Weekly Security Briefing
News, vendor watch, and the open-source tools worth knowing about — plus a dedicated eye on cloud security and hardening. Curated for practitioners, not headline chasers.
Free weekly. No spam. Unsubscribe anytime.Why encryption isn't optional — IBM's 2026 breach numbers make the case — plus the tradeoffs nobody mentions: key loss, encryption ≠ access control, and the post-quantum gap almost nobody's closing.
The AWS S3 checklist's Azure counterpart — access, network, encryption, and recovery controls for Blob Storage, plus a static-website gotcha that quietly undermines 'anonymous access disabled.'
A practical checklist for locking down S3 buckets — access control, encryption, versioning, logging, and detection — mapped to the exact CIS Foundations Benchmark controls each one satisfies.
Week of Sep 8, 2026 · secblog.reedcloudsec.com SecBlog Weekly Issue 002: Patch Now, Trust Nothing. Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days Microsoft's
Five things from this week worth your five minutes
Misconfigurations, CSPM findings, IaC security, and hardening checklists — covered evenly across AWS, Azure, and GCP.
Biweekly →Launches, acquisitions, funding, and notable threat research from prominent vendors — read with healthy skepticism of the hype.
As-needed →Smaller, often-overlooked open-source scanners and hardening scripts that don't get mainstream coverage.
Biweekly →Longer original analysis — a technique explained, a breach post-mortem, a tool walkthrough. Published monthly.
Coming soon