Personal blog by an application security practitioner focused on web application security. Recent posts include critiques of security tooling quality and a sponsored two-part series with JFrog on reducing friction between DevOps and security teams.
Website: https://blog.sean-wright.com/
A cybersecurity company blog covering threat research, AI-assisted security analysis and penetration testing lessons. Readers get detailed write-ups of real investigations, benchmarks and practical security observations.
Isosceles by Ben Hawkes is a blog of in-depth technical analysis on security research, hacking and application security. Issues cover historical attacks such as the 2002 OpenSSH trojan and recent zero-days like the WebP vulnerability, with proof-of-concept detail, plus commentary on AI-driven vulnerability discovery.
A security blog by a web application firewall practitioner covering JA3 TLS fingerprinting for bot detection, sandboxing honeypot exploits by interpreting attacker payloads, and verifying ModSecurity rules against other WAFs. Readers get detailed, code-backed explanations of practical application security research.
CyberDesserts is a hands-on cybersecurity newsletter covering application security, pipeline checks, and emerging AI and agent risks. Readers get practical explanations, concrete commands and checks they can run, and analysis of recent OWASP and MCP security developments.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
