<<Page Under Construction 😉 >>
What does RSS even mean? RSS stands for “Really Simple Syndication”, which is a standardized system for the distribution of content from an online publisher to Internet users.
What this really means is that below, you’ll find some news feeds that I’ve chosen to follow on this page. I’m not responsible for the content, but I have tried to focus the sources to be interesting to Cybersecurity and Information Security professionals. Or, anyone who is interested in those topics. Or, anyone at all who would like to read them.
If you’re the author of a feed, or have a suggestion on one I should add to this page, please drop me a note!
General Cyber News Feeds
Forbes – Cybersecurity News
ZDNet – Security News
KrebsOnSecurity – In-depth Security News and Investigation
CSO Online, from IDG – Hottest Topics on Cyber and Security
The Hacker News – Cybersecurity News and Analysis
The Guardian – Data and Security
Threatpost – First Stop for Security News
Dark Reading – Connecting the Information and Security Community
SANS Institute – Security Awareness Tip of the Day
Help Net Security – Daily infosec news with a focus on enterprise security
IT Security Central – User Activity Monitoring | DLP | Employee Productivity
TechRepublic – Straight up Security
WeLiveSecurity – News, views, and insight from the ESET security community
Schneier on Security – A blog covering security and security technology
Lohrmann on Cybersecurity – Government Technology RSS Feed
Forbes – Cybersecurity News
- Feed has no items.
ZDNet – Security News
- Android lets you ‘bubble’ apps for easy access now – how it works
on 2026-10-23Keep your most-used apps accessible with this new feature.
- PHP2Shell: Haven’t patched yet? Take these steps now to mitigate
on 2026-10-23The PHP Project provides instructions to stop further RCE exploits in limited settings.
- Amazon’s Kindle Unlimited is now Kindle+, and the 2 big changes include AI audiobooks
on 2026-10-22Unlike narrated audiobooks from Audible and other providers, the audiobooks created with Virtual Voice in Kindle+ will instead be narrated by AI.
- The latest PowerToys gives your mouse 2 new tricks for free – how to use them
on 2026-10-22PowerToys is one of my favorite free Windows utilities. With more than 30 tools, it offers something for everyone from beginners to power users. Here’s what’s new for mousing.
- GridCraft is the open-source Excel clone for Linux I’ve been waiting for
on 2026-10-22If spreadsheets are your thing, but Microsoft Office isn’t, you might want to give the open-source clone, GridCraft, a try.
- Not impressed with Google Maps? Make Waze your default on Pixel – here’s how
on 2026-10-22If you’re tired of Google Maps failing to get you where you need to go, set Waze as the default on your Pixel. I’ve finally figured out how.
Krebs On Security – In-depth Security News and Investigation
- Widespread PHP Flaw May Cause Many Site Outages Today
on 2026-10-21Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these critical bugs are already being […]
- Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
on 2026-10-19U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the […]
- U.K. Sanctions Cryptomus for RU Money Laundering
on 2026-10-14The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions.
- Microsoft Patches More Than 1,400 Security Flaws
on 2026-10-13Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond.
- FBI Arrests Executive at Ransomware Negotiation Firm
on 2026-10-10Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity.
- ShinyHunters Extorted Boeing Spin-off Prior to Arrests
on 2026-10-07A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle "Rey," was detained as ShinyHunters was in the process of […]
CSO Online, from IDG – Hottest Topics on Cyber and Security
- Feed has no items.
The Hacker News – Cybersecurity News and Analysis
- OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
on 2026-10-25 by info@thehackernews.com (The Hacker News)OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models. "Based on the current state of alignment research, monitoring systems, and the security of internet infrastructure, we […]
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
on 2026-10-24 by info@thehackernews.com (The Hacker News)A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Tracked as CVE-2026-111497, the flaw allows crafted compressed data to overwrite past the end of a […]
- Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
on 2026-10-24 by info@thehackernews.com (The Hacker News)LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. "On May 27, 2026, a configuration file was committed to the public LiteLLM-Labs/lite-harness […]
- Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
on 2026-10-24 by info@thehackernews.com (The Hacker News)Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on their activity on other connected Google services. "You may choose to allow certain Google services, including services like […]
- Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet
on 2026-10-24 by info@thehackernews.com (The Hacker News)Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have allowed an outsider to take over the machine. The updater belongs to Time4Popcorn, an abandoned copy of Popcorn Time, a free […]
- CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
on 2026-10-24 by info@thehackernews.com (The Hacker News)The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild. The critical-severity vulnerabilities […]
The Guardian – Data and Security
- Feed has no items.
Threatpost – First Stop for Security News
- Student Loan Breach Exposes 2.5M Records
on 2022-08-31 by Nate Nelson2.5 million people were affected, in a breach that could spell more trouble down the line.
- Watering Hole Attacks Push ScanBox Keylogger
on 2022-08-30 by Nate NelsonResearchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.
- Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
on 2022-08-29 by Nate NelsonOver 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system.
- Ransomware Attacks are on the Rise
on 2022-08-26 by Nate NelsonLockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group.
- Cybercriminals Are Selling Access to Chinese Surveillance Cameras
on 2022-08-25 by Nate NelsonTens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed.
- Twitter Whistleblower Complaint: The TL;DR Version
on 2022-08-24 by ThreatpostTwitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk.
Dark Reading – Connecting the Information and Security Community
- Feed has no items.
SANS Institute – Security Awareness Tip of the Day
- Feed has no items.
Help Net Security – Daily infosec news with a focus on enterprise security
- UK proposes 14-year jail terms for subsea cable saboteurs
on 2026-10-23 by Sinisa MarkovicDamaging a cable on the seabed off the UK coast could soon cost someone 14 years of their life behind bars, under plans the British government published this week. The proposal comes from a White Paper by the Department for Digital, Culture, Media and Sport that would update laws protecting undersea cables and pipelines, some of which date back […]
- Microsoft 365 accounts compromised at 79 organizations, no passwords neededon 2026-10-23 by Sinisa Markovic
An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from seeing parts of their own mail, according to Huntress. The researchers tracked the campaign between July 14 and September 22, 2026, counting 497 successful sign-ins and more […]
- Capcom data breach exposes 11.7 million account recordson 2026-10-23 by Sinisa Markovic
Players who signed up for Capcom’s online account service may want to look twice at emails that seem to come from the company. The company has disclosed that a third party gained unauthorized access to customer information linked to CAPCOM ID, the account people use to sign in to the company’s web services and to play some of its games online. […]
- Hackers hijack exposed AI models to launch cyberattacks at victims’ expenseon 2026-10-23 by Sinisa Markovic
An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model’s owner pays for the computing power. Symantec captured the agent’s instruction set this summer through a honeypot posing as an unprotected AI service, researchers Priti More and Susmit Yenkar wrote. […]
- Google opens its cloud to rival OpenAI, promises business data won’t train modelson 2026-10-23 by Anamarija Pogorelec
Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch includes GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna. Google positions them as options for demanding work, lower-cost professional tasks and everyday use that requires fast responses. More choice, one bill Businesses […]
- Drone program compliance: What a CTO says most agencies get wrongon 2026-10-23 by Mirko Zorz
In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors expect from a public safety drone program, and where most programs fall short. He covers chain of custody for flight logs and video, how to publish drone activity without exposing sensitive operations, and common […]
IT Security Central – User Activity Monitoring | DLP | Employee Productivity
- Feed has no items.
TechRepublic – Straight up Security
- Zoomtopia 2026: Zoom Introduces AI Agents, New Security Controlson 2026-10-22 by Zeus Kerravala
Zoom unveils AI agents and its Unified Context Layer at Zoomtopia 2026. Learn how its new automation and security tools could affect IT teams. The post Zoomtopia 2026: Zoom Introduces AI Agents, New Security Controls appeared first on TechRepublic.
- ChatGPT Locked Chats Explained: How to Use It and What to Knowon 2026-10-22 by Joseph Ofonagoro
ChatGPT now lets users lock private conversations with a PIN or biometrics. Learn how Locked Chats works, its limitations, and the risks of resetting a PIN. The post ChatGPT Locked Chats Explained: How to Use It and What to Know appeared first on TechRepublic.
- How to choose the right CTI tools for your businesson 2026-10-22 by Cedric Pernet
Get to know the ins and outs of cyber threat intelligence and how your company's security can be can be strengthened by putting threat intelligence into place. The post How to choose the right CTI tools for your business appeared first on TechRepublic.
- Chrome Adds Suspicious Site Warnings and ClickFix Protectionon 2026-10-22 by TechRepublic Staff
Google Chrome introduces suspicious-site warnings and AI-powered ClickFix detection, with both new defenses tied to Enhanced Protection mode. The post Chrome Adds Suspicious Site Warnings and ClickFix Protection appeared first on TechRepublic.
- EU Website Outages Follow Critical PHP Flaws: What IT Teams Should Knowon 2026-10-21 by AI Cerrudo
Critical PHP flaws forced European government websites offline. Learn which PHP versions need patches and what IT teams should do. The post EU Website Outages Follow Critical PHP Flaws: What IT Teams Should Know appeared first on TechRepublic.
- Amazon Bee Frontier and Bee Eclipse Raise Workplace Consent Concernson 2026-10-21 by TechRepublic Staff
Amazon's new Bee AI devices can summarize conversations, but their recording controls raise consent questions for employers and meeting participants. The post Amazon Bee Frontier and Bee Eclipse Raise Workplace Consent Concerns appeared first on TechRepublic.
WeLiveSecurity – News, views, and insight from the ESET security community
- MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaborationon 2026-10-22
ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved the way for a destructive attack against a Ukrainian grain firm
- Is the ad a scam? How to tell before you clickon 2026-10-20
You can trust a social media platform and still get scammed by an ad running on it
- Inbox flooded with sign-up messages? Email bombing explainedon 2026-10-16
If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious
- Medicare scam calls, texts and ads: What to watch for this Open Enrollmenton 2026-10-14
Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safe
- What to do when a data breach notice doesn't say muchon 2026-10-12
Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next.
- MATCHBOIL: New tricks, same old evil intentionson 2026-10-08
ESET Research catalogs the changes of UAC-0099’s MATCHBOIL downloader from 2024 to 2026
Schneier on Security – A blog covering security and security technology
- Feed has no items.
Lohrmann on Cybersecurity – Government Technology RSS Feed
- Government Contracts: What’s Needed to Protect the Data?on 2026-10-18
Starting with terms and conditions, what best practices can help with government contracts during the entire life cycle of a procurement?
- How Can We Manage Identity Access for AI Agents?on 2026-10-11
There are many ideas, opinions and potential solutions, but no single agreed-upon approach for managing nonhuman online identities.
- What the Recent Frontier AI Incidents Mean for Security Leaderson 2026-10-04
Navigating the hidden fallout of autonomous frontier AI model incidents and what it means for enterprise defense.
- Think You'd Never Fall for a Scam Text? Think Againon 2026-09-27
As we head into October Cybersecurity Awareness Month, ponder this: Responding with "wrong number" to a strange text is exactly what the scammers want you to do.
- Forget AI — Here’s the Real Cyber Crisis Escalating Right Nowon 2026-09-21
Ransomware is surging in 2026, although few stories are grabbing the global attention that was much more common a few years back. Here’s what you need to know.
- State and Local Government Cyber Leaders Prioritize AI, Identity and Stopping Fraudon 2026-09-13
What were the top themes when state and local government CISOs met this past week to compare notes and build strategies heading into the midterm elections this fall?
#StayVigilant
#StaySafe
#LookOutForEachOther