Resources
Cybersecurity Intelligence Directory
18 sources curated by Antonio Galgano Votta across 8 categories. No filler, no vendor blogs — only the outlets that consistently produce signal worth acting on.
Breaking News (2) — High-velocity threat & vulnerability updates
01
The Hacker NewsBreaking
The most trusted and widely read cybersecurity news source, covering data breaches, cyberattacks, and security vulnerabilities with a focus on technical depth.
BleepingComputerBreaking
An essential destination for news on ransomware, malware analysis, and technical security alerts, often providing the first look at new threat campaigns.
Enterprise & Leadership (3) — Strategic insights for CISOs and IT management
03
Dark ReadingEnterprise
One of the most widely-read cybersecurity news sites for IT professionals, focusing on enterprise security challenges and risk management.
CSO OnlineLeadership
Provides news, analysis, and strategy on security and risk management for business leaders and security professionals.
Infosecurity MagazineStrategy
Global publication focused on strategy, insights, and technical trends within the information security industry.
Investigative (1) — Deep-dive journalism and cybercrime attribution
06
Krebs on SecurityInvestigate
Investigative journalism by Brian Krebs, focusing on cybercrime, data breaches, and the inner workings of the underground economy.
Learning & Research (3) — Academic research, whitepapers, and technical training
07
SANS InstituteTraining
The global leader in information security training and certification. Their resource center provides free whitepapers and Internet Storm Center diaries.
Schneier on SecurityAnalysis
Bruce Schneier's blog covers the intersection of security, technology, and people, with a strong focus on cryptography and policy.
Help Net SecurityIntel
An independent security portal covering a wide range of topics, including technical research, interviews, and product news.
Security + AI (1) — The intersection of machine learning and defense
10
Unsupervised Learning (Daniel Miessler)Security+AI
A curation of the most important stories in technology and security, with a visionary focus on how AI is reshaping the defensive landscape.
Government / CVE (3) — Official advisories and vulnerability databases
11
CISA AlertsGov
Official cybersecurity advisories and vulnerability alerts from the US Cybersecurity and Infrastructure Security Agency.
NVD (NIST)CVE
The U.S. government repository of standards-based vulnerability management data, including the Common Vulnerabilities and Exposures (CVE) list.
CERT/CCGov
The Software Engineering Institute's center for coordinating incident response and documenting system vulnerabilities.
Offensive / Red Team (2) — Exploit research and adversary simulation
14
Exploit-DBOffensive
An archival of public exploits and corresponding vulnerable software, maintained by Offensive Security.
MITRE ATT&CKFramework
A globally-accessible knowledge base of adversary tactics and techniques based on real-world observations.
Tooling (3) — Core utilities for analysis and discovery
16
OWASPTooling
The Open Web Application Security Project provides community-led tools and documentation for web security, including the "Top 10" risks.
VirusTotalScanner
A free service that analyzes files and URLs for viruses, worms, trojans, and other kinds of malicious content using over 70 antivirus scanners.
ShodanDiscovery
The search engine for Internet-connected devices, used by security professionals to find exposed systems and analyze the global attack surface.