Blogs

[Knowledge sometimes Exploits]
    Gamozo Labs Blog - https://gamozolabs.github.io/
    Diary of a reverse-engineer - https://doar-e.github.io/
    Windows Internals Blog - https://windows-internals.com
    Sean Heelan's Blog - https://sean.heelan.io
    Tavis Ormandy - https://blog.cmpxchg8b.com/
    Artificial truth - https://dustri.org/b/
    Considerations on Codecrafting - https://blog.polybdenum.com
    Hyper-V Internals - https://hvinternals.blogspot.com/
    Tyranid's Lair (James Foreshaw) - https://www.tiraniddo.dev/
    The Exploit Laboratory - https://blog.exploitlab.net/
    Active Directory Security - https://adsecurity.org
    Revers.engineering - https://revers.engineering/

[0dayfans Filtered]
    F-Secure Labs - https://labs.withsecure.com/blog/
    Zero Day Initiative - Blog - https://www.thezdi.com/blog/
    Check Point Research - https://research.checkpoint.com/

[Casual Blogs]
    SerHack - Security Researcher - https://serhack.me/
    Jump ESP, jump! - https://httpscolonforwardslashforwardslashwwwdotzoltanbalazsdotcom.com/
    m's blog - https://ludovicianul.github.io//
    Tim Blazytko’s Blog - https://www.synthesis.to/
    GitHub Security Lab - Research - https://github.blog/tag/github-security-lab/
    CERT Blogs - https://insights.sei.cmu.edu/feeds/topic/certcc/atom/?utm_source=blog&utm_medium=rss
    anti-virus rants - http://anti-virus-rants.blogspot.com/
    xorl %eax, %eax - https://xorl.wordpress.com
    Intercept the planet! - https://intercepter-ng.blogspot.com/
    Hanno's blog - https://blog.hboeck.de/
    nedwill’s security blog - https://nedwill.github.io/blog/
    Zeta-Two.com - https://zeta-two.com/
    ZeroSec - Adventures In Information Security - https://blog.zsec.uk/
    DigiNinja - https://digi.ninja/rss.xml
    Blog of Osanda - https://osandamalith.com
    ADD / XOR / ROL - http://addxorrol.blogspot.com/


[Research]
    [Good Feeds]
        watchTowr Labs - Blog - https://labs.watchtowr.com/
        Isosceles Blog - https://blog.isosceles.com/
        Connor McGarr - https://connormcgarr.github.io/
        Haboob - https://blog.haboob.sa/
        Blog on STAR Labs - https://starlabs.sg/blog/
        MDSec - https://www.mdsec.co.uk/
        kylebot's Blog - http://blog.kylebot.net/
        Access Vector - Vulnerability Research & Software Exploitation - https://accessvector.net/
        Stratum Security Blog - https://blog.stratumsecurity.com/
        0x36.github.io - https://0x36.github.io/
        Impalabs Blog - https://blog.impalabs.com
        Stories by Renwa on Medium - https://medium.com/@renwa?source=rss-3f8ae70e3957------2
        GitHub Security Lab - https://github.blog/tag/github-security-lab/
        David's Blog (pql) - http://blog.dbouman.nl/
        Aleph Research - Posts - https://alephsecurity.com/
        Aleph Research - Vulns - https://alephsecurity.com/
        jub0bs.com - //jub0bs.com/posts/
        Talos - Vulnerability Reports - https://talosintelligence.com/vulnerability_reports
        Taszk.io labs - https://labs.taszk.io/blog/
        Trenchant - https://trenchant.io/
        Youssef Sammouda - https://ysamm.com
        Maxwell Dulin's Blog - https://maxwelldulin.com/Blog
        SSD Secure Disclosure - https://ssd-disclosure.com/
        Assetnote - https://blog.assetnote.io/
        Blog - Atredis Partners - https://www.atredis.com/blog/
        GRIMM Blog - https://blog.grimm-co.com/
        Teddy Katz’s Blog - https://blog.teddykatz.com/
        Guido Vranken - https://guidovranken.com
        Detectify Labs - https://labs.detectify.com
        Raelize - https://raelize.com/blog/
        Keen Security Lab (Tencent) - https://keenlab.tencent.com/en/
        PT SWARM - https://swarm.ptsecurity.com
        Realmode Labs - Medium - https://medium.com/realmodelabs?source=rss----a97a5137a6a4---4
        Positive Technologies - learn and secure  - http://blog.ptsecurity.com/
        Microsoft Browser Vulnerability Research - https://microsoftedge.github.io/edgevr/
        Synacktiv | Publications - https://www.synacktiv.com/en/publications
        research.securitum.com - https://research.securitum.com/
        Secfault-Security - https://secfault-security.com/blog.html
        Elttam - https://www.elttam.com/blog/
        PS C:\Users\itm4n> _ - https://itm4n.github.io/
        Sam Curry - https://samcurry.net
        Blog on Shielder - https://www.shielder.com/blog/
        secret club - https://secret.club/
        pi3 blog - http://blog.pi3.com.pl
        Rhino Security Labs - https://rhinosecuritylabs.com
        Mozilla Attack & Defense - https://blog.mozilla.org/attack-and-defense
        Doyensec's Blog - https://blog.doyensec.com//
        PortSwigger Research - https://portswigger.net/research
        Project Zero - https://googleprojectzero.blogspot.com/
        bugs.xdavidhu.me - https://bugs.xdavidhu.me/
        Alexander Popov - https://a13xp0p0v.github.io/
    [Corporate]
        Oversecured - https://blog.oversecured.com/
        Qualys Security Blog - https://blog.qualys.com
        Researches & Disclosures - Ophion Security - https://ophionsecurity.com/blog/
        ZScaler - Security Research/Advisories - https://www.zscaler.com/
        RET2 Systems Blog - https://blog.ret2.io/
        Datadog Security Labs - https://securitylabs.datadoghq.com/rss/feed.xml
        JUMPSEC LABS - https://labs.jumpsec.com
        SonarSource - Security - https://www.iot-inspector.com/blog/
        Blog | Octagon Networks - https://octagon.net/blog
        Technical Blog – NetSPI - https://www.netspi.com/blog/technical/
        Ada Logics Blog - https://adalogics.com
        Orange Cyberdefense - https://sensepost.com/rss.xml
        Quarkslab's blog - http://blog.quarkslab.com/
        Insinuator.net - https://insinuator.net
        Bishop Fox Labs - https://labs.bishopfox.com/home
        NCC Group Research - https://research.nccgroup.com
        DEVCORE 戴夫寇爾 - https://devco.re
        Payatu - https://payatu.com/blog
        SpiderLabs Blog from Trustwave - https://www.trustwave.com/en-us/
        r2c website - https://r2c.dev
        stolabs - Medium - https://medium.com/stolabs?source=rss----11cfd3349922---4
        BlackArrow - http://www.blackarrow.net/
        Corelan Team - https://www.corelan.be
        Tenable TechBlog - Medium - https://medium.com/tenable-techblog?source=rss----68728ef06732---4
        Grsecurity Blog RSS Feed - https://www.grsecurity.net/blog.rss
        Immunity Services - http://immunityservices.blogspot.com/
        REDYOPS Labs - https://labs.redyops.com
        Exodus Intelligence - https://blog.exodusintel.com/
        Trail of Bits Blog - https://blog.trailofbits.com
        CENSUS - https://census-labs.com/news/
        Blog – Praetorian - https://www.praetorian.com/blog/
        NotSoSecure - https://notsosecure.com
        SonarSource Blog - https://blog.sonarsource.com
    [Meta]
        Pentester.Land Writeups - https://pentester.land/writeups/
        Recent Commits to AppSecEzine:master - https://github.com/Simpsonpt/AppSecEzine/commits/master
        ThinkstScapes - https://thinkst.com/ts.html
        Maxwell Dulin's Resources - https://maxwelldulin.com/Resources
        Bad Sector Labs Blog - https://blog.badsectorlabs.com/


[Individuals]
    [Binary]
        The Human Machine Interface - https://h0mbre.github.io/
        bricked.tech - https://blog.bricked.tech/
        random hacks - https://xakcop.com/
        SkullSecurity Blog - https://www.skullsecurity.org/
        Matteo Malvica - https://www.matteomalvica.com/blog/
        phoenhex team - https://phoenhex.re/
        gynvael.coldwind//vx.log (en) - https://gynvael.coldwind.pl/
        Mogozobo - https://www.mogozobo.com
        Alex Plaskett - https://alexplaskett.github.io/
        SkyLined - http://blog.skylined.nl//index.html
        Brendon Tiszka - https://tiszka.com/
        VoidSec - https://voidsec.com/
        whtaguy - https://mavlevin.github.io/
        Reversing Engineering for the Soul (gbps) - https://ctf.re//
        iamelli0t’s blog - https://iamelli0t.github.io/
        Can.ac - https://blog.can.ac
        ETenal - https://etenal.me/
        Low-level adventures - https://0x434b.dev/
        Saar Amar (MSFT) Publications - https://github.com/saaramar/Publications/commits/master
        a place of anatomical precision - https://ysanatomic.github.io
        XPN InfoSec Blog - https://blog.xpnsec.com/
        pwning.systems - https://pwning.systems/
        McCaulay Hudson - https://mccaulay.co.uk
    [Web/Other]
        Bill Demirkapi - https://billdemirkapi.me/
        Dan Revah’s Blog - https://danrevah.github.io/
        Sivanesh Ashok - https://blog.stazot.com/
        LuemmelSec - https://luemmelsec.github.io/
        Max Justicz - https://justi.cz
        Alex Chapman's Blog - https://ajxchapman.github.io/
        Randy Westergren - https://randywestergren.com/
        WitCoat Security Blog - https://blog.witcoat.com
        Carnal0wnage & Attack Research Blog - https://blog.carnal0wnage.com/
        enigma0x3 - https://enigma0x3.net
        markitzeroday.com - https://markitzeroday.com/
        MKSB(en) - https://mksben.l0.cm/
        inputzero - https://www.inputzero.io/
        spaceraccoon.dev - https://spaceraccoon.dev/
        Ezequiel Pereira - https://www.ezequiel.tech/
        David Nechuta - https://nechudav.blogspot.com/
        0xFFFF@blog:~$ (MLT) - https://0x80dotblog.wordpress.com
        dozer.nz - https://dozer.nz/
        $BLOG_TITLE - https://blog.deesee.xyz/
        Posts on qtc's blog - https://blog.tneitzel.eu/posts/
        robertchen.cc - https://robertchen.cc/blog
        Stories by Marcos Ferreira on Medium - https://medium.com/@mvinni?source=rss-3252e407fe66------2
        Axel Persinger’s Blog - https://axelp.io/
        Stories by Cedric Owens on Medium - https://medium.com/@cedowens?source=rss-fd791048dac0------2
        Luke Rindels - https://luker983.github.io/
        Webbie’s Stuff - https://webbie321.github.io/
        Paulos Yibelo - Blog - http://www.paulosyibelo.com/
        Geek Freak - https://dhiyaneshgeek.github.io/
        acut3 - http://localhost:4000/
        Abdulrah33m's Blog - https://blog.abdulrah33m.com
        Rhynorater's InfoSec Blog - https://rhynorater.github.io
        pmnh - https://www.pmnh.site/
        Ryan Gerstenkorn Commits - https://github.com/RyanJarv/ryanjarv.github.io/commits/master
        (Web-)Insecurity Blog - https://security.lauritz-holtmann.de/
        0day.click - https://0day.click
        InfoSec Write-ups - Medium - https://infosecwriteups.com?source=rss----7b722bfd1b8d---4
    [Linux]
        codeblog - https://outflux.net/blog
        Linux Audit - https://linux-audit.com

[Blogs]
    [Threat Intel]
        Cisco Talos Intelligence Group - Comprehensive Threat Intelligence - https://blog.talosintelligence.com/
        Securelist by Kaspersky - Research - https://securelist.com/category/research/
        Rendition Infosec - https://www.renditioninfosec.com
        Microsoft Security Response Center - https://msrc.microsoft.com/blog/
        Secureworks Blog - https://www.secureworks.com/blog
        Unit42 - https://unit42.paloaltonetworks.com/
    [Assessment Firms]
        Blog – JFrog - https://jfrog.com
        Horizon3.ai - https://www.horizon3.ai/
        Bugcrowd - https://www.bugcrowd.com/blog/
        TrustedSec - https://trustedsec.com/
        Zimperium Mobile Security Blog - https://zimpstage.wpengine.com/blog/
        Offensive Security - https://www.offsec.com/
        HackerOne - https://www.hackerone.com/
    [Software Companies]
        BREAKDEV - https://breakdev.org/
        Opera Security - https://blogs.opera.com/security/
        Rapid7 Blog - https://blog.rapid7.com/
        ColbaltStrike Blog - https://www.cobaltstrike.com/
        The Cloudflare Blog - http://blog.cloudflare.com
        Mozilla Security Blog - https://blog.mozilla.org/security/
        Google Online Security Blog - http://security.googleblog.com/
        Microsoft Security - https://www.microsoft.com/en-us/security/blog/
        Blog – Snyk - https://snyk.io
    Internet Policy Research Initiative at MIT - https://internetpolicy.mit.edu/
    EFF - Deeplinks - https://www.eff.org/rss/updates.xml
    The Daily Swig - https://portswigger.net/daily-swig


[Vuln Reports and Papers]
    [Technical Reports]
        Project Zero - Root Cause Analysis - https://googleprojectzero.github.io/0days-in-the-wild/rca.html
        GitHub Security Lab - Advisories - https://securitylab.github.com/advisories/
        Project Zero Bug Tracker - https://bugs.chromium.org/p/project-zero/issues/list?q=&can=1&sort=-id
        Files ≈ Packet Storm - https://packetstormsecurity.com/
        Full Disclosure - https://seclists.org/#fulldisclosure
        Open Source Security - https://seclists.org/#oss-sec
        HackerOne Recently Disclosed - https://hackerone.com/hacktivity?querystring=&filter=type:public&order_direction=DESC&order_field=latest_disclosable_activity_at&followed_only=false
    [Academia]
        Recent Commits to FuzzingPaper:master - https://github.com/wcventure/FuzzingPaper/commits/master
        University of Minnesota - Computer Science and Engineering - https://cse.umn.edu/cs/latest-research
        IACR Transactions on Cryptographic Hardware and Embedded Systems - https://tches.iacr.org/index.php/TCHES
        SSLabs [Georgia Tech] - https://gts3.org/pages/publications.html
        Kangjie Lu [U. Mn] - https://www-users.cs.umn.edu/~kjlu/