What's a good website for improving your cybersecurity?

There are a large number of websites dedicated to cybersecurity which report the news. There are a large number of articles offering advice, written by journalists not especially familiar with the field. For example they often give the outdated and unhelpful advice to change your password frequently. In the real world, the bad guys don’t dawdle when they obtain your account credentials: they act immediately. So changes in password don’t help too much. I would like an article written by someone knowlegeable and reviewed by them periodically.

I’m a fan of Brian Krebs of Krebs on Security, but for some reason he doesn’t appear to have a webpage summarizing best practices. His articles often do contain advice though, such as When in Doubt: Hang Up, Look Up, & Call Back, and over a decade ago, Banking on a Live CD.

I understand that BleepingComputer.com is another good website for cybersecurity news. It also has a forum that I’ve used more than once to help resolve my computer issues.

Google lists the following cybersecurity websites, in case your recommendation is on the tip of your tongue: Dark Reading, The Hacker News, CSO Online, Krebs on security, Threatpost, Graham Cluley, Schneier on Security, Infosecurity Magazine, Sophos, SecurityWeek, Bleeping Computer, Help Net Security, Security Discovery, Tripwire, Akamai, CNET Networks, CyberScoop, Cybersecurity and Infrastructure Security Agency, SANS, Unsupervised learning, CIO, Cyber Magazine, IT Security Guru, Security intelligence.

Book recommendations for reducing your threat surface might also work, even if they are somewhat dated. At the end of the day it would be prudent to check the cybersecurity news periodically for stories like this one.