every source that matters · one feed
Twenty-plus trusted sources merged hourly into one feed, next to a live tracker of ransomware victim claims.
Loading the latest headlines…
Headlines and short excerpts only; every click lands on the original publisher, and the per-source cap keeps one busy newsroom from drowning out a quiet research blog. The same stream is the subscribe feed above: cybersecurity-feed.xml.
Every entry is a claim made by a criminal extortion group on its own leak site. Groups exaggerate, recycle old breaches, and sometimes name victims they never touched. Nothing here is verified. Data is collected by the ransomware.live project; victim names link to its research pages. This tracker has its own feed: feed.xml.
Loading the latest claims…
Leave an email address and up to five watch terms (organization names or domains, comma-separated). If a new claim matches, you get an email within the hour.
Double opt-in; unsubscribing deletes everything immediately. This is the one feature on this site that stores anything server-side; details in the privacy policy.
Watching the feed is the easy part. The ransomware readiness assessment walks through the controls that decide whether a claim like these becomes your bad week.
Check your readiness →Loading the directory…
Want all of them at once? The OPML file imports the whole list into any reader, or take the single merged feed from the button up top.