Heh, I get my infosec news from underground sources: private Matrix channels, Signal groups/messages, etc. The people tipping me off are getting them from vendor bulletins, or things they see in the field. It's how most senior infosec people stay in the loop.
But what I want to know is where people outside the field get their info.