This blog from GitGuardian covers secrets management, credential security, and non-human identities, with research on leaked API keys in AI tools and the company's Good Samaritan notification program. Readers get practical security frameworks and data on how credentials leak across code, endpoints, and AI agents.
Website: https://blog.gitguardian.com/
Essays and a serialized book on AI-era cybersecurity, trust and measurement, citing specific vendor and lab reports. Readers get an original framework, including the Learning Advantage Ratio and the work-factor idea for AI judgment, alongside analysis of how security metrics get gamed.
Cisco Talos publishes threat research, vulnerability disclosures and analysis of attacker campaigns, with detection and coverage guidance for Cisco customers. Recent posts cover critical PHP flaws, abuse of legitimate platforms for phishing delivery, and the surge in AI-discovered vulnerabilities.
A technical newsletter from an IT professor-style author that works through Microsoft security engineering problems with concrete KQL, showing why common detections and sharing settings fail in practice. Readers get practical guidance on Sentinel cost reduction, flawed analytic rules, and the security risks of anonymous sharing links.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
