Skip to content

Survey Results: The Top Content and Communities for IT & Security Pros

Iru Team Iru Team
Survey Results: The Top Content and Communities for IT & Security Pros

Are you curious where your peers get updates on the latest IT and security news? Or maybe you have an inside scoop on a resource or conference that deserves more recognition? We were curious, too. So, we took the question to our community in a broad survey of professionals - from security experts to technology leaders and admins. The responses gave us great insights into where IT and security practitioners are hanging out online and in-person, including the top:

Since a majority of respondents wanted to see the survey results, we decided to turn them into a full post. We’re confident that you’ll find a few gems in the recommendations, like a new favorite newsletter or a YouTube channel for bite-sized learning over lunch.

Which Communities are the Most Popular for IT, Security, and Admin Professionals?

Online communities and platforms like Reddit, Discord, and Slack are one of the first places professionals go for authentic advice, feedback, and recommendations. And it’s no secret why. Peer-managed communities grow organically and they are a trusted environment for unfiltered insights. In addition to offering practical tips, online communities can also help professionals build their networks, find job opportunities, and cultivate an audience.

kandji_blog_graphic_survey

Our survey results show a bias toward Reddit and Slack (comprising 46.6% of all responses), and the most popular channels and subreddits include the following:

Slack

Reddit

What was grouped in the 32.3% of responses labeled “Other?” Good question. Notable entries include:

Online communities are valuable for their direct networking opportunities with peers. But, because they’re typically moderated by community members, they may not offer the same depth of editorial review and citations as an official industry source. That’s why many professionals also subscribe to verified news sites and trusted publications for updated security notices, thought leadership, and analysis of emerging trends.

What Sources Do Professionals Trust for IT and Security Insights?

 

Whether you’re a time-crunched executive or a team-level expert, most of us start the day scanning our favorite sites for the latest news. Our survey showed that while communities remain one of the top ways to find and digest security insights, there are many other popular sources and preferred content formats for IT and security professionals. Here are a few key takeaways from the responses:

  • Blogs and media sites like Krebs on Security, Dark Reading, BleepingComputer, and The Hacker News are still highly trusted. These are preferred sources for staying on top of potential threats, product news, and security trends.
  • Newsletters like those from TLDR, Iru, and 4sysops are trusted for concise summaries and timely content.
  • Podcasts like MacAdmins and Risky Business are appreciated by a smaller audience that values deeper commentary, or who prefer audio formats while multitasking.

For a quick analysis, we’ll first look at responses by their category type (e.g., blog, podcast, newsletter, etc.), then we’ll list and link to the top sources referenced in each category.

Trusted IT & Security Insight Sources V2

Community

Blogs and Media

  • 9to5 Mac -  Delivers daily updates and inside details on all things Apple for fans, power users, and tech followers.
  • Macworld - A practical guide for Apple users and small businesses to make the most of their Macs, iPhones, and iPads.
  • Dark Reading - A must-read for cybersecurity professionals, offering deep dives into emerging threats, vulnerabilities, and enterprise issues.
  • Krebs on Security - Brian Krebs uncovers the stories behind security issues and breaking reporting for readers who care about cybersecurity.
  • Infosecurity Magazine - Blends breaking news, expert insights, and industry analysis for security teams.
  • Iru Blog - Written for IT and security pros managing devices, with smart takes on fleet management, security, emerging threats, and compliance at scale.
  • Objective-See - Created by a macOS security researcher, this blog shares tools and insights for technical users who care about privacy and security.
  • BleepingComputer - Combines tech support and cybersecurity news for both IT pros and regular users dealing with digital headaches.
  • The Hacker News - Delivers fast-moving updates on cybersecurity for a global audience of security professionals and ethical hackers.
  • Malwarebytes Lab - Analyzes malware threats and offers digital safety tips for anyone who wants to better protect their devices and data. 

Newsletters

  • TLDR Newsletter - This scannable, cleverly-written tech newsletter keeps developers up to speed on startups, programming, and the latest in AI.
  • 4sysops Newsletter  - Written for Windows IT admins, the newsletter offers tips, tools, and tutorials for managing Windows systems and enterprise architecture.

Government

Social Media

  • Dark Reading in Plaintext (published on LinkedIn) - A weekly newsletter that recaps the biggest cybersecurity stories in a straightforward format for busy security professionals

Podcast

  • Risky Business - A sharp, entertaining cybersecurity podcast and newsletter that keeps infosec professionals informed on the latest threats, policy moves, and industry news
  • MacAdmins Podcast - A podcast by and for Apple IT admins, covering tools, workflows, and real-world challenges in managing Macs at scale

Many authors and podcasters listed here are also active on social media, which offers a direct way to interact with the writers, participate in conversations, and share content with your connections. Our next survey section uncovers where IT and security professionals are active on social media networks and which thought leaders get the most attention.  

Who Do Professionals Follow on Social Platforms for IT and Security Insights?

 

Social media is increasingly where news and insight are consumed, regardless of your industry. But the mix of personal and professional opinions can make legitimate news harder to find and verify. This was evident in our survey questions about social media, which received fewer and less consistent responses. And for those who did answer, it was clear that respondents don’t have many trusted resources. 

Unsurprisingly, most responses were grouped around previously mentioned blog and media sources (e.g., Krebs on Security), while LinkedIn and YouTube were the most common sites. Below we’ve highlighted the top accounts mentioned in our survey to help you curate a productive and credible social feed for your preferred platforms:

Social platforms are great for growing your digital network and learning independently. But what if you’re eager to connect at conferences, join local meetups, or tune in to webinars? Our survey finished with a question to learn what kinds of events IT and security professionals find most valuable. 

What Events Do IT and Security Professionals Regularly Attend?

 

While conferences are ideal for those who enjoy the mix of in-person sessions and face-to-face networking, others prefer the convenience and $0 travel budget for online events and webinars. And some survey respondents noted they don’t attend events at all, whether due to budget, limited awareness, or simply not finding them useful. Here's what emerged from our results:

  • Conferences are the most commonly attended type of event; especially larger annual industry conferences like RSA and Black Hat
  • Webinars remain a popular choice for those who prefer flexible formats and scheduling. Many attend them regularly as part of ongoing professional development
  • Vendor events showed up in the data too; often as opportunities to learn more about tools and platforms they already use

Regular Event Attendance (Top Categories) V2

Conferences

Webinars

Think We Missed Something?

This survey was the first in a series designed to draw out unique insights from both Iru users and the broader community. If you know of a must-have resource that we left out, fill out the form below so we can add it to future versions of this post:

 

 

Future surveys will go deeper into specific best practices, tooling preferences, and expert recommendations. If you want to see upcoming results and join an active, growing community of your peers, here are the best ways to stay up-to-date:

  • Get connected to an expert community by joining the Iru channel in the MacAdmins Slack Workspace
  • Follow us on LinkedIn to follow the conversation and for updates on content and company news

Kandji is now Iru. This article was originally published under the Kandji brand.

Recent Articles

Featured image: Rustbot, the macOS malware used in the latest Rust Supply Chain Attack
Cristian Molina • 10 min read

Rustbot, the macOS malware used in the latest Rust Supply Chain Attack

On August 20, 2026, attackers published malicious versions of three widely used Rust packages to crates.io, the official Rust package registry. On macOS, the payload is a remote access trojan (RAT) that collects cloud credentials, SSH keys, cryptocurrency wallet data, and browser profile information, then sends it to attacker-controlled infrastructure. It installs a launch agent to survive reboots and accepts follow-on commands from its operators. Once running, it decrypts its configuration, profiles the host, Reads the local browser stores, installs persistence via LaunchAgent, and beacons out. The packages were available for approximately two hours before removal. The attackers also withdrew the previous stable versions, which pushed automated dependency resolution toward the compromised releases. Any environment that compiled an affected project during that window should be treated as compromised. This blog documents Iru's analysis of the native Apple Silicon ARM64 implant.

Threat Intelligence
Featured image: Inside the screensharingd Bugs: How macOS Screen Sharing Went from Root File Access to Pre-Auth Compromise
Csaba Fitzl • 6 min read

Inside the screensharingd Bugs: How macOS Screen Sharing Went from Root File Access to Pre-Auth Compromise

In late July 2026, a cluster of vulnerabilities in macOS Screen Sharing turned what initially looked like a fairly constrained privilege problem into one of the more interesting macOS remote-attack stories in years.

Threat Intelligence
Featured image: Apple is deprecating hdiutil in macOS 27 Golden Gate. Are your scripts ready?
Arek Dreyer • 3 min read

Apple is deprecating hdiutil in macOS 27 Golden Gate. Are your scripts ready?

If you spent part of last weekend fielding Slack messages about hdiutil, you're not alone. Jeff Johnson's lapcatsoftware.com blog flagged that the man page for hdiutil in the macOS 27 Golden Gate beta now carries a deprecation notice:

Educational

See Iru in action

Discover why thousands of teams choose Iru

By submitting this form I agree to Iru’s Privacy Policy and consent to be contacted by Iru about its products and services.

Stay up to date

Iru's bi-weekly collection of articles, videos, and research to keep IT & Security teams ahead of the curve.