The PRIDE Security Blog publishes offensive security research, including write-ups of a Microsoft Defender Automatic Attack Disruption bypass, a CVE-2024-29417 local privilege escalation in an E-TRUST identity system, and a multi-part series on attacking physical turnstiles. Readers get technical details, affected components, prerequisites and mitigation context for each finding.
Website: https://blog.pridesec.com.br/
A technical newsletter from an IT professor-style author that works through Microsoft security engineering problems with concrete KQL, showing why common detections and sharing settings fail in practice. Readers get practical guidance on Sentinel cost reduction, flawed analytic rules, and the security risks of anonymous sharing links.
Cisco Talos publishes threat research, vulnerability disclosures and analysis of attacker campaigns, with detection and coverage guidance for Cisco customers. Recent posts cover critical PHP flaws, abuse of legitimate platforms for phishing delivery, and the surge in AI-discovered vulnerabilities.
A researcher's blog publishing technical reverse-engineering reports on spyware, Android surveillance platforms and state-linked malware such as Kimsuky's EndClient RAT, with IOCs. It also offers essays on the power dynamics of threat intelligence and the role of civil society in spyware research.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
