<<Page Under Construction 😉 >>
What does RSS even mean? RSS stands for “Really Simple Syndication”, which is a standardized system for the distribution of content from an online publisher to Internet users.
What this really means is that below, you’ll find some news feeds that I’ve chosen to follow on this page. I’m not responsible for the content, but I have tried to focus the sources to be interesting to Cybersecurity and Information Security professionals. Or, anyone who is interested in those topics. Or, anyone at all who would like to read them.
If you’re the author of a feed, or have a suggestion on one I should add to this page, please drop me a note!
General Cyber News Feeds
Forbes – Cybersecurity News
ZDNet – Security News
KrebsOnSecurity – In-depth Security News and Investigation
CSO Online, from IDG – Hottest Topics on Cyber and Security
The Hacker News – Cybersecurity News and Analysis
The Guardian – Data and Security
Threatpost – First Stop for Security News
Dark Reading – Connecting the Information and Security Community
SANS Institute – Security Awareness Tip of the Day
Help Net Security – Daily infosec news with a focus on enterprise security
IT Security Central – User Activity Monitoring | DLP | Employee Productivity
TechRepublic – Straight up Security
WeLiveSecurity – News, views, and insight from the ESET security community
Schneier on Security – A blog covering security and security technology
Lohrmann on Cybersecurity – Government Technology RSS Feed
Forbes – Cybersecurity News
- Feed has no items.
ZDNet – Security News
- Businesses must reinvent their processes and workforce to scale agentic AI adoption
on 2026-08-24Only 15% of US-based organizations have reached scaled, orchestrated, multi-agent adoption, according to the latest Deloitte research.
- The best early Labor Day deals to shop now: Save on TVs, Apple devices, and moreon 2026-08-24
Labor Day is just around the corner, and there are already some great deals available at Amazon, Best Buy, Walmart, and more.
- This Blink security camera can last up to 2 years on one charge - and it's on saleon 2026-08-24
The Blink Outdoor 2K+ security camera and Blink Battery Doorbell 2K+ are on sale in this bundle deal, but not for long.
- The $649 Fairphone 6+ is the Goldilocks of Android phones - and it's available in the US nowon 2026-08-24
Fairphone is finally selling its latest model in the US. The $649 handset has 11 swappable parts, and a replacement battery is only $40.
- I tried Meta's new free vibe coding app to make my own games, and it was surprisingly funon 2026-08-24
You can now code your own mini games and 'gizmos' with no experience. Creating is just half the fun.
- The best early Labor Day Garmin watch deals: Gear up for marathon training for lesson 2026-08-24
Training for a fall marathon? Snag one of these Garmin running watches we've tested at a discount.
Krebs On Security – In-depth Security News and Investigation
- Who’s Tracking You? Use This New Service to Find Out
on 2026-08-14It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditionally much of it has remained walled away in the hands of large advertising platforms. Not anymore: A powerful […]
- Microsoft Plugs Nearly 400 Security Holes
on 2026-08-11Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.
- Canadian Man Pleads Guilty in Snowflake Extortions
on 2026-08-06A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data storage provider Snowflake. Connor Riley Moucka, of Kitchener, Ontario, also admitted to stealing call and text […]
- Read This Before You Buy That TV Streaming Stick
on 2026-07-30Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user's Internet connection out to strangers. But a groundbreaking new analysis finds these devices also routinely spoof themselves as mobile phones […]
- LG to Ban Residential Proxies from Smart TV Apps
on 2026-07-22The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG's webOS store allow unknown […]
- Microsoft Patches a Record 570 Security Flaws
on 2026-07-14Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by […]
CSO Online, from IDG – Hottest Topics on Cyber and Security
- Feed has no items.
The Hacker News – Cybersecurity News and Analysis
- Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt
on 2026-08-24 by info@thehackernews.com (The Hacker News)If your developers are using AI coding tools, you are probably already seeing the upside: faster development, more code, and less time spent on routine work. The harder part is what comes after. AI can also introduce open-source packages at a pace your security team was never built to handle. More dependencies mean more […]
- Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
on 2026-08-24 by info@thehackernews.com (The Hacker News)Cybersecurity researchers have found that several websites are still actively distributing a malware family known as Weedhack to gamers by masquerading as Minecraft clients. McAfee Labs said it detected and blocked more than 6,300 attempts to access malicious sites, adding that it found lookalike gaming websites designed […]
- ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
on 2026-08-24 by info@thehackernews.com (The Hacker News)A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder than they actually are. […]
- WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
on 2026-08-24 by info@thehackernews.com (The Hacker News)Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that's used to deliver next-stage payloads and likely sell access to ransomware groups. According to findings from Gen Digital, WordlistLoader is being used to deliver Amatera Stealer (aka ACR Stealer or AcridRain […]
- Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
on 2026-08-24 by info@thehackernews.com (The Hacker News)Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset. The vulnerability, assigned the CVE identifier CVE-2026-18963, […]
- Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor
on 2026-08-24 by info@thehackernews.com (The Hacker News)Cybersecurity researchers have flagged a cyber espionage campaign targeting Myanmar that uses graduation ceremony invitation lures to deliver a Go backdoor called QUICAgent. The campaign, codenamed Operation QUICSILVER, has been found to target government and information technology sectors, per Seqrite Labs. The activity […]
The Guardian – Data and Security
- UK’s state investments agency hit by data breach
on 2026-08-02 by Kalyeena Makortoff Banking correspondentSecurity lapse leaves sensitive information and contact details of 51 government officials exposed for 40 hoursThe public body in charge of the UK’s state investments has been pushed to improve its internal security after a data breach left “high-level management information” publicly accessible for nearly two […]
- Hackers steal sensitive data from UK Department for Education and police
on 2026-07-29 by Dan Milmo and Vikram DoddDetails of parents and staff, including email addresses and phone numbers, are among data taken by cybercriminalsThe Department for Education and a police database have been targeted by a cyber-attack, exposing more than 740,000 pieces of data.Details of government officials, senior school leaders, university staff, police […]
- Personal and banking details among customer data stolen in Origin Energy hack
on 2026-07-23 by Luca IttimaniHackers access Australian customers’ names, addresses, dates of birth, phone numbers and some bank account details, company saysFollow our Australia news live blog for latest updatesGet our breaking news email, free app or daily news podcastOrigin Energy customers’ addresses, phone numbers and partial bank account data […]
- ‘Keys to the kingdom’: hackers who gained access to heart of London transport network jailed
on 2026-07-16 by Dan Milmo and Joe PinnerThalha Jubair, 20, and Owen Flowers, 19, sentenced to five and a half years each for cyber-attack that cost Transport for London £39mThe data of millions of commuters was stolen, Londoners were left out of pocket and 27,000 Transport for London staff were forced to reset their passwords.Over four days in 2024 a pair of […]
- Australian patients’ medical records could be sold on dark web after clinics’ data breach
on 2026-07-16 by Kat Wong‘Malicious actor’ obtains sensitive data including Medicare numbers, treatment details and pathology results in cyber-attack on Partnered HealthFollow our Australia news live blog for latest updatesGet our breaking news email, free app or daily news podcastAustralians’ medical records and patient information could be […]
- AI models capable of devastating attacks on governments and business months away, rare Five Eyes statement warns
on 2026-06-22 by Sarah Basford CanalesSignal agencies in Australia, the US, the UK, New Zealand and Canada sound alarm after Trump blocks foreign nationals from Anthropic’s Fable AI modelPowerful AI models capable of devastating new cyber attacks on governments and businesses are mere months away, intelligence agencies for the Five Eyes have warned in a rare […]
Threatpost – First Stop for Security News
- Student Loan Breach Exposes 2.5M Records
on 2022-08-31 by Nate Nelson2.5 million people were affected, in a breach that could spell more trouble down the line.
- Watering Hole Attacks Push ScanBox Keylogger
on 2022-08-30 by Nate NelsonResearchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.
- Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
on 2022-08-29 by Nate NelsonOver 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system.
- Ransomware Attacks are on the Rise
on 2022-08-26 by Nate NelsonLockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group.
- Cybercriminals Are Selling Access to Chinese Surveillance Cameras
on 2022-08-25 by Nate NelsonTens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed.
- Twitter Whistleblower Complaint: The TL;DR Version
on 2022-08-24 by ThreatpostTwitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk.
Dark Reading – Connecting the Information and Security Community
- Feed has no items.
SANS Institute – Security Awareness Tip of the Day
- Feed has no items.
Help Net Security – Daily infosec news with a focus on enterprise security
- New TCG guidance gives buyers a way to test PQC-ready TPM claimson 2026-08-25 by Help Net Security
The Trusted Computing Group has published requirements that spell out what a Trusted Platform Module has to do before anyone calls it quantum-safe. A TPM is the chip that holds a machine’s keys and records measurements of its firmware, so the platform can later prove it has not been altered. Buyers can now ask a vendor for evidence against a […]
- Cybersecurity jobs available right now: August 25, 2026on 2026-08-25 by Sinisa Markovic
Specialist Compliance Security AT&T | USA | On-site – View job details As a Specialist Compliance Security, you will serve as AT&T’s liaison for law enforcement, first responders, and emergency personnel nationwide. Respond 24×7 to emergency requests, process subpoenas, warrants, and court orders, and provide authorized subscriber, […]
- Suspected Iran-linked attack knocked UK power plant offline for dayson 2026-08-24 by Zeljka Zorz
News that suspected Iranian hackers caused the shutdown of a British power plant broke over the weekend, raising the question of whether UK’s power grid and, indeed, the country’s critical infrastructure can fend off destructive cyber attacks. According to sources of UK news outlet The Telegraph, the power plant was offline for four days in […]
- Cybersecurity job ads demanding AI skills double in a yearon 2026-08-24 by Sinisa Markovic
Job postings asking for AI skills in cybersecurity have doubled in a single year in G7 countries according to new research from the Cisco-founded AI Workforce Consortium. Analysis from recruitment firms Cornerstone and Indeed covering 24 months, from April 2024 to March 2026, spans G7 markets. It found that 28.5% of cybersecurity job postings […]
- CISA’s logging guidance works beyond governmenton 2026-08-24 by Zeljka Zorz
The US Cybersecurity and Infrastructure Security Agency (CISA) wants federal agencies to (re)shape their logging strategy around one question: when an attack hits, can you actually use the logs you’ve collected to catch it and reconstruct what happened afterward? The Logging Reference Architecture (LRA), released in August 2026, is meant to help […]
- Android car head units infected with proxy botnet malware through built-in software updaterson 2026-08-24 by Sinisa Markovic
A newly discovered Android malware, distributed through the built-in updaters in affected Android-based car head units, turns infected devices into ad-fraud tools and nodes in a proxy botnet, Kaspersky has found. According to the researchers, it’s the first documented case of malware found on a car head unit with an infection chain specific to […]
IT Security Central – User Activity Monitoring | DLP | Employee Productivity
- Feed has no items.
TechRepublic – Straight up Security
- Apollo Confirms Data Breach Amid Cyberattacks Targeting Financial Firmson 2026-08-24 by Joseph Ofonagoro
Apollo Global Management confirmed a social-engineering breach exposing sensitive personal data amid a wider hacking campaign targeting financial firms. The post Apollo Confirms Data Breach Amid Cyberattacks Targeting Financial Firms appeared first on TechRepublic.
- Microsoft Exchange Server SE CU1 Delayed Amid AI-Assisted Security Reviewson 2026-08-24 by TechRepublic Staff
Microsoft has yet to set a firm Exchange Server SE CU1 release date as engineers work through AI-assisted security findings and ongoing patch releases. The post Microsoft Exchange Server SE CU1 Delayed Amid AI-Assisted Security Reviews appeared first on TechRepublic.
- ChatGPT for Teens Adds New Safeguards — but Safety Gaps Remainon 2026-08-24 by TechRepublic Staff
ChatGPT for Teens adds stronger protections for users ages 13 to 17, but parents still face limits around monitoring, age prediction, and AI safety. The post ChatGPT for Teens Adds New Safeguards — but Safety Gaps Remain appeared first on TechRepublic.
- Google Tightens Android Sideloading: Unverified Apps Now Face a 24-Hour Waiton 2026-08-21 by Aminu Abdullahi
Google’s new Android verification flow adds a 24-hour wait for apps from unverified developers as broader identity checks approach. The post Google Tightens Android Sideloading: Unverified Apps Now Face a 24-Hour Wait appeared first on TechRepublic.
- ICE Warns Employees Against Meta Smart Glasseson 2026-08-20 by Joseph Ofonagoro
ICE warned employees against using Meta smart glasses on duty as DHS seeks $7.5 million to develop biometric-enabled prototypes for field agents. The post ICE Warns Employees Against Meta Smart Glasses appeared first on TechRepublic.
- Windows 11 24H2 Home and Pro Support Ends Oct. 13: What Users Should Doon 2026-08-20 by Aminu Abdullahi
Windows 11 24H2 Home and Pro support ends Oct. 13, 2026. Here’s what users and IT teams should know about upgrading to Windows 11 25H2. The post Windows 11 24H2 Home and Pro Support Ends Oct. 13: What Users Should Do appeared first on TechRepublic.
WeLiveSecurity – News, views, and insight from the ESET security community
- How QR-code phishing can slip past corporate security measureson 2026-08-17
Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap.
- Black Hat USA 2026: Will vulnerability discovery eventually decline in the AI era?on 2026-08-13
And will today’s surge in AI-driven vulnerability discovery eventually make tomorrow’s software safer?
- Black Hat USA 2026: What the Hugging Face hack tells us about human responsibilityon 2026-08-13
The incident involving OpenAI models shows that autonomous hacks make human oversight more important, not less
- Black Hat USA 2026: AI is racing ahead of cybersecurity controlson 2026-08-12
AI took center stage, but the clearest lesson was less about what AI can do than about who is accountable when something goes wrong
- Are AI tutors safe for your kids?on 2026-08-10
AI tutors can offer useful support, but their quality and safeguards vary widely. Here’s what parents should check before handing one to a child.
- This month in security with Tony Anscombe – July 2026 editionon 2026-07-31
OpenAI models going rogue, the first documented agentic ransomware operation, and an emergent AI-driven supply chain threat made for a packed July roundup
Schneier on Security – A blog covering security and security technology
- Criminal Deception in Silicon Valleyon 2026-08-24
Interesting paper: Abstract: With entrepreneurial fraud cases on the rise, we investigate how entrepreneurs carry out criminal deception, employing deceptive means to defraud audiences. Analyzing court data from Silicon Valley ventures and their founders prosecuted for fraud between 2000 and 2023, our findings reveal that entrepreneurs carry out […]
- Friday Squid Blogging: Neon Flying Squidon 2026-08-21
The neon flying squid can fly in formation. The shoal of about 100 squid rose unexpectedly from a patch of the Pacific Ocean around 370 miles from Tokyo and glided near the boat for about 30 metres. The astonished researchers were the first to capture photographs of such a thing, which looked like the early stages of an alien invasion. They were […]
- AI Is Learning to Write Genetic Codeon 2026-08-21
This sort of research is both exciting and terrifying: The two models in question were told to generate complete genomes for a viable bacteriophage—a type of virus able to infect and replicate itself inside bacteria, destroying them from the inside. Using an existing bacteriophage as an example—ΦX174 (pronounced “fie-ex-1-7-4”), known for […]
- More Incidents of AIs Going Rogue in Cybersecurity Challengeson 2026-08-21
The AI Security Institute has a new report of AI systems engaging in “unsanctioned behavior”—what I have been calling “genie behavior—while being tested on their cybersecurity capabilities. The incident stemmed from a single evaluation where agents were given a task of solving a cyber security challenge. We ran this challenge 122 times […]
- Detailed Timeline of OpenAI’s Cyberattack on Hugging Faceon 2026-08-20
OpenAI presented details of its AI’s model’s cyberattack on Hugging Face at Black Hat last week. Simon Willison details the timeline. It’s really interesting to read through—and really impressive cyberoffense work.
- Police Are Hiding Their Use of Flock Surveillance Camerason 2026-08-20
A usage policy for Flock license plate reader cameras tells police not to talk about the cameras: When cops use Flock to arrest someone in Wapello County, Iowa, they don’t want them to know. A usage policy for the automated license plate reader cameras in the county tells police, in no uncertain terms, to keep them a secret: “DO NOT MENTION […]
Lohrmann on Cybersecurity – Government Technology RSS Feed
- Slopsquatting in the Supply Chain: Weaponized AI Hallucinationson 2026-08-23
In this interview with Snyk CTO Manoj Nair, we examine how attackers weaponize recurring LLM package hallucinations before developers even hit "run."
- Hacking Back Is Back: White House to Enable Cyber Privateerson 2026-08-17
In an Aug. 12 National Security Presidential Memorandum, President Donald Trump set out guidance for more private-sector action in global cyber battles. Here’s the rest of the story.
- Innovation or Negligence? What Recent AI Hacks Mean for the Future of Cybersecurityon 2026-08-09
Wonderful capability or ethical failure? Decoding the stories coming out of Black Hat USA and the unsanctioned AI cyber attacks of 2026.
- How New Laws Will Help Guard Seniors Against Scamson 2026-08-02
In a rare show of bipartisan agreement, both the U.S. House and the Senate have voted to approve bills aimed at battling fraud — especially scams aimed at older adults.
- Virtual Integrity Revisited: 7 Habits for the AI Ageon 2026-07-26
In Part 3 of this exploration of AI ethics, we bring this topic closer to home: How can we use the power of AI to strengthen human trust and character?
- From Principles to Practice: Actionable Blueprints for Ethical AIon 2026-07-19
Part 2 of this series on ethical AI looks at operationalizing trust with clear prompting framework and robust data governance for your public- or private-sector organization.
#StayVigilant
#StaySafe
#LookOutForEachOther