A security researcher's newsletter that walks through offensive techniques, currently a new series on abusing eBPF in the Linux kernel, following an earlier series on abusing DNS with Rust code. Each issue mixes conceptual explanation with hands-on examples and lab-only caveats.
Website: https://offensive-context.ghost.io/
Sascha Corti's personal blog documents his experiments with a subdermal VivoKey Apex Flex implant, covering how he moved OpenPGP keys onto it and used them for SSH login via GnuPG on macOS. Posts also weigh up when open-weight AI models are worth running instead of frontier ones.
Nadav Eyal's newsletter offers deeply sourced analysis of Israeli politics, the October 7 aftermath, and regional security, with weekly columns on election dynamics and intelligence failures. Readers get informed, opinionated context that cuts through the noise of daily Israeli and Middle East news.
A security researcher's blog-style newsletter dissecting malware samples, including a trojanized math library, a ClickFix campaign hitting an airport site, and a dependency confusion campaign targeting Russian financial developers. Readers get hands-on deobfuscation walkthroughs, IOCs and analysis of threat-actor tradecraft.
Technical posts from an engineering firm on building Rust within Nix, Daml/Canton smart contract custody patterns, and running the Nix daemon unprivileged. Readers get concrete mechanisms, trade-offs and reproducible examples for high-assurance infrastructure work.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
