# Cybersecurity feedpack

Security news, threat intelligence, vulnerability research, AppSec, and software supply chain security.

45 sources, curated by Monfil, updated 2026-10-22. Install it in Monfil (feedpack icon at the top of the feed sidebar) or download the [OPML file](https://raw.githubusercontent.com/theopnv/monfil/main/feedpacks/security.opml).

## News

- [Krebs on Security](https://krebsonsecurity.com/feed/) (Blogs and sites, krebsonsecurity.com) feed: https://krebsonsecurity.com/feed/
- [BleepingComputer](https://www.bleepingcomputer.com/feed/) (Blogs and sites, bleepingcomputer.com) feed: https://www.bleepingcomputer.com/feed/
- [The Record](https://therecord.media/feed/) (Blogs and sites, therecord.media) feed: https://therecord.media/feed/
- [The Hacker News](https://feeds.feedburner.com/TheHackersNews) (Blogs and sites, feeds.feedburner.com) feed: https://feeds.feedburner.com/TheHackersNews
- [SecurityWeek](https://www.securityweek.com/feed/) (Blogs and sites, securityweek.com) feed: https://www.securityweek.com/feed/
- [Dark Reading](https://www.darkreading.com/rss.xml) (Blogs and sites, darkreading.com) feed: https://www.darkreading.com/rss.xml

## Analysis

- [Schneier on Security](https://www.schneier.com/feed/atom/) (Blogs and sites, schneier.com) feed: https://www.schneier.com/feed/atom/
- [Troy Hunt](https://www.troyhunt.com/rss/) (Blogs and sites, troyhunt.com) feed: https://www.troyhunt.com/rss/
- [tl;dr sec](https://tldrsec.com/feed.xml) (Blogs and sites, tldrsec.com) feed: https://tldrsec.com/feed.xml
- [Risky Bulletin](https://news.risky.biz/rss/) (Blogs and sites, news.risky.biz) feed: https://news.risky.biz/rss/

## Research

- [Google Project Zero](https://googleprojectzero.blogspot.com/feeds/posts/default) (Blogs and sites, googleprojectzero.blogspot.com) feed: https://googleprojectzero.blogspot.com/feeds/posts/default
- [Trail of Bits](https://blog.trailofbits.com/feed/) (Blogs and sites, blog.trailofbits.com) feed: https://blog.trailofbits.com/feed/
- [PortSwigger Research](https://portswigger.net/research/rss) (Blogs and sites, portswigger.net) feed: https://portswigger.net/research/rss
- [GitHub Security Lab](https://github.blog/tag/github-security-lab/feed/) (Blogs and sites, github.blog) feed: https://github.blog/tag/github-security-lab/feed/
- [Google Online Security Blog](https://security.googleblog.com/feeds/posts/default) (Blogs and sites, security.googleblog.com) feed: https://security.googleblog.com/feeds/posts/default

## Threat Intelligence

- [Cisco Talos](https://blog.talosintelligence.com/rss/) (Blogs and sites, blog.talosintelligence.com) feed: https://blog.talosintelligence.com/rss/
- [Unit 42](https://unit42.paloaltonetworks.com/feed/) (Blogs and sites, unit42.paloaltonetworks.com) feed: https://unit42.paloaltonetworks.com/feed/
- [Microsoft Security Blog](https://www.microsoft.com/en-us/security/blog/feed/) (Blogs and sites, microsoft.com) feed: https://www.microsoft.com/en-us/security/blog/feed/
- [The DFIR Report](https://thedfirreport.com/feed/) (Blogs and sites, thedfirreport.com) feed: https://thedfirreport.com/feed/
- [Google Threat Intelligence](https://feeds.feedburner.com/threatintelligence/pvexyqv7v0v) (Blogs and sites, feeds.feedburner.com) feed: https://feeds.feedburner.com/threatintelligence/pvexyqv7v0v

## AppSec & Supply Chain

- [OpenSSF Blog](https://openssf.org/feed/) (Blogs and sites, openssf.org) feed: https://openssf.org/feed/
- [Snyk Blog](https://snyk.io/blog/feed/) (Blogs and sites, snyk.io) feed: https://snyk.io/blog/feed/
- [Socket Blog](https://socket.dev/api/blog/feed.atom) (Blogs and sites, socket.dev) feed: https://socket.dev/api/blog/feed.atom

## Advisories

- [CISA Cybersecurity Advisories](https://www.cisa.gov/cybersecurity-advisories/all.xml) (Blogs and sites, cisa.gov) feed: https://www.cisa.gov/cybersecurity-advisories/all.xml
- [oss-security mailing list](https://seclists.org/rss/oss-sec.rss) (Blogs and sites, seclists.org) feed: https://seclists.org/rss/oss-sec.rss

## Podcasts

- [Risky Business](https://risky.biz/feeds/risky-business/) (Blogs and sites, risky.biz) feed: https://risky.biz/feeds/risky-business/
- [Darknet Diaries](https://feeds.megaphone.fm/darknetdiaries) (Blogs and sites, feeds.megaphone.fm) feed: https://feeds.megaphone.fm/darknetdiaries

## Community

- [Troy Hunt (Bluesky)](https://bsky.app/profile/troyhunt.com/rss) (Bluesky, bsky.app) feed: https://bsky.app/profile/troyhunt.com/rss
- [Kevin Beaumont (Bluesky)](https://bsky.app/profile/doublepulsar.com/rss) (Bluesky, bsky.app) feed: https://bsky.app/profile/doublepulsar.com/rss
- [Matthew Green (Bluesky)](https://bsky.app/profile/matthewdgreen.bsky.social/rss) (Bluesky, bsky.app) feed: https://bsky.app/profile/matthewdgreen.bsky.social/rss
- [Catalin Cimpanu (Bluesky)](https://bsky.app/profile/campuscodi.risky.biz/rss) (Bluesky, bsky.app) feed: https://bsky.app/profile/campuscodi.risky.biz/rss
- [Kim Zetter (Bluesky)](https://bsky.app/profile/kimzetter.bsky.social/rss) (Bluesky, bsky.app) feed: https://bsky.app/profile/kimzetter.bsky.social/rss
- [Brian Krebs (Mastodon)](https://infosec.exchange/@briankrebs.rss) (Mastodon, infosec.exchange) feed: https://infosec.exchange/@briankrebs.rss

## Video

- [LiveOverflow](https://www.youtube.com/feeds/videos.xml?channel_id=UClcE-kVhqyiHCcjYwcpfj9w) (YouTube, youtube.com) feed: https://www.youtube.com/feeds/videos.xml?channel_id=UClcE-kVhqyiHCcjYwcpfj9w
- [John Hammond](https://www.youtube.com/feeds/videos.xml?channel_id=UCVeW9qkBjo3zosnqUbG7CFw) (YouTube, youtube.com) feed: https://www.youtube.com/feeds/videos.xml?channel_id=UCVeW9qkBjo3zosnqUbG7CFw
- [IppSec](https://www.youtube.com/feeds/videos.xml?channel_id=UCa6eh7gCkpPo5XXUDfygQQA) (YouTube, youtube.com) feed: https://www.youtube.com/feeds/videos.xml?channel_id=UCa6eh7gCkpPo5XXUDfygQQA
- [NetworkChuck](https://www.youtube.com/feeds/videos.xml?channel_id=UC9x0AN7BWHpCDHSm9NiJFJQ) (YouTube, youtube.com) feed: https://www.youtube.com/feeds/videos.xml?channel_id=UC9x0AN7BWHpCDHSm9NiJFJQ
- [Black Hat](https://www.youtube.com/feeds/videos.xml?channel_id=UCJ6q9Ie29ajGqKApbLqfBOg) (YouTube, youtube.com) feed: https://www.youtube.com/feeds/videos.xml?channel_id=UCJ6q9Ie29ajGqKApbLqfBOg
- [DEF CON](https://www.youtube.com/feeds/videos.xml?channel_id=UC6Om9kAkl32dWlDSNlDS9Iw) (YouTube, youtube.com) feed: https://www.youtube.com/feeds/videos.xml?channel_id=UC6Om9kAkl32dWlDSNlDS9Iw

## Releases

- [Trivy releases](https://github.com/aquasecurity/trivy/releases.atom) (GitHub, github.com) feed: https://github.com/aquasecurity/trivy/releases.atom
- [Grype releases](https://github.com/anchore/grype/releases.atom) (GitHub, github.com) feed: https://github.com/anchore/grype/releases.atom
- [Cosign releases](https://github.com/sigstore/cosign/releases.atom) (GitHub, github.com) feed: https://github.com/sigstore/cosign/releases.atom
- [Semgrep releases](https://github.com/semgrep/semgrep/releases.atom) (GitHub, github.com) feed: https://github.com/semgrep/semgrep/releases.atom
- [OpenSSL releases](https://github.com/openssl/openssl/releases.atom) (GitHub, github.com) feed: https://github.com/openssl/openssl/releases.atom

## Events

- [Security conferences](https://developers.events/all-events.json?topics=security,cybersecurity,infosec) (Developer conferences, developers.events) feed: https://developers.events/all-events.json?topics=security,cybersecurity,infosec