How do I keep up with cybersecurity news without drowning in it?
Separate two jobs. Build a short act-on list from your own asset inventory and drive it from CISA’s Known Exploited Vulnerabilities catalog, then EPSS exploitation-probability scores for what remains. Keep awareness separate and cap it: one curated daily or weekly digest, read on a schedule. Reading everything is neither possible nor useful, and volume is not coverage.
Most people fail at this by treating news as a queue to be cleared. It is not a queue; it is a stream, and the correct relationship with a stream is sampling. The question is never "have I read everything this week" but "would I have found out in time about the things that could hurt us". Those are different problems, and only the second one is tractable.
The act-on list starts from what you actually run. Without an inventory, no feed helps: you cannot recognise your own exposure in someone else’s headline. With one, the filter is short — the Known Exploited Vulnerabilities catalog tells you what is being exploited in the wild right now, and EPSS gives a probability of exploitation for everything else so you can rank the long tail instead of reading it. Vendor advisories for the handful of products you depend on complete it. That set is small enough to check daily in a few minutes.
Awareness is the other job and needs opposite handling: broad, shallow, and strictly time-boxed. One curated source is usually enough, and there are several good ones — pick by role rather than by volume. The SANS Internet Storm Center’s roughly five-minute StormCast is built for exactly this. Read it at a fixed time, and accept that you will miss things that did not matter.
A note on scale, from our own data. In an audit of the sec-news.ai archive in September 2026 — more than 600 articles across 21 publications — thehackernews.com, securityweek.com, cybersecuritynews.com and bleepingcomputer.com supplied about 80% of everything gathered. Adding feeds past a handful mostly adds the same stories again in different words. If you feel behind, the fix is almost never another subscription.