All topics

The best Security Leadership newsletters

8 newsletters, ranked by editorial quality and how recently they published. Looking for something more specific? Search instead.

infosecmadeeasy.com· weekly· Published 3 days ago

Practical cybersecurity leadership essays that translate technical topics like identity metrics, autonomous AI defense and agent governance into board-level decisions. Readers get scenario-driven frameworks, concrete plans and candid corrections to the author's earlier work.

cisoiam metricssecurity roiboard reportingagentic ai securityai agent accountability
theredteammanager.com· irregular· Published 3 months ago

A practitioner's blog on red team leadership, covering how to choose between penetration tests, threat modelling, purple teaming and red teaming, and why covert adversary emulation is essential to realistic testing. Readers get clear distinctions between offensive security services and a grounded view of AI's real impact on attacker capability.

red teamred teamingadversary emulationthreat-led testingpurple teampenetration testing
dispatch.redteams.fyi· irregular· Inactive for over a year

Essays on red teaming and security leadership that question industry norms, from the incentives and psychological costs of red team exercises to behavior change marketing for security culture. Written from a practitioner's perspective with references to research and management writing.

red teamcyber securitycisosecurity awarenessbehavior changeblue team
securityautopsy.com· irregular· Published 7 days ago

A practitioner's blog on building human-centered security programs, covering incident response readiness, AI's effect on vulnerability management, and the future of software engineering. Posts mix personal experience from industry and consulting with opinionated analysis and real breach examples.

tabletop exercisesincident responsevulnerability managementattack surface managementcisoransomware
davidluchi.com· weekly· Published 4 months ago

A security leader writes a series on how to build a cybersecurity team for the AI era, covering people, technology and process, plus a personal piece on his career and conference speaking. Issues combine practical opinion with cited industry data from Gartner, Stanford and DORA.

security teamai securitysecurity operationsvendor consolidationreliability engineeringai agents
markn-ca.ghost.io· irregular· Inactive for over a year

Mark Nunnikhoven writes about cybersecurity and privacy, mixing write-ups of his conference talks with retrospectives on his past video and podcast series. Readers get practical thinking on how security teams work with the business, plus a look at the author's career in security education.

security teamsconference talkscloud securitysecurity workflowssecurity communicationvlog archive
engineering.binti.com· irregular· Inactive for over a year

An engineering blog from child welfare software company Binti, featuring posts on design thinking, security leadership and the company's design philosophy. Readers get a first-person look at how a product team approaches design, empathy and leadership.

design philosophycisonew leaderempathychild welfaregovtech
cisosciso.com· irregular· Published 21 days ago

CISOsCISO is a series-style newsletter covering the intersection of cybersecurity, AI and digital trust from a CISO's perspective. Recent issues cover cloud security priorities for 2027, the shift from least privilege to least agency, and AI systems as distinct security domains.

cisocloud securityleast agencyleast privilegeai securityagentic ai