100 Internet Security Tips That John Would Never Follow - M Mubashar

24

description

100 Internet Security Tips That John Would Never Follow - M Mubashar

Transcript of 100 Internet Security Tips That John Would Never Follow - M Mubashar

  • 41AmazingInternetSecurityBlogsYouShouldBeReadingAuthor:MMubashar1.KrebsonSecurityBrianKrebsisthemanbehindKrebsonSecurity.Beinghackedhimselfin2001,hetakesapersonalinterestinonlinesecurityandisoneofthewell-knownnamesintodayssecuritylandscape.Hecoverstopicsfromlatestthreats,privacybreachesandcyber-criminalstomajorsecuritynews.

    2.SchneieronSecurityBruceSchneiderisprobablythemostwell-knownnamethatyoucanrecognizeinourlist,andwasevencalledasecuritygurubyTheEconomist.Hewrotebooks,hundredsofarticles,essaysandsecuritypapersonsecuritymatters.Atthesametime,heisaknownfigureinthemediaenvironmentwhichrecognizehimasanimportantvoicefortheonlinesecurity,notonlyforhisknowledgeonthematter,butalsobecauseheknowshowtoexpresshisopinions.

    3.TaoSecurityThissecurityblogisrunbyRichardBejtlich,ChiefSecurityOfficeratMandiantandauthorofmanybooksonsecurity.Withanextensivebackgroundoncyber-criminalworldandmaliciousattacksonenterprisenetworks,heshareshisexperienceondigitaldefense,networkmonitoringanddetectiononhissecurityblog.SinceagreatnumberofnetworkattackscomefromChina,heisspecializedonChineseonlinecriminals.

    4.US-CERTThisistheofficialwebsiteoftheDepartmentofHomelandSecurity,fromUSA.

    Thoughitisnotaclassicalsecurityblog,itspurposeistoimproveInternetsecuritybyprovidingspecializedandwelldetailedinformationoncyber-criminalactivities,malware,phishingattemptsandonlinethreats.Tousetheirownwords:US-CERTstrivesforasafer,strongerInternetforallAmericansbyrespondingtomajorincidents,analyzingthreats,andexchangingcriticalcyber-securityinformationwithtrustedpartnersaroundtheworld.

    5.DarkReadingDarkReadingisawidely-readcybersecuritysitethataddressesprofessionalsfromtheITenvironment,securityresearchersandtechnologyspecialists.Theyusetheirexperienceandknowledgetoprovidearticles,recommendations,newsandinformationonITsecurity.

    6.CIO

  • CIOistheplacewhereyoufindnews,informationtechnologyarticles,insightandanalysisonmajordatabreachesandonlinethreats.Coveringmultipleaspectsofworldwideweb,itprovidesin-depth,contentrichinformationforITprofessionalsandnormalusers.

    7.NetworkSecurityBlogMartinMcKeayisthevoiceofthissecurityblog,whereyoucanfindinformationandnewsonprivacyandsecurityissues.AsMartinsays:Itookupbloggingasameanstoextendmyknowledgeandtestmyideasaboutsecurity.

    8.SecurityWatchwithNeilRubenkingKnownforhisdirectandwittystyle,NeilRubenkingisthemanyouhavetolistenifyousearchfortechnicaladviceonthemainsecuritysolutions,fromfirewalls,antivirusandantispamproductstofullsecuritysuites.Detailedreportsandsharpanalysisofsecurityprogramsplacehimbeonyourfollowlistifyoulookforthistypeifinformation.

    9.PaulsSecurityWeeklyPaulsSecurityWeekly,foundedbyPaulAsadoorian,bringsyousecuritynews,usefultechnicalarticles,researchstudiesandvaluableinformationonhackingandcyber-crimethroughvariouschannels,fromblogposts,videostopodcasts.

    10.PCMag.comOneofthemostpopularsitesinthesoftwareindustry,PCMagazinecomeswithreviewsandstudiesonthelatestproductsforonlinesecurity.Foranobjectiveanalysisofaproductyoumaybelooking,dontforgettolookforthededicatedarticleonthiswebsite.

    11.WiredOneoftheclassicalNorthAmericanpublicationsreportingontechnologyanditsroleinculture,economyandpolitics,Wiredapproachestopicsononlineprivacy,cybercriminalthreats,systemssecurityandthelatestalerts.

    12.ForbesFirewallForbesFirewallcomesfromoneoftheleadingmediacompanyintheonlineenvironmentandprovidesstronganalysis,reliabletoolsandreal-timereportsforcyber-securitynewsandinformationonthelatestonlinethreats.

    13.TechRepublicTechRepublicprovideslargeresourcesfortheonlineindustry,suchasblogarticles,forums,technicalpapersandsecuritydata.AllthevaluableinformationavailablehelpsITprofessionalsandtechnologyleaderstocomewiththebestdecissionsontheirbusinessprocesses.

    14.ZeroDayTheZeroDaysecurityblogisimportantforallthepeoplewhicharepartoftheIT

  • industryandyoushouldfollowittostayup-to-datewiththelatestsecurityanalysis,softwarevulnerabilities,malwareattacksandnetworkthreats.

    15.SecurosisSecurosisisasecurityresearchandadvisorycompanythatofferssecurityservicesforcompaniesandorganizations.Atthesametime,youcanfindontheirsecurityblogsomeusefularticlesandinsightonmanagingandprotectingonlinedata.

    16.TheGuardianInformationSecurityHubKnownforitsqualityarticlesonworldnews,Guardianoffersasectiondedicatedtoinformationsecurityforcompaniesandindividuals.Tostayup-to-datewiththelatestarticlesandnewsoncybersecurity,makesureyoufollowthissite.

    17.HelpNetSecurityThissecuritysiteisapopularplacefordataandsecuritynewsandyoucanfindherethelatestinformationandarticlesrelatedtotheITindustry.18.TechworldSecurityThesectiondedicatedtosecurityonthissiteanalyzesthelatestmalwarethreatsandzero-dayexploits.Youcanfindhereotherimportanttopicsandsubjects,suchassecurityarticles,how-todocumentsandsoftwarereviews.

    19.FoxITSecurityBlogThissecurityblogisaverygoodsourceofinformationononlinesecurity,technologynewsandcybercrimedefense.20.SCMagazineSCMagazinecomesintheITenvironmentwithtechnicalinformationanddataanalysistofightthepresentonlinesecuritythreats.Theirsiteprovidestestingresultsfore-mailsecurity,mobiledevices,cloudandwebsecurity.

    21.NetworkComputingThecontentofthissecurityblogfocusesoncloudtechnologyandenterpriseinfrastructuresystems.Itspublishedarticlescoversecuritysolutionsonhowtodeliverapplicationsandservicesforanincreasinglylargethreatenvironmentinthebusinessworld,newsandexpertadvice.

    22.InfosecurityMagazineInfosecurityMagazineisanonlinemagazinewhichcoversnotonlysecurityarticlesonpopulartopics,butisalsodedicatedtosecuritystrategy,valuableinsightsandtechnicalapproachesfortheonlineindustry.

    23.SANSInstituteAppSecBlogThissecuritysiteaddressesthegrowingmalwarethreatsintheonlineworldbyprovidingtraining,research,certificationandeducationalresourcesforITspecialists.

  • 24.ThreatTrackSecurityThissecurityblogkeepsyouup-to-datewiththelatestinnovationsanddevelopmentsintheITindustry,fromsecurityexploitstosoftwarevulnerabilitiesandcybercriminalattempts.

    25.CSOOnlineCSOfocusesoninformationtechnology,accessmanagementforenterpriseservers,lossprevention,cybercriminalthreatsandsoftwarevulnerabilities.SecurityblogsfromsoftwareprovidersintheITindustry26.SophossecurityblogNakedSecurityisSophossaward-winningthreatnewsroom,givingyounews,opinion,adviceandresearchoncomputersecurityissuesandthelatestinternetthreats.NakedSecurityistheblogofsecuritycompanySOPHOSandtheplacewhereyoucanfindnews,researchstudies,advicesandopinions.Categoriesrangefrommobilesecuritythreatstooperatingsystemsandmalwarearticles.NakedSecurityisupdatedmultipletimesperdayandreceivesaround1.5millionpageviewspermonth.Ithaswonnumerousawardsanditisconsideredoneofthebestsecurityblogs.

    27.KasperskyLabsThreatPostThreatpostistheleadingsecuritynewswebsitethatispartofTheKasperskyLab.Theirarticlescoverimportantstoriesandrelevantsecuritynewsfortheonlineworld.Theyarerecognizedasanimportantsourceofnewsforonlinesecurityinimportantnewspapersandpublications,suchasNewYorkTimes,USATodayorTheWallStreetJournal.

    28.KasperskyLabsSecurelistSecurelistisasecurityblogrunbyKasperskyLabanditaddressesalargeaudience,providingsomeofthebestsecuritysubjectsoncybercriminalactivitiesanddatastealingmalware.Youcanfindheresecurityinformationthatfocusesonmalware,phishingandotherthreatsfromthecybersecurityworld.

    29.SymantecWeblogSymantecWeblogisasecurityblogfromoneofthebiggestprovidersofsecuritysolutionsworldwide,Symantec.Usingtheirtechnicalknowledgeanddatacollectedalongtheyears,theycomewithstronganalysisreportsandarticlesonsecuritythreats,onlinecriminals,datastealingmalware,systemvulnerbilitiesandmanyothers.

    30.GoogleOnlineSecurityBlogWearesurroundedbyGoogleproductsandservices,fromtheirsearchenginetotheirwebbrowser,soitisnormaltoincludetheirsecuritybloginourlist.Itisareliablesecurityblogandevenmore,areferencepointononlinesecurityandprivacyweneedtoacknowledge.

    31.ZoneAlarmCyberSecurityBlog

  • ThesecurityblogfromZoneAlarm,oneofthewell-knownvendorsofsecurityproducts,providesvaluableinformationonmalwaredefenseandonlinesecurity.Usingtheirexperienceonmalware,thissecuritybloggeneratesmalwarealerts,practicalsecuritytipsandthelatestnewsintheITindustry.

    32.F-SecureSafe&SavvyBlogAsecurityblogfromF-Secure,acompanydedicatedtoonlinecontentandprivacyprotection.Onthissecurityblogyouwillfindhelpfultipsandadvisesonsecurityissues,fromprotectingyourpersonalidentitytokeepingyoursystemsafe.

    33.HotforSecurityThesecurityblogfromBITDEFENDERoneoftheleadingcompaniesononlinesecuritysolutions,coversvarioussubjectsfromtheITworld,fromInternetscams,onlinespamandphishingtomalwareanddatastealingsoftware.

    34.McAfeesecurityblogMcAfeesecurityblogprovidesthelatesttipsandtechniquesfromsecurityexpertstokeepyouup-to-datewiththelatestmalwaretrendsintheonlineenvironment.35.MicrosoftMalwareProtectionCenterTheMicrosoftMalwareProtectionCenteranalyzesdatafromallovertheworldtoprovideinsightandvaluableinformationonfightingonlinethreatsinordertoprotectusersfrommalwareattacksandonlinecrime.

    36.SpiderLabsSecurityBlogInvestigatorsandresearchersatTrustwavecoverthelatesttechnologynewsonthissecurityblog.Gatheringinformationfromresearchandtesting,theypublisharticlesandsecuritystudiestofightonlinehackersandcyber-criminalthreats.

    37.DellSecureWorksThesecurityblogfromDellSecureWorksprovidesthelatestnewsandinformationforITprofessionalsandusersthatneedtostayup-to-datewithonlinethreatsandmalwareattacks.

    38.MalwarebytesSecurityBlogTheMalwarebytessecurityblogarticlescoverthelatestmalwarethreatsandcybercriminalattemptsfromtheonlineworld.Youcanfindtheirarticlesoncategories,fromcyber-crime,exploits,hackingandmalwareanalysis.

    39.TrendMicroSimplySecurityTrendMicroSimplySecuritysiteoffersexpertinsightsoncloudsecurity,datasafety,privacyprotectionandthreatintelligence.40.WeLiveSecurityWeLiveSecurity,theEsetblog,isanonlineresourceforcybersecurityarticlesandthis

  • blogcoversalargenetworkofsecuritytopicsfromemergingonlinethreatstozero-dayexploits.

    41.CSISSecurityGroupBlogThesecurityblogfromCSISSecurityGroupprovidesvaluableinformationonmalwareattacksandonlinethreats.Usingtheinternalresearchdatafromtheirownsecuritylabs,theirstudieshelpusersfightcyber-criminalthreats.

    15ofthebestInternetsecurityblogsInordertokeepuptodate,IscandailyacrossanincrediblenumberofInternetorsecurityfocussednewssitesandblogs.IuseGoogleReadertoaggregatethepostsandfacilitateeasyaccesstothemallinoneplace.Itseems,however,thatthearticlesIdigintoarealwaysfromthesamesites.Idliketoshareahandfulofthosesiteswithyoutoday.Mostyouwillprobablybefamiliarwith,thoughsomemaybeunknown.IdhighlyrecommendaddingthemalltoyourRSSreaderifyouhaveone.

    Thesitesarepresentedinalphabeticalorder.Ivechosen15intotal.DarknetTheDarksideDarknetwaslaunchedin2006butitsoriginslieinanetworkoffriendsthatfirstformedonEFNetIRCin1999.WiththetaglineDontlearntoHACK,hacktoLEARN,thesiteisnowablogthatcoversEthicalHacking,PenetrationTestingandComputerSecurity.Itfeaturesexcellenttoolreviews,analysisofnewvulnerabilitiesandcommentontopicsinthepress.

    DarkReadingDarkReadingisasecuritydashboardforITprofessionalswhodonthavethetimeortheluxuryofcombingwirefeeds,multiplebugfeeds,orvendorWebsitestofindoutwhatsneworhowwellitworks.ItcombinesuptotheminutenewsfromavarietyofsourceswithexcellentanalysisfromaseriesofblogsliketheexcellentEvilBytesbyJohnSawyer.

    DanchoDanchevDanchoDanchevsblogcontainsindepthtechnicalanalysisofthelatesttechnicalsecuritytrendsandmalwarethreats.Danchevisaspecialistinopen-sourceintelligence(OSINT),gatheringintelligencefromthewebonthepersonalitiesbehindcurrentthreats.Healsospecialisesinsarcasm.DanchevalsocontributestoZDNetsZeroDayblogwithRyanNarainefromThreatpost(seebelow).

    TheFirewallatForbesWevebeenfollowingOpenSourceIntelligence(OSINT)expertJeffreyCarrthroughanumberofhisproject.HeauthoredanextremelyinsightfulblogIntelFusionbeforelaunchingtheGreyGooseProject,aninitiativethatinvestigatedinstancesofstate-on-statecyberwarfarebyfusingallavailableopensourceintelligence.Wiredcoveredthelaunchofthereport.Havinglaunchedacommercialconsultancyoffthatbackofthatwork,he

  • hasswitchedhisbloggingeffortstoTheFirewallblogatForbes,wherehejoins54othercontributors.Theblogisanewsservicewithastrongfocusongovernment,particularlycybersecurityasatoolofforeignpolicy.

    F-SecureWeblogMikkoH.HyppnenistheChiefResearchOfficeratInternetsecurityfirmF-Secure.Histeamofsecurityresearcherspersonnelresponsibleforanalyzingvirus,phishing,spyware,andspamattackscontributetotheF-SecureWeblog.Thetopicscoveredarebroadtools,techniques,botnetanalysis,commentandallthepostsareeasilyaccessiblefornon-technicalreaders.

    JeremiahGrossmanJeremiahGrossman,aformerITSecurityOfficeratYahoo!,istheFounderandChiefTechnologyOfficerofspecialistwebsitesecurityconsultancyWhiteHatSecurity.Grossman,atechnicalresearchanddevelopmentspecialist,isaregularspeakeratindustryeventsandisaleadingcommentatorinthemainstreammedia.Hisblogarticlesarebasedonhiscutting-edgetechnicalanalysisofwebbrowserandwebsitevulnerabilities.

    PaulDotComNoreadinglistwouldbecompletewithoutreferencetoPaulAsadoorianandcompanyoveratpauldotcom.com.Aweeklypodcastratherthanablog,PaulDotComfeaturesthelatestnews,indepthtechnicalsegmentsandplentyofhumour(andbeer).HeisjoinedbyLarryPesce,JohnStrand,MickDouglasandCarlosPerez.

    RationalSurvivabilityAregularkeynotespeakerandindustrycommentator,ChrisHoffspecialisesinemerginganddisruptiveinnovationandwhatitmeanstosecurity.AtthemomentthatmeansCloudSecurityandVirtualisation.Infact,HoffiscurrentlyDirectorofCloud&VirtualizationSolutionsoftheSecurityTechnologyBusinessUnitatCiscoSystems.RationalSurvivabilityisessentialreadingforanyteammakinguseofemergingtechnologiesintheenterpriseandwhowantstounderstandtherisksassociatedwiththem.

    Hisbioisworthareadtoo.SANSInternetStormCenterTheInternetStormCenterisaSANSprojectthathasbeenrunningsince2001havingbeenformalisedfollowingthesuccessfuldetection,bySANSIncidentHandlers,oftheLi0nworm.Thehandlershadisolatedthewormandbegunanalysiswithin3hoursoftheoutbreak,andhadreleasedadiagnostictoolandinformedtheFBIwithin14hours.Withthissuccessasitsjustification,theISCwascreatedwitharemittospotsimilarattacksandprovideaglobalwarningservice.TheISCDiaryispopulatedwiththereal-timeanalysisofthevolunteerdutyhandlerswhomonitorfeedscominginfromSANSDShieldworldwidesensornetwork.

    SchneieronSecurity

  • BruceSchneieristheauthorofAppliedCryptography(and10otherinternationallybestsellingbooks),creatoroftheBlowfishencryptionalgorithm(whichhasneverbeenbroken),authoroftheCrypto-gramnewsletter(with150,000subscribers),aregularcontributortoWiredMagazineand,ifallthatisnotenough,isalsoChiefSecurityTechnologyOfficerforBritishTelecom.Schneierdescribeshisinterestsasanevolvingseriesofgeneralisationsfrommathematicalsecuritytocomputersecurity,fromcomputersecuritytogeneralsecurityandnowtothepsychologyofsecurity.SchneieronSecuritycontainsessays,commentandlinkstointerestingarticleselsewhereontheweb.Itshouldbeatthetopofyourlist,withnoexceptions.

    SecurelistSecurelist(formerlyviruslist)isawebsitemanagedbyanti-virusvendorKaspersky.Itcontainsarticlesoutliningcommonthreats,indepthanalysisofmalware,viruses,theundergroundeconomyandtrends,andaregularlyupdatedblog.Anybodycancontributetotheblog,butyouhavetohaveover100points,gainedthroughsubmittingcommentsthatarevotedforbyreaders.ThereisalsoarefreshinglytechnicalPDFmagazineSecureViewthatcanbedownloadedfromthesite.

    SecurosisSecureosisisacommercialconsultancyspecialisingininformationsecurityresearchandstrategy.TheirblogcoversabroadrangeofsecuritytopicsandfeaturesareallyusefulFridaysummarywithlinkstofavouritewebcasts,podcasts,blogarticles,researchreportsandnewsarticlesfromthepreviousweek.

    TAOSecurityRichardBejtlichistheauthorofTheTAOofNetworkSecurityMonitoring,wherehelaysoutaholisticapproachtomonitoringanetworkforsecurity.Hisblogspecialisesinincidentresponseandnetworkforensics,thoughhealsowritesregularlyoncyberweaponsandcyberwarfare.

    ThreatpostThreatpostisanewsserviceofferedbyKasperskyandismanagedbyDennisFisherandPaulRoberts,ablyassistedbyRyanNaraine.TheThreatpostteamscourthewebforthelateststoriesandaggregatethemintoasinglefeedofnewsandexpertcommentary.ThesiteoffersserviceinEnglish,SpanishandPortugese.

    ZeroInABitZeroInABitistheZeroDayLabsBlogfromVeracode,anInternetRiskManagementconsultancy.Itisntupdatedveryregularly,butwhenitis,thearticlescoverabroadrangefromlegalandcomplianceissuestomobilemalware.

    Top100+CyberSecurityBlogs&InfosecResources#1CIOResourcesrelatedtoinformationsecurity,includingnewsandopinionandmoreon

  • softwareandapplicationflawsandfixes,databreaches,theinsidethreatthelatesthackerattacks.

    #2TechRepublicSecurityTechRepublichelpsITdecision-makersidentifytechnologiesandstrategiestoempowerworkersandstreamlinebusinessprocesses.Theirsecuritysectiondivesintothelatestthreatssurroundingcybersecurity.

    #3USCertUS-CERTsmissionistoimprovethenationscybersecurityposture,coordinatecyberinformationsharing,andproactivelymanagecyberrisks.#4WiredsThreatLevelPrivacy,crime,andonlinesecurityarethetopicsthatcarrytheheadlineshere.Youllfindeverythingfromopinionatedpieces,tothelatestthreatalerts.#5ZeroDayfromZDNetStayingontopofthelatestinsoftware/hardwaresecurityresearch,vulnerabilities,threatsandcomputerattacks.TheZeroDayblogonZDNetisamustforanyonekeepingtrackoftheindustry.

    #6CERIASSecurityBlog

    TheCenterforEducationandResearchinInformationAssuranceandSecurityblogiswhereGeneSpaffordshareshisexpertise.Itscalledthecenterformultidisciplinaryresearchforareason.

    #7CSOOnline

    Areasoffocusincludeinformationsecurity,physicalsecurity,businesscontinuity,identityandaccessmanagement,losspreventionandmore.

    #8DarkReading

    DarkReadingisacomprehensivenewsandinformationportalthatfocusesonITsecurity,helpinginformationsecurityprofessionalsmanagethebalancebetweendataprotectionanduseraccess.

    #9GoogleOnlineSecurityBlog

    ThisisGooglesownsecurityblog,whichfocusesonallofthelatestdevelopmentsinthesecurityworld.GetthelatestnewsandinsightsfromGoogleonsecurityandsafetyontheInternet.

    #10RedTapeChronicles

  • NBCNewsRedTapeChroniclesbringsyounewsstoriesandinformationonthelatestdevelopmentsinthecybersecurityspace.Findtopicsthatrangefromprivacytosecurity.

    #11InformationWeekSecurityYoucanexpectallofthelatestnewsandzerodayalertsfromthisITsecuritynewssite.Thecontentisupdateddailyandisamajornewssourceforeverythingtodowithcybersecurity.

    #12InternetStormCenterTheInternetStormCentergathersmillionsofintrusiondetectionlogentrieseveryday,fromsensorscoveringover500,000IPaddressesinover50countries.#13SchneierOnSecurityBruceSchneierisaninternationallyrenownedsecuritytechnologist,andcalledasecuritygurubyTheEconomist.Heknowshisstuffandisavoiceinthecybersecurityindustry.

    #14SecurelistCyberSecurityBlogThisisanotherKasperskyLabwebpropertythatfocusesonmalware,phishing,andthecybersecurityindustry.Thereisnoshortageofinformationandnewsonwhatshappeninginthecyberworld.

    #15SymantecWeblogTheSymantecWeblogusesglobalresearchtoprovideunparalleledanalysisofandprotectionfrommalware,securityrisks,vulnerabilities,andspam.#16TheGuardiansInformationSecurityHubTheGuardianisarespectful,globalmediacompanythathighlightsissuesacrossmanyareas.TheirInformationSecurityHublivesuptothecoveragetheyofferinotherareasandfocusesonsecurity.

    #17ZoneAlarmCyberSecurityBlogInformationonmalwareandprotectingyourselfonline.Frommalwarealertstopracticalonlinesecuritytips,theZoneAlarmblogwillkeepyoubriefedonthelatestindustrynews.

    #18BHConsultingsSecurityWatchBlogBHConsultingsSecurityWatchBlogwasformedtoregular,informedwithcontentdetailingeverythingyouwouldwanttoknowaboutinformationsecurityandwebthreats.

    #19ContagioMalwareDumpContagioisacollectionofthelatestmalwaresamples,threats,observations,andanalyses.Getinformed,technicaleducationonthenewestformsofmalware.#20CyberCrime&DoingTimeCyberCrime&DoingTimeiaablogaboutcybercrimeandjusticerelatedissues.GaryWarnerfromMalcoveryownsthisblogandoffersupeducationalandengagingpostson

  • thelatestthreats.

    #21DavidLaceysITSecurityBlogDavidLaceysITSecurityBlogoffersthelatestideas,bestpractices,andbusinessissuesassociatedwithmanagingsecurity.TheblogishostedonComputerWeekly.com.

    #22DellSecureWorksDellSecureworksSecurity&Complianceblogisdedicatedtoprovidingup-to-datenewsandinformationtohelpITprofessionalsandotherskeeptheirbusinesssecureonline.

    #23F-SecureSafe&SavvyBlogSafeandSavvyblogsabouthowtoprotectyouronlinelifeandtheirreplaceablecontentonyourcomputer.Theywriteaboutreal-lifeexperienceswhileprovidinghelpfultipsonsecurityissues.

    #24FoxITSecurityBlogInformationtechnologyisthemaintopicontheFoxITsecurityblog.Fromnewstoopinions,FoxITprovidesexcellentcontentforanyoneinterestedintechnologyandsecurity.

    #25FortinetBlogTheFortinetcybersecuritybloghassomethingforeveryone.Therearearticlesonsecurityresearchandindustrytrends,aswellas,ahealthysectionfocusingentirelyonSecurity101.

    #26HelpNetSecurityHelpNetSecurityhasbeenaprimeresourceforinformationsecuritynewssince1998.Thesitealwayshostsfreshcontentincludingarticles,newproductreleases,latestindustrynews,podcastsandmore.

    #28InfosecurityMagazineWhatmorecanyouaskfor?Itsanonlinemagazinededicatedentirelytothestrategy,insight,andtechniquesthatareadailypartofthecybersecurityindustry.#29KrebsOnSecurityBrianKrebsisthefaceofcybersecurityjournalism.AsaformerwriterfortheWashingtonPost,Krebsisabletotakeisskillsasaninvestigativejournalisttothetaskandprovidethemostin-depthcoverageofsecurity.

    #30MalwarebytesMalwarebytesisattheforefrontofmalwareprotection,whichmakesthistheperfectblogtostayup-to-datewiththelatestzerodaythreatsandcybersecuritynews.#31McAfeeSecurityBlog

  • TheMcAfeesecurityblogtalksaboutresearchandthreatanalysis,aswellas,providesknowledgeableinsightintomalwareandzerodaythreatsthatplaguebusinessesandconsumers.

    #32MicrosoftMalwareProtectionCenterTheMicrosoftMalwareProtectionCenter(MMPC)iscommittedtohelpingMicrosoftcustomerskeeptheircomputerssecure.TheMMPCstaysagiletocombatevolvingthreats.

    #32NakedSecurityNakedSecurityisSophossaward-winningthreatnewsroom,givingyounews,opinion,adviceandresearchoncomputersecurityissuesandthelatestinternetthreats.

    #33NetworkComputingNetworkComputingscontentadherestothevaluableForIT,ByITmethodology,deliveringtimelystrategy&tactics,news,in-depthfeatures,expertreviews,andopinionatedblogs.

    #34SANSInstituteAppSecBlogSANSSoftwareSecurityfocusesthedeepresourcesofSANSonthegrowingthreatstotheapplicationlayerbyprovidingtraining,certification,research,andcommunityinitiatives.

    #35SCMagazineSCMagazinearmsinformationsecurityprofessionalswiththein-depth,unbiasedbusinessandtechnicalinformationtheyneedtotacklethecountlesssecuritychallengestheyface.

    #36SearchSecuritySearchSecurityprovidesimmediateaccesstobreakingindustrynews,virusalerts,newhackerthreatsandattacks,securityandcertificationtrainingresources.#37SecuringTheHumanSANSisthemosttrustedandbyfarthelargestsourceforinformationsecuritytrainingandsecuritycertificationintheworld,whichmakestheirblogamustreadforsecurityprofessionals.

    #38SecurityWatchNeilRubenkingheadsthechargeonPCMagsSecurityWatch.Hisstyleiswittyandhepostfrequently,soyoullalwaysfindsomethingworthwhiletoread.#39StopBadwareBlogStopBadwareisanonprofitanti-malwareorganizationwhoseworkmakestheWebsaferthroughtheprevention,mitigation,andremediationofbadwarewebsites.#40SucuriBlogSucuriknowsallaboutmalwareandWordPresssecurity.Itswhattheydo.Youllfindno

  • shortageofexpertadviseonhowtosecureyourWordPresssiteandkeepitmalware-free.

    #41TaoSecurityRichardBejtlichsblogondigitalsecurity,concentratingonglobalchallengesposedbyChinaandothertargetedadversaries.Definitelyablogthathasbeenafixtureinthesecuritycommunity.

    #42TechworldSecurityThecybersecuritysectiononTechworld.comcoversnewsonthelatestthreatsandzero-dayexploits.Theyalsoofferanabundanceoftopicsrangingfromsecuritytohow-tos,aswellas,technologyreviews.

    #43TheHoneynetProjectTheHoneynetProjectmembersengagethebroadersecuritycommunityandeducatethepublicaboutthreatstosystemsandinformation.#44ThreatpostThreatpost,TheKasperskyLabsecuritynewsservice,isanindependentnewssitewhichisaleadingsourceofinformationaboutITandbusinesssecurityforhundredsofthousandsofprofessionalsworldwide.

    #45ThreatTrackSecurityThreatTrackSecuritysITbloghasitsthumbonthepulseoftheindustry.WhetheryouareintheITindustryornot,ifyouareinterestedinsecurity,thisblogisforyou.#46TrendMicroSimplySecurityTrendMicroSimplySecurityoffersindependentnewsandviewsaswellasexpertinsightfromTrendssecurityexperts.Thesitecoverstopicsrangingfromcloudsecurity,dataprotection,securityandprivacy.

    #47VeracodeBlogVeracodeSecurityBlog:Applicationsecurityresearch,securitytrendsandopinions.Everythingyouwanttoknowaboutifyouworkininfosecoronline.#48UnmaskParasitesBlogUnmaskParasitesfocusesonreviewingthelatestsecuritythreats,zerodays,andexploits.Thereiseverythingfromsecurity-relatednews,toinformationonkeepingyoursitesecureandmalware-free.

    #49WeLiveSecurityWeLiveSecurityisasiteaboutresearchandinformation,notproducts.WeLiveSecurityswritersrepresentthecreamofESETsresearchersandwriters.Theydeliverin-depthresearchandanalysisonsecurity.

    #50XyliboxSecurityBlogTrackinganddemystifyingcybercrimeiswhathappenshere.Theauthorneverfailsto

  • produceconsistent,detailedbreakdownsofthelatestmalwareandsecuritytools.PR5#51BankInfoSecurityBankInfoSecurityisamulti-mediawebsitepublishedbyInformationSecurityMediaGroup,Corp.(ISMG),acompanyspecializingincoverageofinformationsecurity,riskmanagement,privacyandfraud.

    #52CyveillanceBlogFromsophisticatedDDoSbotnetattackstophishing,theCyveillanceblogwillkeepyouup-to-datewithbreakingcybersecuritynewsandinformationoneverythingrelatedtowebthreats,malwareandsecurity.#53ForbesFirewallForbesFirewallcoverscybersecuritynewsandinformationonthelatestexploitsandtrendsaffectingtheindustry.Thearticlesareonpointandinformative,withthequalityyoucanexpectfromForbes.

    #54GovInfoSecurityGovInfoSecurityisamulti-mediawebsitepublishedbyInformationSecurityMediaGroup,Corp.(ISMG),acompanyspecializingincoverageofinformationsecurity,riskmanagement,privacyandfraud.

    #55GrahamCluleysSecurityBlogGrahamCluleyisanawardwinningcybersecuritybloggerandindependentcomputersecurityanalyst.Hisblogreflectshisknowledgeandexperienceintheindustry.

    #56GRCsSecurityNowPodcastSecurityNowisaweeklypodcasthostedbySteveGibsonandLeoLaporte.TheshowissponsoredbyGibsonResearchCorporation,acompanyspecializingindatarecoveryandsecurity.

    #57HotforSecurityThisblogcoversthesizzlingworldofcomputersecurity.Youllfindplentyofsteamystoriesfromthedynamicworldofinternetfraud,scams,andmalware.#58ImpervaBlogFromanalystreportstocasestudies,toblogpostsandwhitepapers,theImpervablogkeepsstepwiththelatestmalwareandsecuritythreats.YoullfindinformationonDDoS,malware,andzerodaythreats.

    #59ITKnowledgeExchangeSecurityBytesWrittenbythestaffofSearchSecurity.comandInformationSecuritymagazine,SecurityBytescoverstopicsacrossthespectrumofsecurity,privacyandcompliance.#60ItProPortal.comITProPortal.comwasoneoftheveryfirsttechnologywebsitestolaunchintheUKbackin

  • 1999andhasgrowntobecomeoneoftheUKsleadingandmostrespectedtechnologyinformationresources.

    #61LennyZeltserOnInformationSecurityThisblogbyLennyZeltserfocusesoninformationsecurity.Lennyisabusinessandtechleaderwithextensivehands-onexperienceinITandinformationsecurity.#62NetworkSecurityBlogwithMartinMcKeayOnemansviewsonsecurity,privacyandanythingelseforthatmatter.Trends,information,news:youllfinditallontheNetworkSecurityblog,andwhatsmoreisitsdeliveredwithstyle.

    #63PandaLabsCyberSecurityBlogThisblogcoverseverythingyouneedtoknowaboutinternetthreats.ThePandaLabsblogkeepsyouabreastofthelatestdevelopmentsincybersecurity.#64PaulDotComPaulDotComSecurityweeklysmissionistoprovidefreecontentwithinthesubjectmatterofITsecuritynews,vulnerabilities,hacking,andresearch.#65Privacy&InformationSecurityLawBlogTheviewsofonemanonsecurity,privacyandanythingelsethatcatcheshisattention.SecurityexpertMartinMcKeaytalksaboutmalware,privacyandsecurityonthisblog.

    #66RationalSurvivabilityHoffsramblingsaboutinformationsurvivability,informationcentricity,riskmanagementanddisruptiveinnovation.HoffwasaCISSP,CISA,CISMandNSAIAM,henowspendstheAMFmoneyoncoffee.

    #67RiskyBusinessRisky.bizisanothersecuritypodcastthatfocusesoncoveringrecentdevelopmentsincybersecurityandthethreatlandscape.Theshowhasbeenaroundsince2007,andtakesalightapproachtosecuritynews.

    #68RootLabsRDISTTheirresearchprovidescutting-edgeinsightintosolvingtoughsecurityproblems.Therearecountlessarticlesonthelatestcybersecuritytrendsandthreats.#69SeculertBlogTheSeculertblogisasecurityblogwithafocusonAdvancedPersistentThreatsandmalware.Thereisnoshortageofnetworksecuritytipsandinsiderinformationonthelatestzerodays.

    #70SecurityStreetbyRapid7Rapid7providesvulnerabilitymanagement,complianceandpenetrationtestingsolutionsforwebapplications,networkanddatabasesecurity.Theircommunity,SecurityStreetcoversalloftheseissues.

  • #71SecurosisBlogSecurosisistheworldsleadingindependentsecurityresearchandadvisoryfirm,offeringunparalleledinsightanduniquevaluetomeetthechallengesofmanagingsecurityandcomplianceinaWeb2.0world.

    #72SilverSkyAltitudeBlogSilverSkyisacloudsecurityservicesproviderwithalotofknowledgeintheindustry.Theirblog,theAltitudeblog,isupdatedregularlywithnewsandinformationeverysecurityprofessionalshouldbeawareof.

    #73SpiberLabsSecurityBlogSpiderLabsisaneliteteamofethicalhackers,investigatorsandresearchersatTrustwaveadvancingthesecuritycapabilitiesofleadingbusinessesandorganizationsthroughouttheworld.Thesitecoversthelatestsecuritynews.

    #74Social-Engineering.orgSocial-Engineering.orgisacybersecurityblogthatcoversawiderangeofsecurityrelatedtopics.Thesiteisalsohometoapodcastandateamofsecurityprofessionalswhosharetheirexpertiseonallthingssecurity.

    #75TheSecuritySkepticTheSecuritySkepticblogsaboutallmattersrelatedtoInternetSecurity,fromdomainnames(DNS),firewallsandnetworksecuritytophishing,malwareandsocialengineering.

    #76ThoughtCrimeCyberSecurityBlogMoxieMarlinspikesblogcoverscomputersecurityandsoftwaredevelopment,particularlyintheareasofsecureprotocols,cryptography,privacy,andanonymity.#77TroyHuntsBlogSoftwarearchitectandMicrosoftMVP,youllfindTroyHuntwritingaboutsecurityconceptsandprocessimprovementinsoftwaredelivery.Thequalityofcontentfoundheremakesthisblogworthvisiting.

    #781RaindropGunnarPetersonweaveshisthoughtsondistributedsystems,security,andsoftwaretogetheronhisblog1Raindrop.Theblogisbothinformativeandinsightful,andthecoverageisonpoint.

    #79AndrewHaysCyberSecurityBlogAndrewHayistheDirectorofAppliedSecurityResearchandChiefEvangelistatCloudPassage,Inc.Thisishispersonalblogwherehetalksaboutsecurityandothernews.

    #80CarnalOwnage

  • CarnalOwnageisamuststopforsecurityresearchersandhackersalike.Thiscybersecuritybloggoesintoexcruciatingdetailonattackmethodologyandhighlightsthethreatsyourorganizationshouldbeawareof.

    #81CommandLineKungFuThisblogcoversfun,useful,interesting,securityrelated(andnon-securityrelated)tipsandtricksassociatedwiththecommandline.FindtipsonOSX,LinuxandWindows.

    #82DanchoDanchevsBlogThisblogcoverstrendsandfads,tacticsandstrategies,intersectingwiththird-partyresearch,speculationsandreal-timeCYBERINTassessments,allpackedwithsarcasticattitude.

    #83DarknetDontLearntoHACKHacktoLEARN.That`sthemottoatDarknet.Thesitecoversethicalhacking,penetrationtesting,andcomputersecurity.Learnaboutinterestinginfosecrelatednews,toolsandmore.

    #84ErrataSecurityErrataSecurityisateamofdedicatedsecurityresearchersthatpracticeoffensivesecurity.Theinsightgainedfromresearchisdeliveredontheblog,whichcoversavarietyoftopicsandrealworldscenarios.

    #85ExoticLiabilityChrisNickersonandRyanJonestakeitupanotchintheircybersecuritypodcast.Theyroutinelythumbtheirnoseatthetypicalindustryrhetoricandofferinsightandcommentaryyouwonthearanywhereelse.

    #86HackSurferHackSurferwasformedbyagroupofbusinessmenandwomen,engineers,mathematicians,linguistsandinformationanalystswithapassionformakingsimple,powerfuluseofbigdata.

    #87InfoSecInstituteResourcesTheInfoSecInstituteresourcessectionhasabroadselectionofcontentandresearchoncybersecurity,threats,andofcourse,infosec.Youllalsofindtutorials,trainingvideosandmore.

    #88J4vv4DSecurityBlogJavvadMalikhasworkedininformationsecurityforhisentirecareerandcoversdifferentaspectsofsecurityonhisblog,J4vv4D.HealsoregularlyoffershisinsightthroughentertainingandinformativeYouTubevideos.

    #89LiquidMatrix

  • Inaworldthatseemstobelosingthenotionofjournalism,LiquidmatrixSecurityDigestremainscommittedtolongformarticlesthatdigintothemajorissuesaffectingtheindustrywithFeaturearticles.

    #90MalcoverySecurityBlogThisisMalcoverySecurityscontributiontotheknowledgebaseofinformationsecurityissues.Theyproviderelevantinsightandopinionsonallofthenewestthreatsfacedbytheindustry.

    #91MalwareDontNeedCoffeeMalwareDontNeedCoffeeisacybersecurityblogthatfocusesonmalwareresearchandprovideseducatedcommentaryonallthelatestexploitsandsecuritybugs.Thesitecoversresearchinallareasofnetworksecurity.

    #92McGrewSecurityBlogWesleyMcGrewunderstandssecurityandthenatureoftodaysdigitallandscape,especiallyitsimpactoninfrastructureandbusinesssecurity.Hisblogcoversalloftheimportantcybersecuritystuff.

    #93NetworkSecurityPodcastSince2007,theNetworkSecurityPodcasthasbeendishingoutthedirtoncyberthreatsandsecurityissuesfacedbytheindustry.Itsagreatresourceifyouwanttohearadiscussiononwhatshappeningininfosec.

    #94NewSchoolSecurityThisblogisinspiredbythebookandthemovementtowardsaNewSchool.TheNewSchoolofInformationSecurityisabookbyAdamShostackandAndrewStewart,publishedin2008.

    #95NoVAInfosecFoundedinJanuaryof2008onaSaturdayevening,NovaInfosec.comisdedicatedtothecommunityofNorthernVirginia-,Washington,DC-,andsouthernMarylandbasedsecurityprofessionals.

    #96PacketPushersPodcastThePacketPushersPodcastoffersdeeplytechnical,hardcorediscussionsonthelatestsecuritytrends.Co-hostsGregFerroandEthanBanksleadtheshowwiththeirmanyyearsofnetworkengineering.

    #97SecurityAffairsPierluigiPaganiniisacompanydirector,researcher,securityevangelist,securityanalystandfreelancewriter.HisblogSecurityAffairsstaysabreastofallthelatestincybersecurity.

  • #98SecurityBistroSecurityBistroiswheresecurityexpertscometogetherforgoodtalk,informationonthelatestingeniousthreatsand,onehopes,thelatestcleverwaystocounterthem.#99SecurityGeeksFindtipsoncomputersecurity,choosingapasswordproperly,andotherpracticalonlinesecuritytips.Noshortageofinterestingcontentcirclingthetechnologyspacehere.#100SecurityMusingsGeminiSecuritySolutions,Inc.isaninformationsecurityconsultingfirmthatappliescreativity,passion,andinsighttodefendagainsttodaysgrowingthreats.Theirblog,SecurityMusings,coverseverythingsecurity.

    #101SecurityUncorkedJennifer(Jabbusch)MinellaakaJJisanetworksecurityengineerandconsultantwith15yearsofexperience.Shesharesherknowledgeoninfoseconherblogandoffersplentyofinformationonthelatestsecuritytrends.

    #102S!Ri.URZThisbloghasbeenonthecybersecurityscenesinceasfarbackas2006.Theblogcoversmalware,rogues,ransomewareandeverythingelserelatedtocybersecurity.#103TheAShimmyBlogStillSecureAfterAllTheseYears.com(yes,areallylongdomain!)istheAShimmyBlog,AlanShimelspersonalbloggerblogonsecurity,work,andfamilylife.#104TheFalconsViewBenTomhaveisasecurityprofessionalthathasservedtheindustryinavarietyofrolesandsecuritypositions.Thisisreflectedinhiswritingandtheknowledgesharedonhiscybersecurityblog.

    #105TheHarmonyGuyYoullfindlinksandcommentaryrelatedmostlytoonlineprivacyandsecurity,particularlywithsocialnetworking.Theblogstartedbackin2007andhasbeengoingeversince.#106TheSouthernFriedSecurityPodcastTheSFSPodcastisdesignedtobeaninformationsecuritypodcastthatfillsthegapbetweentechnicalsecuritypodcastsandSecurityNow.Thispodcastoffersrespectfulinsightonthestateofsecurity.

    #107UncommonSenseSecuritySmallbusinessinformationsecurityhasbeenanoxymoronfortoolong.UncommonSenseSecurityisattemptingtochangethat.Theblogisentertaining,andinformativeatthesametime.

    #108AndyEllisProtectingABetterInternet

  • AndyEllisistheChiefSecurityOfficerofAkamaiTechnologies.Opinionsherearemostlyhisown.Hisblogdivesintotheissuescenteredaroundcybersecurityandtechnology.

    #109DHSDailyReportAU.S.ArmyRetiredChiefWarrantOfficerwithmorethan40yearsininformationtechnologyand35yearsininformationsecurityleadsthechargeonthisblog,offeringdailynewsontheindustry.

    #110ITSecurityExpertbyDaveWhiteleggTheUKbasedITSecurityExpertblogbyDaveWhiteleggCISSPCCSPprovidinggeneralInformationSecurityadvice&helpinsecuringthehomePC&homecomputeruser,aswellasbusinessITsystems.

    #111ITSpecialistAvirtualcommunityofsocialnetworksforITprofessionalslocatedthroughouttheworld.Agreatwaytoconnectandcollaboratewithothersinthecybersecurityindustry.

    #112MichaelPeters.orgMichaelD.Petershasbeenanindependentinformationsecurityconsultant,executive,researcher,author,andcatalystwithmanyyearsofinformationtechnologyandsharesthatinformationonhissite.

    #113RivalhostSecurityBlogRivalhostisaDDOSmitigationcompanyandwebhostthattakesanactivestanceonupdatingtheircustomersandcommunitywithamixoftopicsontechnology,cybersecurity,andDDOS.

    #114Rud.isSecurityBlogThisisaplacetocatchsomeopinesonaprettyweirdcombinationoftopics.YoulllikelyseetopicsrangingfromIT/InformationRiskManagementtoiOS,Node.js,andeverythingin-between.

    #115SecurityXplodedBlogSecurityXplodedthecommunitydivisionofXenArmorisapopularInfosecResearch&Developmentorganizationofferingfreesecuritysoftware,latestresearcharticlesandfreecybersecuritytraining.

    #116ThomLangfordsPersonalSecurityBlogAninformationsecurityprofessional,awardwinningblogger,andindustrycommentator.ThomLangfordtalksabouttopicsrelatingtoinformationsecurity,riskmanagementandcompliance.

    #117W.MarkBrooksITSecurityBlog

  • OnhiscybersecurityblogBrookstalksaboutmitigatingrisksandbusinessstrategiesastheyrelatetoIT.Thereisneveradullpostandtheauthorfindsplentyofinterestingsecuritytopicstodissect.

    #118EthicalHackingEhacking.netexploresethicalhacking,penetrationtesting,andhacking.YoullalsofindawealthoftutorialsonBackTrackandotherpenetrationtestingtips.Anidealsiteforinformationsecurityresearchers.

    #119ITSecurityColumnAnITsecurityblogthatfeaturesgeneralknowledgeofITsecurity,onlinecrimenews,andtipsonhowtodealwithonlineandcomputerthreats.Plus,listingsofinformationsecuritythreatsanddefenses.

    #120KevinTownsendsCyberSecurityBlogThissiteisaboutcomputerandinformationsecurity.ItismaintainedbyKevinTownsend,theoriginalfounderofITsecurity.comandafreelancejournalistandwriterwithmorethan10yearsexperience.

    #121PsilvasPropheciesPeterSilvacoverssecurityforF5NetworksTechnicalMarketingTeam.Withhistheatrebackgroundandknowledgeofsecurityhisblogmakesforaninterestingpitstopforsecuritynews.

    #122WebsenseSecurityLabsWebsenseSecurityLabsdoesagreatjobofsharinginformationandinsightonthelatestcybersecuritynews.Theirbloghasbeenaroundsince07.Thereisplentyofmaterialtodigthroughforresearch.

    #123DDoSProtection&CyberSecurityBlogAblogthatcentersaroundthethreatposedbydistributeddenialofservice(DDoS)attacks.Youllfindanewssectionthatoffersasnapshotofthelatestsecuritytrends,aswellas,epicpostshighlightingtheindustry.

    #124DaveWatersononSecurityDaveWatersonisanexperiencedITsecuritytechnologist,inventorofpatentedandpatent-pendingsecuritytechnologyintheanti-keyloggingandanti-phishingfields.#125FollowingTheWh1t3RabbitRafalLoshasbeenworkinginthedefensivesideofsecurityforover10years.Hisblog,FollowingTheWh1t3Rabbit,focusesonclearingtheconfusionaroundsecurityandofferingtoolstoimprovesecurity.

    #126FireEyeBlog

  • FireEyehasinventedapurpose-built,virtualmachine-basedsecurityplatformthatprovidesreal-timethreatprotection.FireEyehasbeencalledahotsecurityfirmtheirblogbacksthatup.

    #127HowTheyHackHowTheyHackisageneraltechblogsurroundingthemesrelatedtohackingandnetworksecurity.Mostofthepostsarecenteredaroundtutorials,hackingnews,securityexploitsandtheauthorsopinions.

    #128Technology.infoTechnology.infocombinesthebestofITProPortal.comandIPEXPO,offeringaresourceforITprofessionalsandthoseinterestedinsecurity.Theboastsawidevarietyofinformationsecurityresearchandtopics.