A security researcher's newsletter covering hands-on offensive security work, including hardware attacks on digital locks and vulnerability disclosures in Yealink IP phones. Readers get write-ups of specific CVEs and physical-access research drawn from real-world testing.
Website: https://www.dipkalasmi.com/
watchTowr Labs publishes technical deep dives into newly disclosed and actively exploited vulnerabilities in enterprise software such as PaperCut, Atlassian products and Citrix NetScaler. Posts cover how the products work, the affected versions, and the exploitation chains, written with a sarcastic voice.
A security blog covering threat intelligence, offensive security, and the attack surface created by AI agents. Issues combine original measurement, experiments, and threat-modeling work, including a harness for testing autonomous offensive agents and credential pivots in agent estates.
Payload Forge publishes first-person offensive security research, including CVE disclosures found while working through the Red Team Ops (CRTO) course stack. Posts walk through discovery, exploitation details, vendor and CNA disclosure timelines, and remediation.
Offensive security research write-ups detailing HTTP request smuggling and cache poisoning chains against major CDN and edge platforms such as Azure Front Door, Akamai and F5. Readers get step-by-step technical narratives of how the bugs were discovered, exploited and reported, including bounty outcomes.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
