Follow SentryFeed
New stories come to your feed reader, Outlook or Slack through RSS, without visiting the site. Each feed covers the last 7 days and updates every 30 minutes. Patch deadlines can go straight into your calendar.
-
Major stories
Confirmed exploitation, zero-days and flaws rated 9 or more out of 10.
-
Major and Medium stories
Everything serious: Major stories, plus breaches, ransomware, malware and flaws rated 7 or more out of 10.
-
In the Gulf
Security news from the Gulf's own outlets and any story naming a GCC country, without vendor announcements.
-
Patch this first
The flaws most worth fixing first this week, ranked by CISA's exploited list, the chance of exploitation, severity and news coverage.
-
Events
CTFs, webinars, conferences and meetups listed on SentryFeed, once approved.
Your stack
Only the stories about the products you picked on My stack.
Unlike My stack, this list leaves your browser. It's part of the feed's link, so SentryFeed's server sees it each time your reader checks for new stories, and so does anyone you share the link with. SentryFeed doesn't store it, but its host, Vercel, records each request, link included, in request logs kept for an hour.
Your products are kept in your browser, so building this link needs JavaScript. Without it, a link like https://sentryfeed.vercel.app/feeds/stack.xml?stack=fortinet,exchange works too.
Patch deadlines in your calendar
When a flaw that attackers are already using joins CISA's exploited list, CISA gives US federal agencies a date to fix it by. Those deadlines aren't binding on anyone else, but they're a widely used yardstick for how urgent a fix is.
Subscribe, and they appear in Outlook, Google Calendar or Apple Calendar as all-day entries: one per day with a deadline, listing each flaw with a link to its page here, from the last 30 days and everything ahead. The entries never mark you as busy, and your calendar picks up new ones by itself.
Only your products
This link carries your product list too. Your calendar service (Google, Microsoft or Apple) fetches it from its own servers every few hours, so it sees the list, and so does SentryFeed's server. SentryFeed doesn't store it, but Vercel's request logs keep each link for an hour.
Building this link needs JavaScript, since your products are kept in your browser. Without it, a link like https://sentryfeed.vercel.app/feeds/patch-deadlines.ics?stack=fortinet,exchange works too.
How to subscribe
- Google Calendar (on a computer): next to Other calendars, choose + and then From URL, and paste the link. Google checks subscribed calendars on its own schedule, so a new deadline can take up to a day to appear.
- Outlook: Add calendar, then Subscribe from web, and paste the link.
- Apple Calendar: File, then New Calendar Subscription, and paste the link.
How to follow a feed
- A feed reader (Feedly, Inoreader, NetNewsWire): add a new feed and paste the link.
- Outlook: right-click RSS Subscriptions (or RSS Feeds), choose to add a new feed, and paste the link.
- Slack: add Slack's RSS app to your workspace, then type
/feed subscribeand the link in the channel that should get the stories.