A veteran security practitioner's blog-style newsletter covering SSL/TLS certificate compromises, critiques of cybersecurity awareness campaigns, and organizational security models. Readers get plain-language explanations of how certificates work alongside opinionated, practical takeaways.
Website: https://www.between-two-firewalls.com/
Stoïk's security team publishes detailed technical write-ups on real ransomware intrusions, scanner vulnerabilities and on-chain ransom tracing. Readers get incident timelines, root-cause analysis and concrete defensive checks drawn from the team's own investigations.
Essays and a serialized book on AI-era cybersecurity, trust and measurement, citing specific vendor and lab reports. Readers get an original framework, including the Learning Advantage Ratio and the work-factor idea for AI judgment, alongside analysis of how security metrics get gamed.
Covers security news for people who run their own servers and care about privacy, including supply-chain attacks, runtime vulnerabilities and forensic tooling. It separates verified facts from rumour and explains what each issue means for readers and which fixes to apply.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
