Information Security blogs to follow

Original Sources: Primary & Secondary (for detailed reading and more information)


1. Krebs on Security

Brian Krebs is the man behind Krebs on Security. Being hacked himself in 2001, he starts to be personally interested in online security. He’s one of the most-known names in today’s security landscape. Krebs covers topics from the latest threats, privacy breaches, and cyber-criminals, as well as major security news and alerts. He’s also a book author.

2. Schneier on Security

Another cybersecurity blog that is worth reading on a daily basis is the one belonging to Bruce Schneier which is an internationally renowned security technologist, called a “security guru” by The Economist. He wrote books, hundreds of articles, essays and security papers on cybersecurity. At the same time, he is a known figure in the media.

The press recognizes him as an important voice for online security, not only for his knowledge on the matter but also because of how he expresses his opinions.

3. Tao Security

Tao Security is run by Richard Bejtlich, which is an advisor to the security ecosystem for the Treat Stack company and a former Chief Security Strategist at FireEye. He’s also an author of many books on the security topic. He started his career as a military intelligence officer at the Air Force Computer Emergency Response Team, Air Force Information Warfare Center and Air Intelligence Agency.

With an extensive background in the cyber-criminal world and familiar with malicious attacks on enterprise networks, he shares his experience on digital defense and network monitoring. Since a great number of network attacks come from China, he is specialized on Chinese online criminals.

4. Graham Cluley

Graham Cluley is one of the most known independent computer security analysts and public speakers. He’s been working in the industry since the early ‘90s. Started as a programmer, writing the first ever version of Dr. Solomon’s Anti-Virus Toolkit for Windows. Afterward, he had senior roles in Sophos and McAfee.

5. Troy Hunt

Troy Hunt is an Australian Microsoft Regional Director and Most Valuable Professional (MVP) for Developer Security. He travels the world speaking at events and giving training and advice to tech security professionals. He’s also an author of many top-rating courses on web security.

You surely heard about his project “Have I Been Pwned?”, a free service that tells you if you’ve been compromised in a data breach.

6. Security Affairs

Security Affairs is a security blog written by Pierluigi Paganini, an ethical hacker, researcher, security evangelist, and analyst. On his blog, among the articles on security, you’ll also find regular interviews with hackers, useful cybersecurity In 2016, this blog was awarded as Best European Personal Security Blog

7. Architect Security 

This cybersecurity blog belongs to April C. Wright which is a speaker, teacher, community leader and hacker with more than 25 years experience in the information security industry. She teaches others how to use simple actions that can lead to a better and safer place.

8. Dark Reading

Dark Reading is a widely-read cyber security website that addresses professionals from the IT industry, security researchers, and technology specialists. They use their experience and knowledge to provide articles, recommendations, news and information on IT cybersecurity landscape.

9. CIO

CIO is the place where you find news, information technology articles, insights and analysis on major data breaches and online threats that put your online security at risk. Covering multiple aspects of world wide web, it provides in-depth, content-rich information for IT professionals and regular users.

10. CSO Online

CSO focuses on offering users the latest information and best practices in both technology and business, loss prevention, cybercriminal threats, and software vulnerabilities, malware and data breaches and many other useful tips and advice about cybersecurity.

11. PCMag’s Security Watch

Known for his direct and witty style, Neil Rubenking is PC Magazine’s Lead Analyst. He’s the man you have to listen if you search for technical advice on the main security solutions, from firewalls, antivirus, and antispam products to full security suites. You’ll also read in this cybersecurity blog detailed reports and sharp analysis of security programs, which should place him on your follow “cybersecurity blogs” list if you look for this type of information. He has also written several books.

12. Paul’s Security Weekly

This security blog was founded by Paul Asadoorian and brings you a wide range of topics from security news, useful technical articles, research studies to valuable information on hacking and cybercrime through different channels, from blog posts, videos to podcasts.

13. Forbes

This is one of the leading media company in the online environment and provides strong analysis, reliable tools, real-time reports for cybersecurity news and information on the latest online vulnerabilities.

14. SC Magazine

SC Magazine comes in the IT environment with technical information and data analysis to fight the present online security threats. Their site provides testing results for email security, mobile devices, cloud ,and web security.

15. PCMag

Probably one of the most popular tech sites in the software industry, PC Mag offers readers lots of reviews and studies on the latest products for online security. For an objective analysis of a particular product you may be interested in, don’t forget to search for the dedicated article on this website.

16. The Hacker News

It is one of the biggest information security blogs and we recommend following it for the latest resources about hacking, technology, and security.

17. Security Week 

It’s one of those information security blogs you need to follow to stay informed about the latest security news, insights and analysis. You’ll also read opinions and insights from IT security experts around the world.

18. Ars Technica

Probably one of the oldest and top publications on technology. Its editorial mission is to be “technically savvy, up-to-date and more fun” than what was popular at the moment when it was founded.

19. Softpedia

Softpedia is a popular destination for software downloads but also covers tech topics and news. It was founded in 2001 by SoftNews NET SRL, a Romanian company.

20. The Last Watchdog 

It is one of those security blogs founded by the Pulitzer-winning journalist Byron V. Acohido which is a respected cybersecurity influencer, and The Last Watchdog is considered to be one of the top cybersecurity blogs. You’ll find personal opinions on cybersecurity, Q&A, useful podcasts or videos. 

21. Wired

One of the classical American online magazines reporting on technology and its role in culture, economy and politics, Wired approaches various topics on online privacy, cybercriminal threats, systems security and the latest security alerts.

22. Motherboard Vice

Vice’s Motherboard is an online magazine dedicated to technology, science, and humans. Lots of the data breaches in the past years were firstly announced by Motherboard and you should follow it.

23. Mashable

Mashable is a global media company, founded in 2005. They aim to be the leading media company for the Connected Generation and the voice of digital culture. We recommend following their cybersecurity category to read about all the latest news related to this field.

24. Techcrunch

TechCrunch is another leading media company focused on technology and breaking tech news, founded in the same year as Mashable and owned by AOL.

25. IT Pro Portal

It Pro Portal is one of the first tech websites from the UK, launched in 1999 and has grown to become one of UK’s leading resources on technology information. Here you’ll find tech products reviews, market analysis, cyber security news and many more.

26. Privacy Paradox from Lawfare

When law meets privacy – this is how we’d sum up “Privacy Paradox”, the subsection of The Lawfare Blog. Its authors take an unorthodox look at the law and policy of contemporary privacy.

27. The Register

The Register is another top online tech publication, with more than 9 million monthly unique visitors. You’ll find here independent news, views, and reviews on the latest in the IT industry and its security section brings the latest news from the industry.

28. TechRepublic

TechRepublic provides large resources for the online industry, such as blog articles, forums, technical papers, and security data. All the valuable information available on this cybersecurity blog will help IT professionals and technology leaders to come with the best decisions on their business processes. There are also useful resources such as whitepapers, eBooks, tools and more.

29. Zero Day

The Zero Day security blog is important for all the people part of the IT industry. This information security blog belongs to ZDNet and you should follow it to stay on top of the latest security analysis, software vulnerabilities, malware attacks, and network threats.

30. The Guardian Information Security Hub

Known for its quality articles on world news, Guardian also provides a section dedicated to information security for both companies and individuals. To stay up-to-date with the most recent articles and news on cybersecurity, make sure you follow this cybersecurity blog.

31. Help Net Security

Help Net Security is a popular independent site, focused on information security since 1998. You’ll find here the latest information and articles related to the IT industry, including experts’ opinion on the hottest topics, reviews, security events, and many more.

32. Techworld Security

Techworld is an industry leader in business technology publishing, published by IDG (International Data Group). The Security section is dedicated to analyzing the latest malware threats and zero-day exploits, including analysis and tutorials. You can find here other important topics and subjects, such as security articles, how-to documents or software reviews.

33. IT Security Guru

It is a site for cybersecurity community which offers daily and breaking IT security news, with opinions and analysis of this industry.

34. Network Computing

The content of the Network Computing cybersecurity blog focuses on cloud technology and enterprise infrastructure systems. Its published articles cover security solutions on how to deliver applications and services for an increasingly large threat environment in the business world, news and expert advice.

35. Infosecurity Magazine

With more than 10 years of experience, Infosecurity Magazine is an online magazine which covers not only security articles on popular topics but is also focused on security strategy and valuable insights for the online industry. You should follow it for its educational approach.

36. SANS Institute AppSec Blog

SANS Software Security provides training, certification, research and community initiatives that help IT specialists build secure applications.

37. Peerlyst

Peerlyst is a community for where cybersecurity professionals gather to discuss hot topics and exchange opinions on key subjects. As part of the community’s mission, the team is “working with people like you to help transcend the fragmented security market and create transparency”.

38. Europol 

While it’s not actually a cybersecurity blog, it is worth following and reading the newsroom section from the European Union Agency for Law Enforcement Cooperation (EUROPOL) and stay up to date with the latest press releases, news articles, blog entries, videos, and other content.

39. Electronic Frontier Foundation (EFF) 

The Electronic Frontier Foundation is the leading nonprofit organization defending civil liberties in the digital world which was founded in 1999. Its work is mainly focused on ensuring that rights and freedoms are enhanced and protected as our use of technology grows. You should read their information security blog for its high-quality content, comprehensive analysis, educational guides, and more.

40. Virus Bulletin

The Virus Bulletin blog is a must-read online source of reference for anyone concerned with computer security and online threat landscape. It covers the latest threats, new developments, and techniques in the security landscape, opinions from well-known members of the industry, and more.

41. StaySafeOnline

This security blog is powered by the National Cyber Security Alliance (NCSA)  organization and is a reliable online source that provides valuable information on how you can stay safe online, how to keep your business secure and many other useful tips and insights on privacy.

42. Security Boulevard

It is the home of the Security Bloggers Network (SBN) and an online community where you can find plenty of useful resources from fresh cybersecurity news, threats and data breaches to webinars, a library of security-related resources, and many other educational resources.

43. Bleeping Computer

Another fantastic resource is Bleeping Computer, a technical support website, and a self-education tool. Do read their cybersecurity guides, forums, tutorials and more.

44. IT Security

Here’s another useful information security resource where you can read about cybersecurity news, insights and experts’ opinions on topics related to the cybersecurity landscape.

45. GBHackers on Security

It is another great online resource where you can read about the latest hacking news, cybersecurity, technology updates, ransomware or malware. There’s also the place where you can find useful online courses and other interesting infosec resources.

46. BetaNews

Here’s another leading source of technology news and analysis you can follow to stay up to date with everything happening in cybersecurity.

INFORMATION SECURITY BLOGS FROM SECURITY VENDORS TO FOLLOW

47. State of Security

TripWire delivers advanced threat, security and compliance solutions to companies. State of Security is TripWire’s blog on cybersecurity and the place where you can read about the latest cybersecurity news, podcasts, videos, and many more useful resources. Multiple authors write on it about the constantly changing landscape of cybersecurity.

48. Naked Security

Naked Security is an award-winning newsroom that offers us news, opinions, advice, and research on computer security issues and the latest cyber threats. The blog belongs to the security company SOPHOS and there are topics from mobile security threats to operating systems or malware articles.

49. F-Secure Safe & Savvy Blog

Safe & Savvy is a cybersecurity blog from F-Secure, a company focused on online content and privacy protection issues. On this security blog you will find plenty of handy tips and tricks on security issues, how to keep your data safe and many other resources such as videos, infographics or reports.

50. Hot For Security

Another information security blog you should add to your list is the Hot For Security which belongs to Bitdefender security company. Bitdefender is one of the leading and most-known companies on online security solutions. On their blog, they cover various subjects related to cybersecurity and privacy, from Internet scams, online spam, and phishing detection, to malware and data-stealing software.

51. Malwarebytes Labs

The Malwarebytes cybersecurity blog includes articles that cover the latest malware threats and cybercriminal attempts from the online world. You can find their articles on categories, from cybercrime, exploits, hacking and malware analysis.

52. We Live Security

We Live Security, the Eset blog, is an online resource for cybersecurity articles and probably one of the best cybersecurity blogs providing a large network of security topics from emerging online threats to zero-day exploits.

53. ThreatPost

Threatpost is an independent news site where you can read a plethora of cybersecurity news and analysis to stay informed and safe, including useful videos, feature reports and many more.

54. Kaspersky Lab’s Securelist

Securelist is a security blog run by Kaspersky Lab which addresses a large audience, providing some of the best security subjects on cyber criminal activities and data-stealing malware. There are plenty of great cybersecurity information you’ll read here from malware, spam and phishing to statistics and an encyclopedia to search for definitions and learn new cyber sec terms.

55. Symantec Blogs

Symantec Blogs is an expanded blogging platform which belongs to one of the biggest providers of security solutions worldwide, Symantec. This information security blog offers users the latest security news, unparalleled analysis from experts on the online threats affecting businesses today,  articles on security threats, online criminals, data-stealing malware, system vulnerabilities and many others.

56. Fox IT Security Blog

Fox-IT’s security blog is a very good source of information on online security, technology news and cybercrime defense. This security blog is owned by Fox IT, a Dutch security firm that works with trusted partners in more than 35 countries.

57. Securosis

Securosis is a security research and advisory company that offers security services for companies and organizations. At the same time, you can find on their security blog some useful articles and insights on how you can better manage and protect your online data.

58. Google Online Security Blog

We couldn’t miss this one from our list! We are surrounded by Google products and services every day, from their search engine to web browser, so it’s normal to include their cybersecurity blog here. It is more than a reliable information security blog; it’s also a reference point on online security and privacy we need to acknowledge. Here you can also read the latest news and insights on how to keep users safe.

59. ZoneAlarm Cyber Security Blog

This cybersecurity blog is from ZoneAlarm, which is one of the well-known vendors of security products providing valuable information on malware defense and online security to protect millions of PC users. Using their experience on malware, this security blog publishes malware alerts, practical security tips and the latest news in the IT industry.

60. McAfee security blog

McAfee information security blog provides the latest tips and techniques from various security experts to keep you up-to-date with the latest malware trends in the online environment.

61. Microsoft Secure Blog

Starting January 2018, this is the place where you’ll find all the blogs from Microsoft. Here you’ll find technical information for Office 365, Microsoft Azure, and Windows, alongside product updates, cybersecurity guidance, industry trends, and more. You’ll also read great cybersecurity stories from the global team of Windows Defender researchers, engineers, and experts.

62. SpiderLabs Security Blog

Investigators and researchers at Trustwave cover the latest technology news on this cybersecurity blog. Gathering information from research and testing, they publish articles and security studies to fight online hackers and cyber-criminal threats.

63. Dell SecureWorks

SecureWorks is a company that provides information security services and became part of Dell in 2011 and branched off as a public organization in April 2016. Their cybersecurity blog provides the latest news and information for IT professionals and users that need to stay up-to-date with online threats and malware attacks.

64. Trend Micro Simply Security

Trend Micro Simply Security information security blog offers expert insights on cloud security, data safety, privacy protection and threat intelligence. You’ll also find research and analysis, and the latest news on cybersecurity industry.

65. ThreatTrack Security

ThreatTrack security blog keeps you up-to-date with the latest innovations and developments in the IT industry, from security exploits to software vulnerabilities and cyber-criminal attempts.

66. Sucuri Security 

This information security blog is held by the security company called Sucuri, which is managed by two highly passionate individuals in this industry, Daniel and Tony. It is a great online resource where you can learn about site security, emerging vulnerabilities, and web malware infections.

67. Comparitech 

This information security blog is from the company Comparitech Limited, which has the mission to help consumers make more savvy decisions when they subscribe to tech services such as VPNs, antivirus and security products, cloud backup, password managers and more. Read their blog to read more about VPN, privacy, information security and more.

68. AlienVault

It is a company security company focused on enabling all organizations to better detect and manage cyber attacks in cloud. Their blog offers cybersecurity fresh news on the latest emerging global threats and actionable advice to simplify threat management and compliance.

69. Sensors Tech Forum

Another information security blog you should add on your list is Sensors Tech Forum, which is both an online security blog and a forum. Here you can read daily PC security news, ransomware and virus removal guides. The Sensors Tech team publishes useful guides that could help users get through the removal process of malware.

70. IT Governance UK

IT Governance is a leading global provider of IT governance, risk management and compliance solutions, with a focus on cyber resilience, data protection and cybersecurity. On its cybersecurity blog you’ll read plenty of useful articles on GDPR, online privacy,  as well as podcasts and toolkits.

71. Quick Heal Blog

This security blog belongs to Quick Heal TechnologiesmLtd., which is a pioneer of antivirus research and development in India. On the blog you will find the latest IT security news, alerts and other useful tips.

72. ScienceSoft Blog

Another security blog that you should checkout is this one from Science Soft, a US-based provider of IT consulting services and custom software development with over 29 years experience in information technology. The blog approaches a variety of security topics from Artificial Intelligence, Penetration Testing, Internet of Things, and many more.

About SecureRootD

Information Security Professional

Android & Kernel Enthusiastic

Trying to Balance between Work, Home & Hobbies