Topics /

21 Best Security RSS Feeds in 2026

21 feeds from 21 sites tagged “security”, ranked by how many people follow each one in their readers, how often it posts and how recently. The list moves as the feeds are checked, every few hours at least.

  1. 1DEV Communitydev.to · about 3616 posts a weekThe most recent home feed on DEV Community.Last post 9 Nov
    Website
  2. 2Lobsterslobste.rs · about 130 posts a weekLast post 9 Nov
    Website
  3. 3The Registertheregister.com · about 84 posts a weekArticles from www.theregister.comLast post 9 Nov
    Website
  4. 4The Hacker Newsthehackernews.com · about 62 posts a weekMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comLast post 9 Nov
    Website
  5. 5Help Net Securityhelpnetsecurity.com · about 50 posts a weekDaily information security news with a focus on enterprise security.Last post 9 Nov
    Website
  6. 6CVE-20XX-?: newest critical and exploited CVEscve-list.com · about 184 posts a weekLast post 9 Nov
    Website
  7. 7BleepingComputerbleepingcomputer.com · about 44 posts a weekBleepingComputer - All StoriesLast post 8 Nov
    Website
  8. 8The New Stackthenewstack.io · about 39 posts a weekLast post 8 Nov
    Website
  9. 9SecurityWeeksecurityweek.com · about 38 posts a weekCybersecurity News, Insights & AnalysisLast post 9 Nov
    Website
  10. 10Dark Readingdarkreading.com · about 26 posts a weekPublic RSS feedLast post 6 Nov
    Website
  11. 11Security Affairssecurityaffairs.com · about 26 posts a weekRead, think, share … Security is everyone's responsibilityLast post 9 Nov
    Website
  12. 12The Record from Recorded Future Newstherecord.media · about 24 posts a weekThe Record by Recorded Future News gives exclusive, behind-the-scenes access to leaders, policymakers, researchers, and the shadows of the cyber underground.Last post 6 Nov
    Website
  13. 13CyberScoopcyberscoop.com · about 16 posts a weekLast post 6 Nov
    Website
  14. 14SANS Internet Storm Centerisc.sans.edu · about 10 posts a weekSANS Internet Storm Center - Cooperative Cyber Security MonitorLast post 9 Nov
    Website
  15. 15Schneier on Securityschneier.com · about 6 posts a weekLast post 6 Nov
    Website
  16. 16Graham Cluleygrahamcluley.com · about 3 posts a weekCybersecurity keynote speakerLast post 5 Nov
    Website
  17. 17Krebs on Securitykrebsonsecurity.com · about 2 posts a weekIn-depth security news and investigationLast post 5 Nov
    Website
  18. 18Troy Hunttroyhunt.com · about 1 post a weekHi, I'm Troy Hunt, I write this blog, run "Have I Been Pwned" and am a Microsoft Regional Director and MVP who travels the world speaking at events and training technology professionalsLast post 1 Nov
    Website
  19. 19Python Insiderblog.python.org · about 3 posts a monthThe official blog of the Python core development team.Last post 26 Oct
    Website
  20. 20Onchain Operator Brief — Crypto Research & Practical Toolscrypto-without-getting-rekt.floot.app · about 3 posts a monthFree, source-first crypto research and practical checklists covering Bitcoin, Lightning, Ethereum, Solana, Kaspa and disclosed affiliated YESOTERIC coverage. Educational content, not trading signals.Last post 30 Oct
    Website
  21. 21Mozilla Hackshacks.mozilla.orghacks.mozilla.orgLast post 24 Aug
    Website

Latest security posts

  1. Event ID 4740 and 4771: account lockouts and Kerberos failures

    · dev.to · Coinetic AI Security

    Originally published at coinetic.io . Event 4740 is Windows saying "A user account was locked out" . Event 4771 says "Kerberos pre-authentication failed" , usually a wrong password against a domain controller. Together they tell you who is locked out, from which computer, and whether it is an old…

  2. Rotate a leaked API key without stopping your services: dotvault hands out the new value first

    · dev.to · uehara

    This is part 11 of the series "dotvault, Start to Finish: One Command from Your Laptop to CI, Your Team, and Your AI Agents." dotvault will be released free of charge when this series ends. In the demo, a script kept calling with the key at 15-second intervals during the whole rotation, and in all…

  3. Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)

    · helpnetsecurity.com · Zeljka Zorz

    SonicWall has fixed an exploited SonicOS SSL-VPN vulnerability (CVE-2026-19868) that may allow attackers with valid credentials to bypass SAML-enforced multi-factor authentication. With no workarounds listed, the company has urged admins to patch quickly. About CVE-2026-19868 CVE-2026-19868 is an…

  4. CVE-2026-115252: Unknown Confection WordPress Cable (Critical 10.0)

    · cve-list.com

    No fix listed. The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one of them, unmodified, into a standalone PHP file that it then serves, allowing unauthenticated users to execute arbitrary PHP…

  5. Over 3 Million People Hit by Frontline Education Data Breach

    · securityweek.com · Eduard Kovacs

    Frontline Education told Indiana regulators that its August data breach affected over 3 million school district staff and students. The post Over 3 Million People Hit by Frontline Education Data Breach appeared first on SecurityWeek .

  6. $133 million stolen from French bank via exploited service provider

    · helpnetsecurity.com · Sinisa Markovic

    Attackers siphoned an estimated $133 million from Crédit Mutuel Arkéa by using the bank’s own account to wire money to other banks, from where it was possibly converted into cryptocurrency. The French cooperative banking group, which has €211.5 billion in total assets and more than 5.8 million…

  7. LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks

    · thehackernews.com · info@thehackernews.com (The Hacker News)

    Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to release and asked operators to be careful until they are out. One operator said new accounts…

  8. DHS Has Used This Controversial Investigative Tool 185,000 Times Since Trump Took Office

    · wired.com · Maddy Varner

    Homeland Security Investigations estimates that it has sent out more administrative subpoenas since January 2025 than it did in more than six and a half years between 2016 and mid-August 2022.

  9. CVE-2026-123870: The otterdog webapp evaluates a format-string built from the… (Critical 9.5)

    · cve-list.com

    Fix listed. The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON body using Python's eval(). When the GITHUB_WEBHOOK_SECRET configuration value is unset or empty (the code default is None), the HMAC signature check is skipped entirely, allowing an…

  10. Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records

    · thehackernews.com · info@thehackernews.com (The Hacker News)

    A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last week. The agents also found a Taipei fire department platform exposing patient data from 2018, including ECG readings and ambulance video…

  11. Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack

    · securityweek.com · Eduard Kovacs

    Working with cryptographers, DeepMind’s AI agents cut the cost of forging RSA-1024 signatures and found a cheaper way to factor keys. The post Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack appeared first on SecurityWeek .

  12. Fake GitHub Security Tools Infect Over 2,000 PCs With Malware

    · securityaffairs.com · Pierluigi Paganini

    Fake GitHub security tools are spreading malware that disables defenses, steals sensitive data and infects over 2,000 PCs. Cybersecurity firm Doctor Web has found malware hidden in GitHub projects that look like security tools. The campaign targets blockchain game fans and, more recently…

  13. The BBC has a plan for a Black Sky event, and it runs on FM radio

    · securityaffairs.com · Pierluigi Paganini

    The BBC plans to use emergency FM radio to keep the UK informed during prolonged blackouts, with a self-sufficient studio ready for 72 hours. If electricity fails across the UK for days, the BBC says it has a plan to keep people informed. David Sillito, the BBC’s media and arts correspondent…

  14. Bitget Launches Open Custody Network to Separate Institutional Trading From Asset Storage

    · newsbtc.com · NewsBTC Editorial Team

    Bitget announced an Open Custody Network on November 5 intended to connect external banks and institutional custodians with its trading infrastructure. The…

  15. Linus Torvalds sees signs AI-prompted patch flood has peaked

    · theregister.com

    Fixes are arriving faster than new bug reports for one major Linux project

  16. unlocking any car from X brand in most of the world

    · shubs.io · shubs.io via markerz

    Comments

  17. TECNOSEC 2026: Drones, Command and Control, and Infrastructure Inspection

    · bytepreview.com

    The fifth edition of TECNOSEC DRONExpo will gather in Madrid solutions for drone management, airport inspection, and critical infrastructure protection. The presentations describe capabilities and projects but do not equate to new operational deployments by themselves.

  18. ISC Stormcast For Monday, November 9th, 2026 https://isc.sans.edu/podcastdetail/10170, (Mon, Nov 9th)

    · isc.sans.edu
  19. Coinbase Explains Cold-Storage Defences After Binance Breach Shakes Crypto Industry

    · newsbtc.com · NewsBTC Editorial Team

    Coinbase says it was not affected by the reported Binance hot-wallet incident and that more than 99% of customer assets are kept in cold storage. The…

  20. US, Russia, and Ukraine to hold talks in Abu Dhabi

    · semafor.com · Brendan Ruberry

    US, Russian, and Ukrainian officials are expected to meet this week in Abu Dhabi for talks on ending the nearly five-year war, the first direct negotiations in nine months, but experts cautioned that the meetings were unlikely to yield a major breakthrough.