Transparency

Sources we summarize

Every syndicated item on this site comes from a publication an editor has explicitly approved. We publish a headline, a short original summary and a link to the original article; we never reproduce full articles or images without permission. Read the source attribution policy.

PublicationWebsiteItems summarizedNotes
Adversa AIadversa.ai2AI red-teaming news digests.
AI Incident Databaseincidentdatabase.ai20Catalogue of real-world AI harms and security incidents.
Apple Developerdeveloper.apple.com0Apple software release announcements (pair with Apple security content pages).
Ars Technicaarstechnica.com4Technology press; careful technical security reporting.
arXiv cs.CRarxiv.org0Academic preprints in cryptography and security (high volume).
Binarlybinarly.io0Firmware and UEFI supply-chain research.
Bishop Foxbishopfox.com2Offensive security research and tooling.
BlackFogblackfog.com0Monthly "State of Ransomware" reports counting disclosed and undisclosed attacks (vendor).
BleepingComputerbleepingcomputer.com15Fast mainstream desk for ransomware, breach and malware news.
Canadian Centre for Cyber Securitycyber.gc.ca25Official Canadian alerts and advisories.
CERT-EUcert.europa.eu0Computer Emergency Response Team for the EU institutions.
CERT/CCkb.cert.org3Carnegie Mellon CERT Coordination Center vulnerability notes.
Check Point Researchresearch.checkpoint.com2Weekly threat intelligence bulletins and deep dives.
Chrome Releaseschromereleases.googleblog.com16Google Chrome stable channel updates incl. zero-day fixes.
CISAcisa.gov0US Cybersecurity and Infrastructure Security Agency: alerts, KEV additions and advisories. Blocks some automated clients; test from the production server.
Cisco PSIRTsec.cloudapps.cisco.com25Official Cisco security advisories.
Cisco Securityblogs.cisco.com0Cisco security blog incl. AI Defense / Robust Intelligence research.
Cisco Talosblog.talosintelligence.com3Cisco Talos threat research: campaign write-ups with indicators.
Citizen Labcitizenlab.ca0University of Toronto: spyware and civil-society targeting research.
Claroty Team82claroty.com0OT/ICS and IoT vulnerability research.
Cloud Security Alliancecloudsecurityalliance.org0AI Safety Initiative guidance and frameworks.
Cloudflareblog.cloudflare.com4Internet measurement, DDoS reports and incident post-mortems (filter for security).
Comparitechcomparitech.com0Monthly ransomware round-ups and studies.
Covewarecoveware.com0Quarterly ransomware payment and negotiation statistics.
CrowdStrikecrowdstrike.com0Adversary reports and Counter Adversary Operations.
CyberScoopcyberscoop.com9US government, policy and law-enforcement cybersecurity news.
Cyblecyble.com1Dark-web and ransomware monitoring; high volume.
Dark Readingdarkreading.com17Enterprise security news and analysis.
DataBreaches.netdatabreaches.net10Independent breach and ransomware reporting with direct follow-up.
Datadog Security Labssecuritylabs.datadoghq.com2Cloud security research.
Debian Securitydebian.org10Debian Security Advisories.
Doyensecblog.doyensec.com1Application security research.
Eclypsiumeclypsium.com1Firmware and hardware security research.
Elastic Security Labselastic.co2Malware analysis and detection research.
Embrace The Redembracethered.com0Johann Rehberger: AI red-team research and prompt-injection exploits against real products.
Emsisoftemsisoft.com1Ransomware statistics and decryptor news.
ESET WeLiveSecuritywelivesecurity.com3ESET Research: APT activity reports and malware analysis with strong European coverage.
Europoleuropol.europa.eu10Official newsroom: takedowns, arrests and operations against ransomware and cybercrime groups.
Exploit-DBexploit-db.com0Public exploit availability (OffSec).
Flashpointflashpoint.io2Cybercrime, ransomware and vulnerability intelligence.
Fortinet PSIRTfortiguard.com0Official Fortinet advisories.
Full Disclosureseclists.org0Public disclosure mailing list: unvetted, verify before publishing.
GitHub Security Labsecuritylab.github.com0Open-source vulnerability research and CodeQL.
GitLababout.gitlab.com0Official GitLab security releases.
Google Project Zeroprojectzero.google0Vulnerability research by Google. Its feed carries full post bodies (about 13 MB); raise FEED_MAX_BYTES above 13000000 in .env before enabling.
Google Security Blogsecurity.googleblog.com0Google Online Security Blog incl. AI vulnerability discovery and agent security.
Google Threat Intelligence Groupcloud.google.com0Google / Mandiant threat intelligence: APT reporting and zero-day exploitation trends.
Graham Cluleygrahamcluley.com3Independent security news and commentary.
GreyNoise Labsgreynoise.io0Internet-wide scanning and exploitation telemetry.
Group-IBgroup-ib.com4Cybercrime and APAC/EMEA threat research.
GuidePoint Securityguidepointsecurity.com2GRIT ransomware and cyber-threat reports: group activity, sector and country breakdowns (vendor).
Halcyonhalcyon.ai6Ransomware group profiles and attack round-ups (vendor).
Have I Been Pwnedhaveibeenpwned.com1Troy Hunt: verified breach datasets with record counts and data classes. Data licensed CC BY 4.0; attribution required.
Help Net Securityhelpnetsecurity.com10Information security news and report round-ups.
HIPAA Journalhipaajournal.com10US healthcare breaches built from HHS OCR filings.
Horizon3.aihorizon3.ai0Exploit analysis of high-profile CVEs.
Hornetsecurityhornetsecurity.com1Ransomware attack surveys and monthly threat reports (vendor).
Hudson Rockinfostealers.com3Infostealer-log driven compromises (vendor; verify claims).
Huntresshuntress.com3SMB-focused tradecraft and active exploitation reports.
Identity Theft Resource Centeridtheftcenter.org0Non-profit breach statistics and reports.
Infosecurity Magazineinfosecurity-magazine.com25UK/European cybersecurity news, regulation and breaches.
Intel 471intel471.com0Underground and cybercrime intelligence.
JFrog Security Researchresearch.jfrog.com1Open-source and supply-chain vulnerability research.
JPCERT/CCjpcert.or.jp0Japan Computer Emergency Response Team (English feed).
Kaspersky Securelistsecurelist.com2Kaspersky GReAT research (Russian-headquartered vendor; use for technical facts).
Krebs on Securitykrebsonsecurity.com1Investigative cybercrime journalism by Brian Krebs.
Malwarebytes Labsmalwarebytes.com16Consumer-facing threat news: scams, malvertising, mobile.
MDSecmdsec.co.uk0Red-team tradecraft research.
Microsoft Securitymicrosoft.com2Microsoft Security Blog incl. Microsoft Threat Intelligence and AI security research.
Microsoft Security Response Centermsrc.microsoft.com23Every Microsoft CVE as it is published (Security Update Guide).
NCSC UKncsc.gov.uk2UK National Cyber Security Centre.
NCSC-NLadvisories.ncsc.nl18Dutch National Cyber Security Centre advisories.
oss-securityopenwall.com9Open-source security coordination list.
Outflankoutflank.nl0Red-team tradecraft research.
OWASP GenAI Security Projectgenai.owasp.org0OWASP Top 10 for LLM applications and agentic security guidance.
Palo Alto Networks PSIRTsecurity.paloaltonetworks.com0Official Palo Alto Networks advisories.
Palo Alto Networks Unit 42unit42.paloaltonetworks.com4Threat actor profiles, malware analysis and incident-response trends.
PortSwigger Researchportswigger.net0Web security research.
Praetorianpraetorian.com1Offensive security research.
Proofpointproofpoint.com0E-mail threat landscape, initial-access brokers, TA-numbered actors.
Qualysthreatprotect.qualys.com3Qualys Threat Research Unit vulnerability analysis.
RansomLookransomlook.io11Independent leak-site tracker; cross-check for ransomware.live. Entries are claims, not confirmed incidents.
ransomware.liveransomware.live16Independent leak-site tracker by Julien Mousqueton. Entries are claims made by criminal groups, not confirmed incidents; attribution to ransomware.live expected.
Rapid7rapid7.com3Vulnerability analysis and Metasploit research.
Recorded Futurerecordedfuture.com4Insikt Group research.
SANS Internet Storm Centerisc.sans.edu10Daily handler diaries on observed attacks and honeypot data.
Schneier on Securityschneier.com9Bruce Schneier: security and policy analysis.
Security Affairssecurityaffairs.com10Very high-volume security news blog by Pierluigi Paganini.
SecurityWeeksecurityweek.com10Professional cybersecurity news desk.
SentinelLABSsentinelone.com2SentinelOne research on APT and cybercrime activity.
Simon Willisonsimonwillison.net21Coined "prompt injection"; tracks LLM security incidents and papers (filter for security).
SOCRadarsocradar.io10Dark-web and ransomware group reports.
Sonarsonarsource.com7Code-level vulnerability research in popular open-source applications.
SpecterOpsspecterops.io2Identity and Active Directory attack-path research.
Splunkadvisory.splunk.com0Official Splunk security advisories.
Straikerstraiker.ai2AI agent attack research (STAR Labs).
Synacktivsynacktiv.com25French offensive security research.
TechCrunchtechcrunch.com8Technology press; breaks and confirms large data breaches.
Tenabletenable.com2Patch Tuesday breakdowns and CVE FAQs.
The DFIR Reportthedfirreport.com0Independent, detailed real-intrusion case studies with TTPs.
The Hacker Newsthehackernews.com25High-volume daily cybersecurity news.
The Recordtherecord.media5Independent newsroom funded by Recorded Future; cybercrime, government and policy.
The Registertheregister.com24UK technology press with a strong security desk.
ThreatDownthreatdown.com0Malwarebytes business unit: monthly ransomware reviews and group analyses.
Trail of Bitsblog.trailofbits.com2Applied research: cryptography, compilers, AI/ML security.
Trend Micro Researchtrendmicro.com0Trend Micro threat research.
Ubuntu Securityubuntu.com10Ubuntu Security Notices.
UpGuardupguard.com0Vendor research on exposed data and misconfigured storage.
Volexityvolexity.com0Zero-day exploitation and APT disclosures; low volume, high impact.
watchTowr Labslabs.watchtowr.com0Vulnerability research on edge devices with strong write-ups.
Wiredwired.com9Long-form security features.
Wizwiz.io3Cloud and AI-infrastructure vulnerability research (filter research from product news).
Wordfencewordfence.com7WordPress ecosystem vulnerabilities.
Zero Day Initiativezerodayinitiative.com26Trend Micro ZDI coordinated disclosures.
Zscaler ThreatLabzzscaler.com1Zscaler threat research.

Publishers who would like their content removed or attributed differently can use the takedown process.