The Security News Source List
security news: A list of sources in a variety of formats and flavors
At Pistachio we try to encourage an active engagement with the world of security news - but we also recognize that there are a lot of news sources out there, and that people’s tastes and preferences have a lot to say in whether they’ll engage with any one of them.
To address this, we’ve compiled a list of sources in a variety of formats and flavors, to maximize your chances of finding one that resonates with you. Enjoy!
Podcasts
This surprisingly jovial podcast has a laser focus on phishing, social engineering and other forms of internet scam activity. This eliminates a lot of tech talk, making most of their content universally approachable.
A highly detailed and occasionally irreverent take on security news from a pleasant team of seasoned cybersecurity professionals. They cover the whole cybercrime and spycraft gamut, from tech to human to politics.
Hosted by a delightful security industry veteran, this podcast manages the impossible feat of maintaining an approachable style while doing serious technical deep dives whenever an interesting topic arrives. Highly recommended for all audiences.
A well-researched “true crime”-style podcast featuring stories from the internet’s sweaty underbelly. It often includes first-hand accounts from hackers and cybercriminals, as well as those who find their lives impacted by them.
Social Media
Subreddits!
Having cybersecurity news on your reddit home page is a nifty gain for zero effort (assuming you use reddit in the first place). Highly recommended.
A forum dedicated to “Anything that good hackers would find interesting”. This occasionally includes cybersecurity and cybercrime, but also comics, octopus society, science drama and ways to run doom on devices that shouldn’t run doom.
Youtube
A villainous German media company created a clone of Michael Cera, but due to pod contamination he turned into a hacker instead of an actor. He now spends his time breaking down NSO group iPhone exploits, dispensing phishing advice and using Minecraft to illustrate red team techniques.
True to its name, this channel goes deep into the details of exploits, vulnerabilities and cybersecurity news. We mean Titan Submersible-deep, it’s wild. Hop onboard, and enjoy the ride!
If you’re a fan of the loud youtuber tone of voice, or you’re a deaf person who watches youtube with captions, Hammond is a definite recommendation. Phishing post-mortems, phishing technique analysis, malware breakdowns and more, all with a heavy focus on general accessibility - this channel can be a really good source of educational infosec content.
Websites
Well-researched in-depth articles by Brian Krebs - the internet’s security news artisan. His blog is a wellspring of content for literally every other outlet on this list.
Available both as a website and an email newsletter, this resource is for those who appreciate the Risky Business podcast but generally prefer to read rather than listen.
The Register (Security section)
A peculiar technology site that attempts to deliver all its news with a bit of cheek. Their mission statement might be the weirdest in the tech biz, but they’re doing a good job at delivering on it.
While not as comprehensive as some other outlets, TechCrunch will reliably deliver reader-friendly news stories that you can send to your boss and colleagues, as well as that one aunt who consumes all her TV shows via torrenting.
Not to be confused with Hacker News, this site provides diligent coverage of the most important news events in the cybersecurity world.
A digital forensics organization that focuses on anti-democratic government-backed cybercrime activities. Famously, they are the organization that uncovered many of the recent NSO Pegasus spyware 0-days.
This site seems to be tailored for CISO’s, and beneath its dry corporate surface you’ll find even more layers of dry corporate surface, but they do their research well. Their Malware and Threats section is the most relevant one to most readers.
We believe in a learn-by-doing approach over snooze-worthy videos.
Instead, Pistachio tailors real-world scenarios so your team can build their cyber skills in a safe environment.
Continue reading
Ready to reduce your human risk? Book your demo today.
“We lacked confidence that employees would recognise today’s phishing threats or respond correctly. Since using the Pistachio platform, they are more attentive and proactive in identifying potential risks. The solution is easy to manage, quick to implement, and highly effective.
“The platform is easy to implement and provides clear insights into employee phishing awareness. Its bite-sized learning encourages participation, saves administration time, and allows us to focus more on real threat detection.”
“We were looking for a practical way to improve cybersecurity awareness across the organization. Pistachio made training simple and engaging, and we’ve seen a noticeable improvement in employee awareness with minimal effort.”
“Pistachio removed the burden of planning campaigns, collecting data, and evaluating results. The program challenges each employee at their own level and provides clear, simple reporting. Pistachio has streamlined our awareness training and strengthened our organization’s cybersecurity.”
“Our goal was to help employees better recognize phishing emails and avoid malicious links. Pistachio made this easy and engaging, and we’ve seen a clear improvement in detection, fewer clicks on phishing links, and reduced data disclosure. With minimal ongoing maintenance, it’s an effective and low-effort solution.”
“Within weeks, Presence had flagged several incidents that could have otherwise been missed, including employees forwarding company data to personal accounts during offboarding. The alerts are reliable and actionable, so we've built a full investigation process around them. Although I was skeptical at first, the value was obvious almost immediately.”
“Pistachio has reduced our manual workload to zero with its automated phishing simulations and in‑box delivery of scenario‑based trainings. This has allowed our team to dedicate time to other important security initiatives while Pistachio handles our Security Awareness program seamlessly.”
“Presence automatically detects suspicious behaviour and gives us the visibility we need without constant manual oversight. Within the first few weeks we were already seeing alerts that would have otherwise gone unnoticed as the system learns what is usual and unusual behaviour for our environment.”
“Before Pistachio, security awareness was something we could only offer to a few customers. Today it’s part of every managed service we deliver, and we haven’t had to grow the team to make that happen.”
Fill out the form to book a demo:
Trusted by 1200+ customers & MSPs
