This article is all about information: what's out there and where to find it.

It wasn't that long ago that computer security was an obscure industry with only a handful of sources of information on relevant topics. Today, however, there are so many sources of information on information security that the gems are often lost in the noise. With the increase in available information has come the increase in dialog, the exposure of differing views and opinions, real-time collaboration on active threats, real-time exposure of those threats, and a power of crowd-sourced threat mitigation.

We have made heavy use of the technologies we defend. We use websites, intranets, extranets, email, VPNs and "The Cloud". We have preached the dangers of social networking sites, while embracing them to distribute important information quickly and build professional relationships and strengthen the community.

Security vendors have blogs and FaceBook pages, mainstream news sites comment on the latest worms and malware families, plenty of reviews and videos are posted to youtube, and plenty of user-driven communities have formed.

There are many portals working to bring this information to you in a way you can efficiently digest. NovCon itself is working toward that end with novcon.tv. On novcon.tv we've listed and embedded security related videos from all over the net in hopes that more information gets to more people faster. There are a few other sites that have worked toward the same goals, and I wanted to share a few of those here. These are just a couple links from each category that are sites I visit on a regular basis. I would love to find out what your indispensable links might be (Why not try out the comments?).

Portals:

The Security News Portal - RSS Aggregator for all things security, both scanning dedicated security feeds, as well as scanning mainstream feeds for security-related articles.

BigBlog's Security Section - A more mainstream aggregator with an extensive security section.

Blogs:

F-Secure Lab's Weblog - I really like the guys at F-Secure and their video updates, blog articles and social network participation. They usually have detailed information on current threats.

Security Focus - Symantec backed blog with less frequent, more traditional media articles on security issues.

Vulnerability and Threat Information:

Secunia - Lists latest vulnerability and patch information

US CERT - Government-run vulnerability and threat information site

Exploit Information:

Astalavista - hacking and security community

Milw0rm - bleeding edge exploits

Console Displays:

Global Incident Map - Displays known security events (mostly physical, terrorism, etc) on a global map.

CND Operational Picture - Aggregates a few realtime feeds into a display worthy of you projection screens.

Twitter:

F-Secure's Twitter Feed - Enough said I think... But they have more frequent updates here then on their blog.

TwiGAURD - Tracks the threats effecting twitter and twitter users.

Incident Handlers:

Internet Storm Center - SANS' incident blog

What are some of the sites you find indispensable?