SafeDNS's blog publishes vendor-authored articles on DNS security, covering threats such as DGA, tunneling and C2 mapped to MITRE ATT&CK, Zero Trust gaps at the DNS layer, and DNS amplification DDoS defence. Readers get practical framing for SOC and infrastructure teams, though the content promotes the company's cloud filtering product.
Website: https://blog.safedns.com/
Cisco Talos publishes threat research, vulnerability disclosures and analysis of attacker campaigns, with detection and coverage guidance for Cisco customers. Recent posts cover critical PHP flaws, abuse of legitimate platforms for phishing delivery, and the surge in AI-discovered vulnerabilities.
A researcher's blog publishing technical reverse-engineering reports on spyware, Android surveillance platforms and state-linked malware such as Kimsuky's EndClient RAT, with IOCs. It also offers essays on the power dynamics of threat intelligence and the role of civil society in spyware research.
A threat intelligence newsletter that turns recent public reporting on cyber operations, espionage and exploitation into prioritized judgments for defenders. Each issue separates what is known from what is plausible and ends with a concrete check or decision for security teams.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
