Security Alerts and Threat Data (the Short List)
By Gideon T. Rasmussen, CISSP, CRISC, CISA, CISM, CIPP

This content was created in response to a friend who asked for "the short list" of resources I use to keep current on security news and the threat landscape.

Alerts:


• US-CERT Alerts https://www.us-cert.gov/ncas/alerts (E-mail distribution)
• Vendor Advisories (e.g. Microsoft) (E-mail distribution)
  
• InfraGard https://www.infragard.org (E-mail and Web Portal) (Only available to US citizens)
  
• Create a Google Alert (Compromised OR breached OR hacked) https://support.google.com/websearch/answer/4815696?hl=en (E-mail distribution)
  
  News:
  
  
• SANS NewsBites https://www.sans.org/newsletters/newsbites (E-mail distribution)
  
• DataBreach Today Enews http://www.databreachtoday.com (E-mail distribution)
  
• IAPP Daily Dashboard: https://iapp.org/news/daily-dashboard (E-mail distribution)
  
• Wall St Journal CyberPro: https://cyber.pro.wsj.com (Subscription Fee)
  
  Twitter:
  
  It should be easy to use Twitter to follow your favorite feeds. Start with @DarkReading and my Twitter account @gideonras. Here are additional feeds for your consideration:
  
  
• @infosecisland
• @CyberScoopNews
• @SCMagazine
• @CSOonline
• @briankrebs
• @InfosecurityMag
• @SecurityWeek
• @threatpost
  
  TTPs and IOCs:
  
  
• MITRE ATT&CK Framework https://attack.mitre.org/wiki/ATT%26CK_Matrix
  
• Verizon Data Breach Report https://www.verizonenterprise.com/verizon-insights-lab/dbir
  
• M-Trends Reports https://www.fireeye.com/current-threats/annual-threat-report/mtrends.html
  

This is the short list. I subscribe to much more than this.

That should be a good start.

Click here for more professional development tips