Offensive security research write-ups detailing HTTP request smuggling and cache poisoning chains against major CDN and edge platforms such as Azure Front Door, Akamai and F5. Readers get step-by-step technical narratives of how the bugs were discovered, exploited and reported, including bounty outcomes.
Website: https://malicious.group/
watchTowr Labs publishes technical deep dives into newly disclosed and actively exploited vulnerabilities in enterprise software such as PaperCut, Atlassian products and Citrix NetScaler. Posts cover how the products work, the affected versions, and the exploitation chains, written with a sarcastic voice.
A security blog covering threat intelligence, offensive security, and the attack surface created by AI agents. Issues combine original measurement, experiments, and threat-modeling work, including a harness for testing autonomous offensive agents and credential pivots in agent estates.
Payload Forge publishes first-person offensive security research, including CVE disclosures found while working through the Red Team Ops (CRTO) course stack. Posts walk through discovery, exploitation details, vendor and CNA disclosure timelines, and remediation.
A security company blog publishing technical advisories and write-ups on vulnerabilities found during offensive security work. Readers get detailed analysis of CVEs, attack chains and defense bypasses with reproduction details.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
