Yafes writes practitioner notes on application security, covering self-hosted secure development infrastructure, local AI models for security tooling, and home-network debugging. The posts are detailed and report measured results and concrete troubleshooting steps.
Website: https://y.mo.la/
Security-focused newsletter for Laravel developers covering vulnerability notices, patching guidance and hands-on security techniques. Recent issues cover a critical PHP security release and its aftermath, and an in-depth walkthrough of auditing a Laravel app with an AI security plugin.
A cybersecurity company blog covering original threat research, penetration testing lessons, and hands-on experiments with AI in application security. Readers get detailed write-ups of real fraud operations, benchmark results, and practical security advice.
A security research blog from iSEC that publishes in-depth technical write-ups on vulnerabilities and attack techniques, such as ZIP path traversal and Android Keystore weaknesses. Some articles are in English and some in Polish, with hands-on testing and code-level detail.
Long-form technical posts on hacking, security research and application security by Ben Hawkes, covering topics such as historical and recent supply-chain backdoors, in-the-wild zero-days, and AI-driven vulnerability discovery. Readers get original analysis, timelines and technical detail, including proof-of-concept work, on notable security events.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
