I got hired in the cyber security field and it's a break-in for me. I have many years in the IT field so I am building right off of that.
My job requires knowledge of common attack vectors/signatures, recognition of a kill chain, isolation, remediation, and research. Basic CND type stuff.
One thing I am curious about is where would a cyber defender go to learn about zero-day exploits, cutting edge exploitation/attack routines, or anything else that a typical black hat (not a script kiddie) might know and use.
The emergent problem is that I don't want to make myself vulnerable or risk tipping others off to my presence while doing info mining. Most importantly, I don't want to risk damaging my integrity by being identified or associated with black hat groups.
I'm aware of the National Vulnerability Database but I'm concerned with the delta that exists between brand new attacks or exploits and known signatures that are archived there. The larger the delta between the two (the latency between the newest entries and the trailing edge of the latest exploits/attacks not yet captured), the more that info is deprecated. I want to minimize that delta by bridging the knowledge gap between what's available in the NVD and what has yet to be recorded and documented.
There are sites like Krebs On Security and the random articles found everywhere but are there any other useful repositories, forums/discussions, or sites that have been useful to farm that kind of information?