Bad Characters is a newsletter from a working penetration tester who shares red teaming techniques, such as getting phishing emails past filters, and recaps of security conferences like DEFCON. It mixes practical tips and tool references with short, personal updates about talks and the security community.
Website: https://www.badcharacters.io/
Stoïk's security team publishes detailed technical write-ups on real ransomware intrusions, scanner vulnerabilities and on-chain ransom tracing. Readers get incident timelines, root-cause analysis and concrete defensive checks drawn from the team's own investigations.
Essays and a serialized book on AI-era cybersecurity, trust and measurement, citing specific vendor and lab reports. Readers get an original framework, including the Learning Advantage Ratio and the work-factor idea for AI judgment, alongside analysis of how security metrics get gamed.
Covers security news for people who run their own servers and care about privacy, including supply-chain attacks, runtime vulnerabilities and forensic tooling. It separates verified facts from rumour and explains what each issue means for readers and which fixes to apply.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
