I used to have Google Alerts to scan for security/reliability news of my home's IoT products. Ultimately the firehose of blogspam and other false positives became too much. I then deleted the Google Alerts and got rid of most of my IoT products, which solved the problem.

If there's a low-volume mailing list out there for IoT security disclosures, I'd love to find it. Even better if users could sign up for the specific products they own. Could probably expand this to all kinds of software, hardware, etc... sign up with your specific model and/or version number, receive tailored alerts when urgent security/reliability news emerges. Sort of like "haveibeenpwned" but for all the software and devices in your life.

Sorry for the tangent, but I'm secretly hoping this already exists and someone will reply with a link, or someone else will get inspired and create it :)