Authoritative catalog of CVEs known to be exploited in the wild. Mandatory patching baseline for US federal agencies.

Advisories, alerts, and ICS security notices from CISA.

US government CVE repository with CVSS scoring and CPE mapping.

Globally-accessible knowledge base of adversary tactics and techniques.

Community-developed list of software and hardware weakness types.

Common Attack Pattern Enumeration and Classification.

Multi-State ISAC advisories for US SLTT governments.

EU Agency for Cybersecurity — threat landscape reports and guidance.

Computer Emergency Response Team for the EU institutions.

UK National Cyber Security Centre — advisories and guidance.

Australian Cyber Security Centre advisories and alerts.

Canada's national cybersecurity authority.

Japan Computer Emergency Response Team Coordination Center.

Brazilian national CERT.

Daily diaries from a global network of incident handlers.

Microsoft Security Response Center — security updates and advisories.

Cisco Product Security Incident Response Team advisories.

PSIRT advisories for Palo Alto products.

Fortinet FortiGuard PSIRT advisories.

Ivanti product security advisories.

Citrix security bulletins and advisories.

VMware / Broadcom security advisories.

Adobe product security bulletins.

Quarterly critical patch updates from Oracle.

Apple platform security updates.

Monthly Android security bulletins.

Google Chrome security updates.

USN advisories for Ubuntu packages.

RHSA advisories for Red Hat products.

DSA advisories for Debian.

Security advisories for open source packages.

Open source vulnerability database aggregating multiple ecosystems.

Offensive Security's archive of public exploits and PoCs.

Investigative cybersecurity journalism by Brian Krebs.

Breaking cybersecurity news and technical write-ups.

Independent cybersecurity news from Recorded Future.

Enterprise cybersecurity news, analysis and features.

Cybersecurity news and threat intelligence updates.

Cybersecurity news, insights and analysis.

Cybersecurity news for enterprise and government.

Long-running cybersecurity podcast and newsletter.

Global cybersecurity industry news.

In-depth security coverage from Ars Technica.

WIRED cybersecurity reporting.

Independent technology and cybersecurity reporting.

Independent cybersecurity commentary and podcast.

Daily cybersecurity news.

Commentary on security and cryptography by Bruce Schneier.

Threat research and incident response insights from Mandiant.

Threat research from Palo Alto Networks.

Threat research and detection content from Cisco Talos.

APT and nation-state threat research from Google.

Threat intelligence from Microsoft security teams.

Threat research and eCrime reporting from CrowdStrike.

Sophos threat research and IR write-ups.

ESET malware and threat research.

Kaspersky APT and malware research.

Threat research from Trend Micro.

CPR threat research and CVE analysis.

SentinelLabs threat research.

Vulnerability disclosures and detection engineering from Rapid7.

MDR threat research from Huntress.

APT research and memory forensics from Volexity.

Zero-day vulnerability research from Google.

Research on digital rights, spyware, and targeted threats.

Investigations into commercial spyware and targeted attacks.

Applied security research and audits.

Voluntary risk-based framework organized around Govern/Identify/Protect/Detect/Respond/Recover.

Prioritized set of actions to defend against common attacks.

Awareness document for web application security risks.

Software Assurance Maturity Model.

Concise application security guidance.

Countermeasure knowledge graph.

Framework for adversary engagement operations.

Cybersecurity control framework for cloud computing.

Security and privacy controls for federal information systems.

Protecting Controlled Unclassified Information in non-federal systems.

Secure Software Development Framework.

International standard for information security management systems.

Code of practice for information security controls.

Information security risk management guidance.

Configuration guidelines for hardening systems.

Application Security Verification Standard.

Payment Card Industry Data Security Standard.

AICPA Trust Services Criteria for service organizations.

Cybersecurity Maturity Model Certification for the US DIB.

Industrial automation and control systems security standards.

US healthcare data protection requirements.

EU General Data Protection Regulation.

Digital Operational Resilience Act for EU financial entities.

Network and Information Security directive for EU essential and important entities.

European regulation on artificial intelligence.

California Consumer Privacy Act.

US Federal cloud authorization program.

Small, portable tests mapped to MITRE ATT&CK.

Automated adversary emulation platform.

Endpoint monitoring, digital forensics and cyber response.

Kroll Artifact Parser and Extractor for forensics triage.

Open-source digital forensics platform.

Scalable open-source security incident response platform.

Open source threat intelligence sharing platform.

Open cyber threat intelligence platform.

Open source SIEM/XDR platform.

Open source IDS/IPS with Emerging Threats rules.

Powerful network analysis framework.

Fast community-powered vulnerability scanner.

Comprehensive vulnerability scanner for containers, IaC and code.

Vulnerability scanner for container images and filesystems.

Static analysis rule set from Semgrep community.

Kubernetes posture management.

Cloud-native runtime security.

Cloud security assessment tool (AWS/Azure/GCP/K8s).

Multi-cloud security auditing tool.

CIS Kubernetes Benchmark checker.

Detect secrets in git repos.

Find and verify leaked credentials.

Generic signature format for SIEM detections.

Curated YARA rule repository by Florian Roth.

Prebuilt detection rules for Elastic Security.

Splunk's open detection content and analytic stories.

Foundational IR playbook.

Open source incident response documentation.

Security Technical Implementation Guides for hardening.

Malware distribution URL feed.

IOC sharing platform.

Malware sample sharing.

Emotet/Dridex/TrickBot C2 tracker.

Open Threat Exchange community intel.

Don't Route Or Peer IP blocklists.

Open ruleset and blocklists.

Community phishing URL database.

Phishing intelligence feeds.

Sentinel IPS reputation list.