Guides
The best cybersecurity newsletters in 2026
Updated July 2026 · 6 min read
Security news has a volume problem: hundreds of CVEs a week, vendor noise, and breach coverage written for headlines instead of defenders. The 10 newsletters below, whether you call the field cybersecurity, infosec, or just security, are the ones practitioners actually forward to each other. We sort them by the job you’re hiring them for.
Quick version:
| Newsletter | Best for | Cadence | Price |
|---|---|---|---|
| TLDR InfoSec ours | Daily security news for practitioners | Weekdays | Free |
| Risky Business News | Global security news, 3x a week | Mon/Wed/Fri | Free |
| The Hacker News | High-volume breaking vulnerability alerts | Daily | Free |
| SANS NewsBites | News with instructor commentary | 2x/week | Free |
| tl;dr sec | AppSec and cloud security curation | Weekly | Free |
| Unsupervised Learning | Essays on security, AI, and their overlap | Weekly | Free |
| The DFIR Report | Full intrusion case studies | Irregular | Free |
| Krebs on Security | Investigative cybercrime reporting | Frequent | Free |
| Schneier on Security | Security policy and cryptography | Monthly | Free |
| Risky Business | Security strategy, show and newsletter | Weekly | Free |
Daily and near-daily news
TLDR InfoSec ours
A weekday brief for security professionals: breaches, vulnerabilities, tooling, and research, summarized so you can triage in 5 minutes. 400,000 readers, 41% open rate.
Risky Business News
Catalin Cimpanu, formerly of The Record and ZDNet, writes the most complete rundown of global security news in the business. Ships with an audio version if you'd rather listen.
The Hacker News
Broad coverage, fast on breaking vulnerabilities. Better as an alert stream than a considered read.
SANS NewsBites
SANS instructors attach editorial comments to each story, twice a week. The commentary from working practitioners is the value; you've often seen the stories elsewhere.
For practitioners
tl;dr sec
Clint Gibler's weekly, and the reference newsletter for AppSec and cloud security engineers: tools, talks, and techniques, curated by someone who reads everything. Independent from TLDR, and worth pairing with TLDR InfoSec: daily breadth from us, weekly depth from Clint.
Unsupervised Learning
Daniel Miessler's take on security, AI, and where they meet. More essay than link roundup; you read it for how he thinks.
The DFIR Report
Publishes full intrusion case studies: real attacks, reconstructed step by step from forensic data. Nothing else in the field shows attacker tradecraft in this much detail, free or paid.
Analysis and the long view
Krebs on Security
Brian Krebs's investigative reporting: cybercrime economics, breach investigations, and the people behind them. The stories national outlets pick up 3 days later.
Schneier on Security
Bruce Schneier's monthly Crypto-Gram and blog: security policy, cryptography, and the societal side. The field's institutional memory.
Risky Business
The flagship weekly show and newsletter from the Risky Business News team. Adds analysis and interviews for the people setting security strategy.
How to pick
By role. Security engineer or analyst: TLDR InfoSec daily, tl;dr sec weekly, The DFIR Report when it publishes. Security leadership: Risky Business, SANS NewsBites, Krebs. Adjacent to security (IT, DevOps, engineering leads who own security outcomes): TLDR InfoSec plus Krebs covers you.
FAQ
Are TLDR InfoSec and tl;dr sec the same newsletter?
No. TLDR InfoSec is the security edition of the TLDR newsletter network, published daily. tl;dr sec is Clint Gibler's independent weekly for security practitioners. The names collide; the publications don't overlap much, and many readers take both.
What's the best daily cybersecurity newsletter?
TLDR InfoSec for a 5-minute practitioner brief (ours, so weigh that). Risky Business News if you want fuller international coverage 3 days a week.
What should a CISO read versus a security engineer?
Engineers: tl;dr sec, The DFIR Report, and a daily brief. CISOs: Risky Business, SANS NewsBites for the instructor commentary, and Krebs for what's about to become a board question.
Are these newsletters free?
All 10 are free. Several offer paid tiers with extras, but nothing here paywalls its core content.
We update this guide twice a year. Last checked: July 2026. Suggest a newsletter: hello@tldr.tech.
Marketing to security professionals rather than becoming one? See who reads TLDR InfoSec.