Intro
As mentioned in Consumer Steps to Mitigate Ransomware, generally the higher profile breaches, attacks, and heists make headlines while in fact such incidents are nearly continuous. Distilling reporting outlets—whether they’re cyber firms, government agencies, or journalists—to a manageable set many be helpful. If so, we suggest three sources and some may already be familiar.

Brian Krebs
Brian Krebs may be a legend in his own time and why he focuses on cyber may be of interest.

A sample of Brian’s topics:

• Breaches/exposure (e.g., Equifax, Target, LinkedIn)
• Spam-based cybercrime
• Credit/debit card data theft
• System compromise, namely malware and, more recently, ransomware

In our opinion Brian is objective, accurate, and thorough—a talented investigative journalist willing to get his hands dirty while conveying complex topics clearly and thoughtfully. And considering what triggered his transition to cyber, his reports are just as relevant to individuals/consumers as they are to critical sector C-levels.

Cyber Rule: “Don’t Make Krebs’ Front Page.”

Graham Cluley
Graham Cluley may be known best for his “Smashing Security” podcast, plus he’s a frequent guest/host on webinars and similar events.

Graham’s bio describes his background as a cyber practitioner but his knack for layman’s terms is noteworthy. Plus, his demeanor suggests deep appreciation of cyber threats’ gravity but with calm level-headedness.

Cyber Rule: “Count to 10.”

Bruce Schneier
“[A]t the intersection of security, technology, and people” is Bruce Schneier. Also a writer (including encryption algorithms), Bruce has covered much ground over the past 40-ish years—too much to even attempt summarizing–but as a self-described public-interest technologist has focused lately on:

• Online privacy, (anti-)surveillance, and asset protection
• Global topics, including cyberwarfare
• Encryption, encryption, encryption
• Squids (yes, as in the marine life, on Fridays)

Cyber Rule: “Be nice to squids lest you invoke the wrath of Bruce Schneier.”