When looking up security risks on the net I find that all research being cited (if any is cited) always seems to come from the Anti-Malware companies. (just e.g., this article cites F-secure, AVG and McAfee).
I mostly do "research" of this kind to check how dangerous the latest IT security headlines in the media really are. (That is: Dangerous for my granny?, for my sister?, or for me? as someone who knows his way around.)
While I think myself not being prone to any "conspiracy theories", I find it a tad disappointing that all research and professional statements wrt. to security risks to me and my family that I seem to be able to find, seem to be by the companies trying to sell their Anti-* packages.
Are there any "independent" parties (like uni deps, gov agencies), that publish infos wrt. to new security threats?
(Note: I'm not saying that they'll be free of any bias, but they'll have slightly different bias, or so I hope :-) )
Edit: After a few answers and comments, it seems the case may be that (mass) media are very often citing the malware-companies, as these do easily quoted press releases on new security risks to consumers.