Cyber Security Useful Links

A curated, mobile-friendly starting point for staying updated and improving your sources over time.

Global Cyber Security News
CybersecurityNews Broad cybersecurity news and incident roundup. for quick daily scanning.
The Hacker News Fast, popular coverage of threats, vulnerabilities, and infosec news. with practical takeaways.
GBHackers Security news and vulnerability writeups with a practical angle. with practical takeaways.
BleepingComputer Incident-focused reporting with strong malware and ransomware coverage. with practical takeaways.
Dark Reading Industry news and analysis for security practitioners. with practical takeaways.
SecurityWeek Security news, vulnerabilities, and research coverage. for quick daily scanning.
The Register - Security Security news with an opinionated, skeptical tone. with practical takeaways.
CyberScoop Cyber policy and industry news, often US-focused. with practical takeaways.
The Record Incident reporting and cybersecurity news from Recorded Future. with practical takeaways.
Independent Researchers and Thought Leaders
Krebs on Security Investigative reporting on cybercrime, breaches, and ecosystem failures. with practical takeaways.
Troy Hunt Practical security commentary and breach awareness. for quick daily scanning.
Schneier on Security Security analysis and perspective on cryptography and policy. with practical takeaways.
Graham Cluley Accessible security news and commentary for practitioners. with practical takeaways.
Threat Research from Security Vendors
Microsoft Security Blog - Threat Intelligence Threat intelligence, investigations, and guidance from Microsoft. with practical takeaways.
Google Security Blog Security engineering updates, incident response, and research. with practical takeaways.
Palo Alto Networks Unit 42 Threat research, malware reports, and IR insights. with practical takeaways.
Fortinet - Threat Research Threat analysis and research updates from FortiGuard Labs. with practical takeaways.
Check Point Research Threat intelligence, campaigns, and vulnerability analysis. for quick daily scanning.
Cisco Talos Intelligence Threat intel, malware analysis, and advisories. for quick daily scanning.
Sophos News - Threat Research Threat research and malware analysis from Sophos. with practical takeaways.
Wiz - Security Blog Cloud security research and real-world attack techniques. with practical takeaways.
Cybereason Blog Threat research and adversary-focused analysis. for quick daily scanning.
Rapid7 - Research Vulnerability research, threat intel, and incident analysis. with practical takeaways.
CrowdStrike Blog Threat intelligence, adversary reports, and detection insights. with practical takeaways.
Government Alerts and Advisories
Israel National Cyber Directorate Official Israeli National Cyber Directorate page on gov.il, in Hebrew.
INCD Publications and Alerts Direct feed of Israeli National Cyber Directorate alerts and publications, in Hebrew.
CISA - Alerts US CISA official alerts and advisories. for quick daily scanning.
CISA - KEV Catalog Known exploited vulnerabilities catalog, prioritized for action. with practical takeaways.
NCSC UK - News UK NCSC news and guidance updates. for quick daily scanning.
CERT-EU - Security Advisories EU CERT security advisories and updates. for quick daily scanning.
Vulnerability Research and Databases
CVE.org Official CVE Program site and identifiers. for quick daily scanning.
NVD NIST vulnerability database and CVE details. for quick daily scanning.
CVE Details Search, statistics, and vendor/product views for CVEs. with practical takeaways.
Exploit-DB Public exploit archive and PoC references. for quick daily scanning.
GitHub Advisory Database Advisories across ecosystems and open source projects. with practical takeaways.
Google Project Zero High-quality vulnerability research and bug hunting insights. with practical takeaways.
Annual Reports and Research
Verizon DBIR Annual breach statistics and patterns based on real incidents. with practical takeaways.
Mandiant M-Trends Incident response trends and attacker tactics observed globally. with practical takeaways.
Microsoft Digital Defense Report Microsoft's view of the threat landscape and defensive guidance. with practical takeaways.
CrowdStrike Global Threat Report Threat trends and adversary insights from CrowdStrike. with practical takeaways.
Digital Magazines
Digital Whisper Israeli digital magazine in Hebrew with hands-on security articles.
Cyber Defense Magazine Industry magazine content, good for trend scanning. with practical takeaways.
CISO MAG CISO-focused articles, interviews, and security leadership topics. with practical takeaways.
Community - Reddit and Q&A
r/netsec Security news, research, and technical discussions. for quick daily scanning.
r/AskNetsec Q&A and career or practical security questions. with practical takeaways.
r/cybersecurity General cybersecurity discussions and news. for quick daily scanning.
r/Information_Security Broad information security topics and community posts. with practical takeaways.
Information Security Stack Exchange High-signal technical Q&A with moderation and accepted answers. with practical takeaways.
Open Source Security Tools
Velociraptor Endpoint visibility and DFIR at scale. for quick daily scanning.
ScoutSuite Multi-cloud security auditing tool. for quick daily scanning.
CISA ScubaGear Microsoft 365 secure configuration checks and baselines. with practical takeaways.
Prowler Cloud security posture assessment. for quick daily scanning.
Trivy Container, dependency, and IaC vulnerability scanning. for quick daily scanning.
Sigma Generic detection rules format across SIEM platforms. with practical takeaways.
YARA Rule-based pattern matching for malware research. for quick daily scanning.
Atomic Red Team Adversary emulation tests mapped to ATT&CK. for quick daily scanning.
Frameworks and References
MITRE ATT&CK Tactics and techniques knowledge base. for quick daily scanning.
OWASP Top 10 Top web application security risks. for quick daily scanning.
NIST Cybersecurity Framework Framework for managing and improving cybersecurity risk. with practical takeaways.
CIS Controls v8 Prioritized set of security controls. for quick daily scanning.
SANS Internet Storm Center Daily observations and diary posts on current activity. with practical takeaways.