All topics

The best Security Research newsletters

3 newsletters, ranked by editorial quality and how recently they published. Looking for something more specific? Search instead.

blog.isosceles.com· irregular· Inactive for over a year

Isosceles by Ben Hawkes is a blog of in-depth technical analysis on security research, hacking and application security. Issues cover historical attacks such as the 2002 OpenSSH trojan and recent zero-days like the WebP vulnerability, with proof-of-concept detail, plus commentary on AI-driven vulnerability discovery.

openssh backdoorxz-utils backdoorcve-2023-4863webp zero-dayfuzzingaixcc
blog.disclose.io· weekly· Published 4 days ago

A weekly briefing on cybersecurity policy as it affects vulnerability disclosure and security research, with a focus on AI agents accessing government systems. Each issue walks through the main story with sourcing and places it in the wider policy debate.

vulnerability disclosure policybug bountyai agents securityopenai australia breachservices australiaresponsible disclosure

shubs

Ghost
shubs.io· irregular· Published 26 days ago

Shubs, co-founder of Assetnote, writes personal and candid essays on how AI is reshaping software engineering, offensive security and vulnerability research. The posts mix reflections on job satisfaction, first-hand observations from a security research team, and critiques of how CTFs and bug bounty platforms are being flooded by AI-generated reports.

ai and vulnerability researchbug bounty slopctf declinefrontier models securityassetnotesoftware engineering with ai