| name | secupdates |
| description | Security news aggregation from tldrsec, no.security, and other sources. USE WHEN security news, security updates, what's new in security, breaches, security research, sec updates. |
| context | fork |
| cluster | security |
| version | 1.0.0 |
| origin | PAI/Codex skills library |
SECUpdates Skill
Purpose: Aggregate security news from multiple sources into crisp, ranked updates across three categories.
Sources
Custom sources: Add to this skill's sources.json.
Output Format
Maximum 32 items total across all categories, ranked by importance within each.
# Security Updates
**Generated:** [timestamp]
**Sources Checked:** [list]
**Period:** Since [last check date]
---
## 🔴 Security News (Breaches & Incidents)
*Hacks, breaches, exploits in the wild, incidents*
1. **[Headline]** - [1-2 sentence summary]. [Source]
2. **[Headline]** - [1-2 sentence summary]. [Source]
...
---
## 🔬 Security Research
*New vulnerabilities, CVEs, techniques, papers*
1. **[Title]** - [1-2 sentence summary]. [Source]
2. **[Title]** - [1-2 sentence summary]. [Source]
...
---
## 💡 Security Ideas
*Opinions, strategies, industry trends, career*
1. **[Title]** - [1-2 sentence summary]. [Source]
2. **[Title]** - [1-2 sentence summary]. [Source]
...
---
## 📊 Summary
| Category | Count | Top Item |
|----------|-------|----------|
| News | X | [headline] |
| Research | X | [title] |
| Ideas | X | [title] |
**Total:** X/32 items | **Next check:** Run `/secupdates` anytime
Category Definitions
🔴 Security News (Breaches & Incidents)
- Data breaches and leaks
- Active exploits and attacks
- Ransomware incidents
- State-sponsored attacks
- Major vulnerability exploitations
- Company security incidents
🔬 Security Research
- New CVEs and vulnerabilities
- Security research papers
- New attack techniques
- Tool releases
- Vulnerability disclosures
- Bug bounty findings
💡 Security Ideas
- Industry trends and analysis
- Security strategy and opinions
- Career and hiring trends
- Regulatory and compliance news
- Security culture and practices
- Predictions and forecasts
Ranking Criteria
Within each category, rank items by:
- Impact - How many people/systems affected?
- Recency - How new is this?
- Actionability - Can reader do something about it?
- Novelty - Is this genuinely new information?
State Tracking
State file: State/last-check.json
{
"last_check_timestamp": "2026-01-22T12:00:00.000Z",
"sources": {
"tldrsec": {
"last_hash": "abc123",
"last_checked": "2026-01-22T12:00:00.000Z",
"last_title": "tl;dr sec #XXX"
},
"nosecurity": {
"last_hash": "def456",
"last_checked": "2026-01-22T12:00:00.000Z"
}
}
}
On each run:
- Load last-check.json
- Fetch each source
- Compare content hash to detect new items
- Only include items newer than last check
- Update state file after successful run
Process Flow
Step 1: Check State
cat State/last-check.json
Step 2: Fetch Sources (Parallel)
Launch parallel agents to fetch each source:
| Agent | Source | Method |
|---|
| Agent 1 | tldrsec.com | WebFetch latest newsletter |
| Agent 2 | no.security | WebFetch recent posts |
| Agent 3 | krebsonsecurity.com | WebFetch recent articles |
| Agent 4 | thehackernews.com | WebFetch headlines |
| Agent 5 | schneier.com | WebFetch recent posts |
Step 3: Parse & Categorize
For each item found:
- Determine category (News/Research/Ideas)
- Extract headline and 1-2 sentence summary
- Note source
- Assess importance score
Step 4: Rank & Limit
- Sort each category by importance
- Take top items until 32 total
- Distribute reasonably (aim for ~10-12 per category if available)
Step 5: Output & Update State
- Generate formatted output
- Write updated state to last-check.json
Workflow Routing
| Workflow | Trigger | File |
|---|
| Update | "security updates", "sec updates", "/secupdates", "what's new in security" | Workflows/Update.md |
Default: Run the Update workflow.
Key Principles
- Crisp - 1-2 sentences per item, no fluff
- Ranked - Most important first within each category
- Categorized - Clear separation of News/Research/Ideas
- Deduplicated - Same story from multiple sources = one entry
- Limited - Max 32 items total, quality over quantity
- Stateful - Track what's been seen, only show new items
Example Output
# Security Updates
**Generated:** 2026-01-22 12:09 PST
**Sources Checked:** tldrsec, no.security, Krebs, THN, Schneier
**Period:** Since 2026-01-20
---
## 🔴 Security News (Breaches & Incidents)
1. **Microsoft Azure Breach Exposes 2M Customer Records** - Misconfigured storage blob allowed unauthorized access to customer data including emails and phone numbers. [Krebs]
2. **LockBit 4.0 Ransomware Hits Healthcare Chain** - 15 hospitals affected, patient data encrypted, $10M ransom demanded. [THN]
3. **Ivanti VPN Zero-Day Actively Exploited** - CVE-2026-XXXX being used by Chinese APT groups against government targets. [tldrsec]
---
## 🔬 Security Research
1. **New Spectre Variant Bypasses All Mitigations** - Researchers demonstrate "Spectre-NG" affecting Intel and AMD processors, no patch available. [tldrsec]
2. **OAuth Token Theft via Browser Extension** - Novel technique allows stealing tokens from any site using malicious extension. [no.security]
3. **SSRF in AWS IMDSv2** - Bypass discovered in metadata service protections. [tldrsec]
---
## 💡 Security Ideas
1. **The Death of Perimeter Security** - Caleb Sima argues zero-trust is no longer optional after recent breaches. [no.security]
2. **CISO Burnout at All-Time High** - Survey shows 70% considering leaving the field within 2 years. [tldrsec]
3. **AI-Generated Phishing Now Indistinguishable** - Schneier on the implications of LLM-powered social engineering. [Schneier]
---
## 📊 Summary
| Category | Count | Top Item |
|----------|-------|----------|
| News | 3 | Microsoft Azure Breach |
| Research | 3 | New Spectre Variant |
| Ideas | 3 | Death of Perimeter Security |
**Total:** 9/32 items | **Next check:** Run `/secupdates` anytime
Anti-Patterns
| ❌ Bad | ✅ Good |
|---|
| Long paragraph summaries | 1-2 crisp sentences |
| "Read more at..." | Summary + source attribution |
| Unranked list dumps | Importance-ordered items |
| 50+ items | Max 32, quality curated |
| Mixing categories | Clear News/Research/Ideas separation |
| Old news mixed with new | Only items since last check |
