I do a lot of reading related to my infosec career, whether it be in-depth reading/research/analysis or just briefly skimming articles/social media posts. For what I do, staying on top of what is happening in the industry is very important. Couple that with an admittedly debilitating mild social media / phone addiction and you get a very routine course of daily reading. Below I will explain my daily routine for keeping up with cybersecurity news, research and more!

Daily Infosec Reading Routine

Complete Checks

The items below represent feeds I fully check daily, and in many cases, multiple-times/throughout-the day. I’ve also listed them in the order I typically check them.

  • Mastodon: This has been my go-to Twitter replacement and fortunately the landing place for what seems like most of the infosec community. Check out who I follow here.

  • RSS: Going old school, I subscribe to a lot of security blogs RSS feeds. Get a look at the sites I follow here. In my web travels, when I discover new sites that have RSS feeds, I will add them to this list as well! (I’m using the Reeder app on iOS/iPadOS and the Feedly web app on desktop.)

  • Lemmy / Kbin: These are my “Threadiverse” replacements for Reddit. You can see the communities/magazines I sub to here (Note: Not all of them are infosec-related).

  • Reddit: Look, I’m not happy with Reddit, they killed third-party apps and attacked their community subs/mods. That said, some of the communities I enjoy live on, so I do (begrudgingly) browse new threads.

  • Google Alerts: I have a few Google Alerts set up for keywords. Anything Google finds is sent to an RSS feed that I subscribe to in my aggregator.

  • Bluesky: There is seemingly a decent-sized infosec community on Bluesky, but I don’t really explicitly follow folks there. Rather, I do browse one particular algorithmic feed named “Cybersec / Infosec” which occassionally surfaces an interesting infosec article.

Things I Check Sparingly

Below I’ve listed feeds/platforms I check either as overflow from my primary reading or only once-in-a-while, either because the signal-to-noise ratio isn’t great or the feed is algorithmic, i.e. no way to “read all of it”.

  • Threads: Threads is a lively place but the infosec content there is very limited at this time.
  • LinkedIn: There is OK infosec stuff here, if you can stomach sifting through all the insufferable content.
  • Bluesky: A small infosec contingent here but nothing compared to Mastodon.
  • Discord: There are a lot of infosec-related servers, but looking through all the different servers and their respective channels for interesting discussions/links is too time-consuming of a task. I don’t even have enough time most days to look at the Shellsharks Discord server.

Podcasts

Though not technically “reading”, I also have a couple infosec-related podcasts I tune in to when new episodes become available.

When I find interesting articles, I save them to my read-it-later service (which I am currently inbetween providers). When I have time, I go back into my saved items and open articles to peruse/digest.

In addition to browsing and reading articles, I also find time to share interesting articles out (via Mastodon, Threads, Discord or Lemmy) and have discussions about them if/when people engage.

I will admit I am probably on the more extreme end of “keeping up with” security news/trends and you certainly don’t need to go to these lengths to stay fresh. But now you know what I do so feel free to copy some or all of it and get out there and learn!