8 newsletters, ranked by editorial quality and how recently they published. Looking for something more specific? Search instead.
Stoïk's security team publishes detailed technical write-ups on real ransomware intrusions, scanner vulnerabilities and on-chain ransom tracing. Readers get incident timelines, root-cause analysis and concrete defensive checks drawn from the team's own investigations.
Hands-on malware analysis write-ups covering npm supply chain attacks, ClickFix campaigns and obfuscated JavaScript loaders. Each issue walks through deobfuscation, loader behavior and indicators of compromise.
Long-form technical blog posts from a security researcher on threat hunting and building LLM-based AI agents. Readers get first-person walkthroughs of design decisions, concepts and architecture, from agents written from scratch to agentic workflow engines and structured hunt planning.
A technical security blog covering malware analysis and threat hunting, including config extraction for the xWorm trojan, fingerprinting Havoc C2 team servers and tracing phishing kits. Posts walk through the investigative process step by step and often share scripts or detection queries.
Hands-on malware analysis and threat hunting tutorials, covering URLScan hunting queries and step-by-step deobfuscation of malware scripts in CyberChef. Readers get concrete regexes, sample hashes and walkthroughs they can reproduce.
Practical cybersecurity articles covering defensive hardening, home-lab threat hunting and threat actor profiles. Readers get step-by-step guidance, tool comparisons and MITRE ATT&CK-mapped behaviors they can apply to their own networks.
Threatstalk publishes practical cybersecurity and security engineering guides, including PowerShell detection techniques, Zeek-based ICS threat hunting, and password security basics. Readers get command examples, tool overviews and threat landscape context aimed at defenders.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
