Threatpost

Threatpost
Name	Threatpost
Type	Online news site
Founded	2010
Owner	Kaspersky Lab (2010–2014); independent (2014–present)
Headquarters	San Francisco, California
Language	English

Threatpost is an online security news site focused on computer security, cybercrime, vulnerabilities, and privacy. It publishes breaking news, technical analysis, opinion pieces, and research summaries for practitioners and interested readers in the fields of information security and technology. The site has covered major incidents, disclosed vulnerabilities, and reported on work from security companies, research labs, and academic conferences.

History

Threatpost launched in 2010 as a rebrand and editorial continuation of an earlier security blog associated with a major cybersecurity vendor. The site emerged during a period marked by high-profile incidents such as the Stuxnet operation, the RSA Security breach disclosures, and the growing influence of vendors like Kaspersky Lab and Symantec. Early editorial leadership included journalists and editors with experience at outlets such as Computerworld, SC Magazine, and The Register, while reporting drew on research from firms like Mandiant, FireEye, and Trend Micro. In the mid-2010s the site transitioned from vendor ownership to an independent editorial model, mirroring trends seen at outlets like Dark Reading and Krebs on Security that sought greater editorial autonomy. Over the years Threatpost documented incidents involving actors such as Fancy Bear, Lazarus Group, Equation Group, and companies including Microsoft, Google, Apple, and Cisco Systems.

Coverage and Content

Threatpost covers vulnerability disclosures, exploit chains, malware analysis, threat actor profiling, and regulatory developments. Typical coverage highlights research presented at conferences such as Black Hat USA, DEF CON, RSA Conference, and USENIX Security Symposium, as well as advisories from vendors like Microsoft Security Response Center, Oracle, and Adobe Systems. The site frequently reports on exploits tied to platforms including Windows 10, Android, iOS, macOS, and widely used network devices from Juniper Networks and Netgear. Stories often reference technical work from academic institutions such as MIT, Carnegie Mellon University, Stanford University, and University of California, Berkeley, as well as research labs at Google Project Zero, Cisco Talos, and ESET Research. Coverage extends to incident responses involving organizations like Equifax, Yahoo!, Target Corporation, and Sony Pictures Entertainment.

The site publishes a mix of news briefs, deep-dive explainers, interviews with researchers from groups like Proofpoint, CrowdStrike, SentinelOne, and commentary on legal and policy moves involving bodies such as the Federal Trade Commission, European Commission, and national cybersecurity centers. Threatpost articles often integrate technical details including proof-of-concept code, CVE identifiers issued by MITRE Corporation, and mitigation guidance referencing standards from NIST and OWASP.

Editorial Structure and Contributors

Threatpost’s editorial staff has included editors and writers with backgrounds at technology and security publications including Wired, The New York Times, and Forbes. Contributors range from staff reporters to guest analysts, independent security researchers, and vendor advisories. The site has syndicated or cited work from notable researchers such as Christopher A. Wray-adjacent law enforcement coverage, independent investigators like Brian Krebs (coverage comparisons), and technical authors from vendor teams at Microsoft Threat Intelligence Center (MSTIC) and Google Threat Analysis Group. Editorial governance emphasizes sourcing from primary research reports, disclosure timelines involving CVE assignments, and coordination notices from national CERTs such as US-CERT and CERT-EU.

Threatpost maintains an editorial calendar aligned with major industry events — publishing previews, live reporting, and post-conference analyses tied to sessions and whitepapers from venues like Black Hat Europe and DEF CON China. Regular columns and sponsored content have involved collaboration with security vendors and training providers, while independent investigative pieces rely on direct interviews with researchers, incident responders, and law enforcement spokespeople from agencies like the FBI and Europol.

Impact and Reception

Threatpost has been cited by mainstream and specialist outlets including The Wall Street Journal, BBC News, The Guardian, The Register, and ZDNet for timely coverage of breaches and vulnerabilities. Its reporting has at times accelerated patching cycles by drawing attention to unpatched exploits and publicly disclosed proof-of-concept code, influencing actions by vendors such as Microsoft and Adobe Systems. Security practitioners reference Threatpost alongside sources like Krebs on Security, BleepingComputer, and SecurityWeek when tracking threat actor activity or vulnerability trends. Academic citations have appeared in conference papers and technical reports that analyze media coverage of cyber incidents and information dissemination in the security ecosystem.

Critics of vendor-sponsored media have scrutinized ties between security news sites and industry advertisers; Threatpost’s move to editorial independence addressed some concerns and aligned it with protocols followed by outlets like TechCrunch and Ars Technica for disclosure and separation between editorial and commercial operations.

Awards and Recognition

Threatpost and its contributors have received recognition in industry award programs and citation lists produced by organizations such as SC Media, Information Security Media Group, and peer rankings by security research aggregators. Individual journalists associated with the site have been shortlisted for journalism awards covering technology and cybersecurity reporting, echoing accolades also received by peers at Wired and The New York Times. The site’s investigative and technical reporting has been highlighted in industry roundups and conference speaker lists, demonstrating influence within the information security community.

Category:Cybersecurity media