All topics

The best Application Security newsletters

3 newsletters, ranked by editorial quality and how recently they published. Looking for something more specific? Search instead.

blog.isosceles.com· irregular· Inactive for over a year

Isosceles by Ben Hawkes is a blog of in-depth technical analysis on security research, hacking and application security. Issues cover historical attacks such as the 2002 OpenSSH trojan and recent zero-days like the WebP vulnerability, with proof-of-concept detail, plus commentary on AI-driven vulnerability discovery.

openssh backdoorxz-utils backdoorcve-2023-4863webp zero-dayfuzzingaixcc

Arcjet blog

Independent
arcjet.com· weekly· Published 8 days ago

A company blog covering security for AI agents, including prompt injection, session behavior analysis and runtime policy enforcement for coding agents. Readers get product announcements alongside technical explanations of how the features are built and the threat models behind them.

prompt injectionagent runtime securitycoding agentsclaude codemcp securityopentelemetry
building.jane.app· irregular· Published 1 months ago

Engineering blog from Jane, a healthcare platform, where staff engineers share internal practices like building Vector, an AI-driven security platform, and designing AI chat features through collaborative techniques such as Prompt Storming. It also covers team exercises that build lateral thinking and problem-solving skills.

secure sdlcappsecllm agentsvulnerability scanningprompt stormingconversational ai design