5 ms·

Can some folks in the cybersecurity arena recommend some good email newsletters, websites, blogs, accounts, etc to follow to keep up in the space?

xnorswap 2y ago
I'm not in cyber but "Risky Business" ( https://risky.biz/ https://risky.biz/ ) is a good podcast to keep up to date. They always have a lot of outgoing links in their show-notes that should get you started with the rest.
Sytten 2y ago
You have different areas of security. Sadly our space is full of grifters and wanna be security "experts". For a very technical security podcast I recommend Critical Thinking Bug Bounty [1]. [1] https://www.criticalthinkingpodcast.io/ https://www.criticalthinkingpodcast.io/
Carbonade 2y ago
This blog is nice https://blog.badsectorlabs.com/ https://blog.badsectorlabs.com/
alligatorplum 2y ago
I have slowly been aggregating various blogs in the cybersec realm at https://securityblogs.xyz/ https://securityblogs.xyz/ I add new blogs as I run into them on twitter/reddit/HN/etc
- lormayna 2y ago
  Do you have an OPML feed for that?
  - alligatorplum 2y ago
    I do not, but I can add that later today.
    - lormayna 2y ago
      That's would be great :)
      - alligatorplum 2y ago
        Done. Give it a try!
        lormayna 2y ago
        It works! Thank you :)
InfoSecErik 2y ago
https://tldrsec.com/ https://tldrsec.com/
ziddoap 2y ago
Any specific areas of interest? Some mailing lists at [1], like oss-security & kernel-hardening. CISA (Cybersecurity and Infrastructure Security Agency) [2] has a few different areas they report on. Mozilla has the dev-security-policy mailing list for all things PKI (public key infrastructure) [3], and a few other lists as well. There's the Full Disclosure [4] mailing list for vulnerabilities/exploits, etc. Quite a few others at [5], though sadly many are no longer active. [1] https://openwall.com/lists/ https://openwall.com/lists/ [2] https://www.cisa.gov/about/contact-us/subscribe-updates-cisa https://www.cisa.gov/about/contact-us/subscribe-updates-cisa [3] https://groups.google.com/a/mozilla.org/g/dev-security-policy https://groups.google.com/a/mozilla.org/g/dev-security-polic... [4] https://seclists.org/fulldisclosure/ https://seclists.org/fulldisclosure/ [5] https://seclists.org/ https://seclists.org/
danfoxley 2y ago
Podcast https://isc.sans.edu/podcast.html https://isc.sans.edu/podcast.html

xnorswap 2y ago

I'm not in cyber but "Risky Business" ( https://risky.biz/ https://risky.biz/ ) is a good podcast to keep up to date. They always have a lot of outgoing links in their show-notes that should get you started with the rest.

Sytten 2y ago

You have different areas of security. Sadly our space is full of grifters and wanna be security "experts". For a very technical security podcast I recommend Critical Thinking Bug Bounty [1]. [1] https://www.criticalthinkingpodcast.io/ https://www.criticalthinkingpodcast.io/

Carbonade 2y ago

This blog is nice https://blog.badsectorlabs.com/ https://blog.badsectorlabs.com/

alligatorplum 2y ago

I have slowly been aggregating various blogs in the cybersec realm at https://securityblogs.xyz/ https://securityblogs.xyz/ I add new blogs as I run into them on twitter/reddit/HN/etc

lormayna 2y ago
Do you have an OPML feed for that?
- alligatorplum 2y ago
  I do not, but I can add that later today.
  - lormayna 2y ago
    That's would be great :)
    - alligatorplum 2y ago
      Done. Give it a try!
      - lormayna 2y ago
        It works! Thank you :)

InfoSecErik 2y ago

https://tldrsec.com/ https://tldrsec.com/

ziddoap 2y ago

Any specific areas of interest? Some mailing lists at [1], like oss-security & kernel-hardening. CISA (Cybersecurity and Infrastructure Security Agency) [2] has a few different areas they report on. Mozilla has the dev-security-policy mailing list for all things PKI (public key infrastructure) [3], and a few other lists as well. There's the Full Disclosure [4] mailing list for vulnerabilities/exploits, etc. Quite a few others at [5], though sadly many are no longer active. [1] https://openwall.com/lists/ https://openwall.com/lists/ [2] https://www.cisa.gov/about/contact-us/subscribe-updates-cisa https://www.cisa.gov/about/contact-us/subscribe-updates-cisa [3] https://groups.google.com/a/mozilla.org/g/dev-security-policy https://groups.google.com/a/mozilla.org/g/dev-security-polic... [4] https://seclists.org/fulldisclosure/ https://seclists.org/fulldisclosure/ [5] https://seclists.org/ https://seclists.org/

danfoxley 2y ago

Podcast https://isc.sans.edu/podcast.html https://isc.sans.edu/podcast.html