You can watch rss feeds to follow all CVEs like Microsoft’s https://api.msrc.microsoft.com/update-guide/rss
NIST used to have an rss feed for CVEs but deprecated it recently. They still have other ways you can follow it though https://nvd.nist.gov/vuln/data-feeds
Or if you just want to follow CVEs for certain applications you can host/subscribe to something like https://www.opencve.io/welcome which allows you to filter CVEs from NIST’s National Vulnerability Database (NVD)
Are you sure? Discover does have free identity monitoring and I get emails every month saying whether they found anything or not. I have never gotten an email saying they found my ssn though so can’t say for sure if this is legit. Either way I would still check through the app or their website without opening the link.