Signals
What went wrong out there, and which check would have looked for it.
Public incident reports and software flaws matched to the checks on this site. The feeds are read on a schedule; no one submits reports here.
Why this page is here
These are recent failures reported by public agencies and companies. Each entry is matched to the control areas it mentions and links to a relevant check when one exists.
A match does not show how an incident happened or prove a breach. The glossary defines unfamiliar terms.
Recent
Latest disclosures
Summaries are machine-generated from the source description and may be incomplete. The linked source is authoritative. The control matches beside them are not generated; they come from a published lookup table.
Sources
Where this comes from
Sources come from public government feeds. We store each item's title, date, link, and control tags. For CISA items, we also store a short excerpt from the feed description to create the summary. We do not fetch or store linked documents, and we exclude news and commentary. Matching is done by a published lookup table, not by a model. Automated summaries do not affect counts, matches, or recommendations.