Stoïk's labs blog publishes long-form threat hunting, OSINT and incident response case studies drawn from its CERT team. Readers get detailed, technically grounded write-ups of real intrusions, tool vulnerabilities and ransomware money-trail analysis, with practical checks for their own environments.
Website: https://labs.stoik.io/
A technical newsletter from an IT professor-style author that works through Microsoft security engineering problems with concrete KQL, showing why common detections and sharing settings fail in practice. Readers get practical guidance on Sentinel cost reduction, flawed analytic rules, and the security risks of anonymous sharing links.
A cybersecurity newsletter that reconstructs real ransomware negotiation chat transcripts and analyses the tactics, pricing and psychology on both sides. Each issue walks through a case study, drawing out what the exchanges reveal about attacker and victim behaviour.
Cisco Talos publishes threat research, vulnerability disclosures and analysis of attacker campaigns, with detection and coverage guidance for Cisco customers. Recent posts cover critical PHP flaws, abuse of legitimate platforms for phishing delivery, and the surge in AI-discovered vulnerabilities.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
