A security blog by a web application firewall practitioner covering JA3 TLS fingerprinting for bot detection, sandboxing honeypot exploits by interpreting attacker payloads, and verifying ModSecurity rules against other WAFs. Readers get detailed, code-backed explanations of practical application security research.
Website: https://waf.ninja/
A cybersecurity company blog covering threat research, AI-assisted security analysis and penetration testing lessons. Readers get detailed write-ups of real investigations, benchmarks and practical security observations.
Isosceles by Ben Hawkes is a blog of in-depth technical analysis on security research, hacking and application security. Issues cover historical attacks such as the 2002 OpenSSH trojan and recent zero-days like the WebP vulnerability, with proof-of-concept detail, plus commentary on AI-driven vulnerability discovery.
CyberDesserts is a hands-on cybersecurity newsletter covering application security, pipeline checks, and emerging AI and agent risks. Readers get practical explanations, concrete commands and checks they can run, and analysis of recent OWASP and MCP security developments.
Tenzai Research publishes firsthand accounts from its AI hacking agent deployed against production enterprise applications, detailing how it chains web access-control flaws, AI agent metadata leaks and API weaknesses into serious findings. Readers get concrete attack-chain walkthroughs and lessons on what works and breaks in AI-driven offensive security.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
