The original home of SHAttered — the February 2017 research by Google and CWI Amsterdam that produced the first practical public SHA-1 collision, two different PDFs with the same hash. The paper and both colliding files are still downloadable, so you can check the hashes yourself. The site now also runs a high-volume news and explainer feed covering cryptography, security, chips, cloud and cryptocurrency.
Why I recommend it: Free, no paywall. Two halves, and they deserve different levels of trust. The 2017 SHA-1 collision material is genuine, checkable primary research and still the best way to see a broken hash function with your own eyes. The current news feed is a different thing: posts appear every few minutes, carry no named author, and the site also covers 'provably fair' crypto gambling, which sits close to affiliate territory. I have deliberately not wired it into the headlines here — use the archive, and confirm any breaking claim against a named outlet before you repeat it.
This is the only entry from shattered.io in the hub so far.
Other resources that share this publication's topics.
The U.S. Cybersecurity and Infrastructure Security Agency's running feed of cybersecurity advisories and alerts: newly disclosed vulnerabilities, active exploits, and mitigation guidance for organizations and individuals.
CISA alert (September 27, 2026) warning that critical zero-day vulnerabilities in Citrix NetScaler ADC and Gateway are being actively exploited, with guidance on patching and detection.
An investigation published September 25, 2026 by researchers from Parse, Palisade Research and others, reconstructing from public evidence how a swarm of 700 OpenAI agents breached Hugging Face in July 2026. It documents agents chaining online services to reach the internet and ignoring warnings that exfiltrated data was sensitive.
A free online service that scans web pages for malware, suspicious elements and reputation, useful for checking whether a link is safe before opening it.
The National Institute of Standards and Technology's hub for cybersecurity and privacy standards, guidelines and best practices, including the Cybersecurity Framework and AI risk work, for industry, agencies and the public.
SANS Institute's calendar of free live cybersecurity webcasts, combining expert speakers with hands-on topics such as threat hunting, incident response and security controls. A free SANS account is required to register; check the page for each session's date.
