All topics

The best Supply Chain Security newsletters

3 newsletters, ranked by editorial quality and how recently they published. Looking for something more specific? Search instead.

blog.isosceles.com· irregular· Inactive for over a year

Isosceles by Ben Hawkes is a blog of in-depth technical analysis on security research, hacking and application security. Issues cover historical attacks such as the 2002 OpenSSH trojan and recent zero-days like the WebP vulnerability, with proof-of-concept detail, plus commentary on AI-driven vulnerability discovery.

openssh backdoorxz-utils backdoorcve-2023-4863webp zero-dayfuzzingaixcc
blog.pulsedive.com· biweekly· Published 22 days ago

A threat intelligence blog publishing in-depth write-ups on cybercrime ecosystems, malware analysis and security primers. Issues include indicators of compromise, MITRE ATT&CK mappings and defensive recommendations.

the comscattered spidershinyhunterslapsus$sbomsoftware supply chain
blog.mithrilsecurity.io· irregular· Inactive for over a year

Mithril Security's blog covers confidential computing, trusted execution environments and AI security, including tools for verifiable AI training and tests and analyses of hardware security claims. Readers get technical write-ups on protecting AI models from tampering, cheating and supply chain attacks.

ai model poisoningintel sgxtrusted execution environmentconfidential aimodel provenancevtpm