CyberSec-Blogs

What it is

CyberSec-Blogs, maintained by netbiosX on GitHub, is a list of independent cybersecurity blogs. The page text shows 44 stars and does not name any individual blog.

Coverage

The list is almost entirely red team. The category counts on the page are:

An engineer looking for detection engineering, purple team or threat intelligence sources will find one entry in each, so the list is not a broad source for those areas. It is most useful for offensive tradecraft blogs and, to a lesser degree, threat hunting.

The page says many authors publish across categories. Each placement reflects a judgment call about the blog's primary focus, so a blog's category is not a full description of what it covers.

What to do

To suggest a blog or fix a categorization, open a PR or issue. The page asks contributors to do three things:

• Confirm the blog is actively maintained, or note that it is an archive of historical value.
• Pick the category that fits the bulk of its recent posts.
• Add a one-line description.

Blog maintainers can ask to be listed differently by the same route. The list is CC0 1.0, so entries can be reused without attribution.

Caveats

The page gives no blog names, no dates for when entries were last checked, and no activity criteria beyond the contributor request to confirm a blog is maintained. Whether the listed blogs are still active has to be checked separately.