The Security Economist applies economic reasoning to information security, arguing that misaligned incentives explain persistent software and security failures such as unpatched open-source supply chain risks. Its essays use historical analogies and a distinctive metaphorical style to examine the hidden costs of AI hype and autonomous agents.
Website: https://www.securityeconomist.com/
Rick Zeleznik's blog covers Microsoft 365, SharePoint, OneDrive and AI, with hands-on testing of security configurations and reflections on how generative AI changes visual communication and page authoring. Readers get practical findings about SharePoint access controls and a considered view of how Copilot shifts design work for business users.
Technical and strategic essays on infosec and AI, including hands-on tests of AI pentesting tools and open-weight models for bug hunting. It also covers security concepts such as Zero Trust, explained in plain terms with business context.
A security and privacy blog by Maikel covering vulnerability disclosures, practical mail server troubleshooting, and regulatory topics like NIS2 and software bills of materials. Readers get detailed write-ups of real findings and hands-on configuration tips.
A knowledge base and newsletter covering ISO 27001 certification, including guides to the standard, Annex A controls, risk assessment and audits. It also announces updates to the publisher's own AI assessment tools (IX Assess and IX CISO).
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
