A personal newsletter on offensive application security, machine learning and the reasoning behind both, mixing conceptual essays with hands-on experiments. Issues cover Bayesian thinking, decision-making under uncertainty in AI, and how to frame security assessments around outcomes and time constraints.
Website: https://www.sensecurity.io/
A cybersecurity company blog covering threat research, AI-assisted security analysis and penetration testing lessons. Readers get detailed write-ups of real investigations, benchmarks and practical security observations.
Isosceles by Ben Hawkes is a blog of in-depth technical analysis on security research, hacking and application security. Issues cover historical attacks such as the 2002 OpenSSH trojan and recent zero-days like the WebP vulnerability, with proof-of-concept detail, plus commentary on AI-driven vulnerability discovery.
A security blog by a web application firewall practitioner covering JA3 TLS fingerprinting for bot detection, sandboxing honeypot exploits by interpreting attacker payloads, and verifying ModSecurity rules against other WAFs. Readers get detailed, code-backed explanations of practical application security research.
CyberDesserts is a hands-on cybersecurity newsletter covering application security, pipeline checks, and emerging AI and agent risks. Readers get practical explanations, concrete commands and checks they can run, and analysis of recent OWASP and MCP security developments.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
