Cybersecurity YouTube channels worth following, and what each is good for

These are the YouTube channels Briefwire has chosen to cover Cybersecurity, each one fetched and checked before it is listed. Interviews, conference talks and explainers, read from their published captions.

Start the 14-day trial See the latest brief

The list

In no ranked order. The note beside each says what it is good for, which is a different thing from how big it is.

Each note describes the publication in its own terms. Briefwire reads what these sources publish, in public, and nothing else.

John Hammond
Malware and incident walkthroughs; fast technical read on live campaigns.
LiveOverflow
Vulnerability-research explainers; useful for translating CVEs into business risk.
IppSec
Offensive-technique demonstrations; grounds red-team capability claims in evidence.
DEF CON
Conference talks disclosing new attack classes months before vendor coverage.
Black Hat
Enterprise-facing security research briefings; the vendor-facing half of the conference circuit.
CISA
US government briefings on active campaigns and binding directives; the mandate source.
David Bombal
Long unedited practitioner interviews; candid on tooling choices and career signal.
SANS Institute
Instructor webcasts and threat briefings carrying named detection detail.
Black Hills Information Security
Weekly unscripted infosec news and live webcasts by working testers; opinionated on tooling that fails in practice.
NahamSec
Bug-bounty hunter demonstrating live exploitation, including AI-assistant prompt-injection chains.

How the list was made, and what we do with it

Chosen by hand: Every source is here because people who work in Cybersecurity say substantive things on it, not because it is large. Enough of them to cover the field, few enough to audit.
Checked before listing: Each feed is fetched and checked when it is added and again whenever the library is re-checked by hand: one whose newest item is more than six months old fails, and one quiet for more than three is flagged but can stay listed. Every source is English-language and public.
Read, so you need not: You do not have to watch all of them. Each new video is read from its published captions, and the claims worth keeping are pulled out with a link to the second where each was said.
When it is read: Briefwire reads a beat’s sources through the day while a trial or paid account tracks it. A beat nobody tracks may not be read at all, and its page shows the library, not a live feed.
Sent as a brief: The 12 lines that rank highest across the whole Cybersecurity beat go out daily or weekly. A claim several independent sources made ranks higher — that counts agreement, not accuracy.

The YouTube channels are one part of the beat. Every Cybersecurity source, all media — or just the blogs and newsletters.

Run one of these, or think one is missing? How sources are attributed, and how to reach us.

YouTube shows in other industries

Terms on this page

Cybersecurity in 12 lines a brief, each with a receipt.

14 days of Desk, every seat, card on file — cancel before the trial ends and the card is never charged.

Start the 14-day trial See the latest brief