A cloud security blog with hands-on tutorials and opinionated commentary on AWS and GCP security tooling. Issues cover topics like shipping eBPF runtime security logs to Google Cloud, Google's Security Command Center strategy, and post-quantum cryptography on AWS.
Website: https://alexanderhose.com/
Practical, KQL-heavy lessons on Microsoft Sentinel and Entra ID security, covering detection rule tuning, log cost reduction and exposure from anonymous sharing links. Each issue critiques a common default or assumption and shows a concrete fix.
A cloud and identity security researcher writes long-form posts on privilege escalation, confused-deputy risks in cloud service accounts, and the state of vulnerability exploitation. The newsletter explains technical attack paths and mitigations in detail, with a personal, opinionated voice.
Philip Walley writes about enterprise cybersecurity topics including SASE, Zero Trust, AI agents and authorization for leaders designing secure networks. The issues offer a clear point of view, such as treating AI agents like temporary contractors and enforcing limits architecturally rather than through prompts.
Risky Business newsletter covers cybersecurity breaches, vulnerabilities and threat actor activity with short news items and links to its podcast episodes. The sample shows concise, news-style reporting on incidents such as a Tor exit node hijack, a KVM escape vulnerability and an arrest of a hacking group.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
