ShroudSec is a beginner-friendly security blog delivered by email, explaining fundamentals like phishing, HTTP versus HTTPS, and DNS records. Readers get plain-language explanations with practical steps they can try, such as checking email subject lines and running DNS lookups from a terminal.
Website: https://shroudsec.ghost.io/
Stoïk's security team publishes detailed technical write-ups on real ransomware intrusions, scanner vulnerabilities and on-chain ransom tracing. Readers get incident timelines, root-cause analysis and concrete defensive checks drawn from the team's own investigations.
Covers security news for people who run their own servers and care about privacy, including supply-chain attacks, runtime vulnerabilities and forensic tooling. It separates verified facts from rumour and explains what each issue means for readers and which fixes to apply.
Covers security research on AI infrastructure and malware, including a geopolitical analysis of strikes on Yandex data centers and hands-on reverse engineering write-ups of Windows loaders and RMM abuse. Readers get detailed technical findings, indicators, and lessons about analysis tooling and methodology.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
