Payload Forge publishes first-person offensive security research, including CVE disclosures found while working through the Red Team Ops (CRTO) course stack. Posts walk through discovery, exploitation details, vendor and CNA disclosure timelines, and remediation.
Website: https://payloadforge.io/
watchTowr Labs publishes technical deep dives into newly disclosed and actively exploited vulnerabilities in enterprise software such as PaperCut, Atlassian products and Citrix NetScaler. Posts cover how the products work, the affected versions, and the exploitation chains, written with a sarcastic voice.
A security blog covering threat intelligence, offensive security, and the attack surface created by AI agents. Issues combine original measurement, experiments, and threat-modeling work, including a harness for testing autonomous offensive agents and credential pivots in agent estates.
A security company blog publishing technical advisories and write-ups on vulnerabilities found during offensive security work. Readers get detailed analysis of CVEs, attack chains and defense bypasses with reproduction details.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
