Shubs, co-founder of Assetnote, writes personal and candid essays on how AI is reshaping software engineering, offensive security and vulnerability research. The posts mix reflections on job satisfaction, first-hand observations from a security research team, and critiques of how CTFs and bug bounty platforms are being flooded by AI-generated reports.
Website: https://shubs.io/
Technical deep dives into Windows security internals, covering file locking, VSS snapshots, impersonation APIs and pending file operations. Readers get hands-on explanations of how Windows mechanisms work and how attackers and researchers interact with them.
Isosceles by Ben Hawkes is a blog of in-depth technical analysis on security research, hacking and application security. Issues cover historical attacks such as the 2002 OpenSSH trojan and recent zero-days like the WebP vulnerability, with proof-of-concept detail, plus commentary on AI-driven vulnerability discovery.
A personal newsletter from a security researcher covering hardware reverse-engineering, secure boot and attestation internals, exploit development, and fuzzing. Issues mix candid retrospectives on applying AI/LLMs to real security work with technical walkthroughs of boot-chain trust models and curated research-paper collections.
A weekly briefing on cybersecurity policy as it affects vulnerability disclosure and security research, with a focus on AI agents accessing government systems. Each issue walks through the main story with sourcing and places it in the wider policy debate.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
