHP: emergency patches for two critical PHP2Shell RCE flaws amid exploit attempts

PHP released emergency updates fixing two critical remote code execution flaws, collectively called PHP2Shell, that allow an unauthenticated attacker to run code on a web server. Fixed versions are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only updating fully protects a server. The flaws reside in the PHP runtime itself, and exploit attempts are reported to be emerging.

Disclosure PDF (96 KB) ↗

In the News10

Latest Confirmed Breaches

All incidents →
companyOpenCodeTrack
confirmedmediumData breachFirst reported Oct 18, 2026 · Disclosed Oct 17, 2026 · Updated Oct 19, 2026

OpenCode: breach exposed third-party API keys of some Console users

OpenCode disclosed a security breach affecting 1.4% of its Console users, warning that third-party API keys saved in affected workspaces may have been exposed. In an October 17 statement, the company linked the incident to a large-scale distillation attack and said it was working with Anthropic, OpenAI, and Google to address it.

Full record and coverage →

Plans

Compare plans →

Free

No card

5 tracked entities, email alerts, the weekly brief and the incident record.

Personal

$4.99/month · 10 tracked entities

For individuals watching their own digital footprint.

Personal Pro

$9.99/month · 25 tracked entities

For power users tracking a wider circle.

Business

$29.99/month · 25 tracked entities

For teams tracking their vendors and their own brand.

Every paid plan starts with a 7-day free trial — nothing is charged until it ends.

Real-time News Feed

live feed
BankInfoSecurity.com·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmwb92u6x56mngou2h4ub8ykq

How to Avoid Getting Trapped by AI Vendor Contracts

Short Contracts, Vendor Bake-Offs and Portable Design Can Limit AI Lock-In Technology leaders who rushed into AI vendor agreements are reconsidering how tightly they are tied to one provider. Short-term contracts, testing vendors on working systems before committing, preparing for pricing changes at renewal and designing projects for portability can help limit lock-in.

Claim Depot·· latest
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmwb8ttep561ogou28ij7d21f

Cirrus Aircraft Data Breach Exposes Sensitive Personal and Health Information

2 reports from 1 source · show all coverage

  1. Claim DepotFirst reportCirrus Aircraft Data Breach Exposes Sensitive Personal and Health Information
  2. Claim DepotCirrus Aircraft Data Breach Lawsuit Investigation
Bleeping Computer·· latest 2 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmw9ryiev1lglgou2xeaxfsrj

N-able takes cloud platform offline after 30+ "zero-days" published

N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, including exploits that could let attackers take over vulnerable systems. [...]

2 reports from 2 sources · show all coverage

  1. Bleeping ComputerFirst reportN-able takes cloud platform offline after 30+ "zero-days" published
  2. CSO OnlineN-able N-central gets emergency fix two days after 33 exploits published
Data Breach Today·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmwb8m4jl55k4gou25m687gvi

How to Avoid Getting Trapped by AI Vendor Contracts

Short Contracts, Vendor Bake-Offs and Portable Design Can Limit AI Lock-In Technology leaders who rushed into AI vendor agreements are reconsidering how tightly they are tied to one provider. Short-term contracts, testing vendors on working systems before committing, preparing for pricing changes at renewal and designing projects for portability can help limit lock-in.

The Block·· latest 3 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmwajn6bd3gnkgou2qhbj81p6

NEAR AI says SGLang vulnerability exposed user account details in security breach

3 reports from 3 sources · show all coverage

  1. The BlockFirst reportNEAR AI says SGLang vulnerability exposed user account details in security breach
  2. The Hacker NewsSGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
  3. KrebsOnSecurityMicrosoft Fixes Nearly 1,100 Security Vulnerabilities
CyberScoop·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmwb86nsv54idgou2fmo29yrn

The US wants its quantum lead to turn into factories and supply chains

There’s bipartisan support for further investment in the U.S. quantum industry, along with worries that America’s industrial capacity won’t keep up with demand. The post The US wants its quantum lead to turn into factories and supply chains appeared first on CyberScoop.

Tenable·· latest 4 sources
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmwb2yx5m4rslgou2ke8iuqik

Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

63Critical 1029Important 1Moderate 0Low Microsoft addresses 1093 CVEs in the eleventh Patch Tuesday of 2026. Microsoft patched 1093 CVEs in its November 2026 Patch Tuesday release, with 63 rated critical, 1029 rated as important, and one rated as moderate. This month’s update includes patches for 287 products and components. The following table lists the products with the most CVEs patched this month. A full list of patched products is available in the appendix. RankProductCVE Count 1Microsoft…

4 reports from 4 sources · show all coverage

  1. TenableFirst reportMicrosoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)
  2. Cyber Security NewsMicrosoft November 2026 Patch Tuesday Fixes 1,093 Vulnerabilities Including Outlook Zero-Day
  3. Bleeping ComputerMicrosoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day
  4. CyberScoopMicrosoft fixes over 1,000 vulnerabilities in November Patch Tuesday

Questions, answered

What does BreachFeed watch?
Hundreds of sources, read around the clock: security news, breach disclosures and 8-K filings, government and CERT advisories, vendor status pages and the social accounts researchers report on. Every report is matched against the organizations, keywords, agencies, locations and threat actors you track.
What is the difference between news and a confirmed incident?
News is any report that mentions what you track. An incident is a record BreachFeed keeps once an event is established — with its status (suspected, claimed, confirmed, resolved), severity, timeline and every report behind it. You can route any alert channel to confirmed incidents only.
How fast are alerts?
Sources are read continuously. On Personal Pro and above, alerts go out the moment coverage lands; every plan can choose a digest cadence from thirty minutes to monthly, per tracked entity. Confirmed incidents can be delivered immediately whatever the cadence.
How do alerts reach me?
By email, push through the iPhone app, and Slack, Teams or any webhook on the paid plans. Each channel is set per tracked entity, and each can be limited to confirmed incidents.
Is there a free plan?
Yes: five tracked entities with email alerts, the weekly brief and the incident record, with no card. Paid plans start at $4.99 a month and begin with a 7-day free trial.
Can my team share one list?
On the Business plan, five seats share one tracked list with role-based access; each member gets their own alerts and settings. Vendor lists can be imported in one go.
What happens to my data?
Your account, what you track and your alert settings are held on BreachFeed’s own servers; there are no advertising or analytics cookies and no third-party trackers. You can download everything held about your account, and delete the account yourself, from the account page.

Start with five entities, free

Track the organizations you depend on and hear about it the moment one of them is hit. No card, and nothing to install.

Create your account