The CVEs worth knowing about, by email.
New CVEs on the components we track and the breakdowns we publish, when there is something worth sending. No fixed day, no issue sent to fill a slot. Free. No sponsored content. No exit-intent popups.
double opt-in · check your inbox to confirm
What lands in your inbox
The CVEs that matter
The new CVEs on the components we track that deserve a closer look: what is affected, which release fixes it, whether it is listed in CISA KEV.
The breakdowns we publish
When we write an analysis of a batch of CVEs, the issue links to it. If we published nothing, there is nothing here.
Nothing when there is nothing
No issue goes out just to keep a schedule. Past issues are in the archive, each with its date.
Promises we're holding ourselves to
Never more than one email a week.
And usually fewer: an issue goes out when there is something worth sending, not on a fixed day.
No sponsored content.
There is none today. If that ever changes, we'll tell you in advance and it will be one clearly labelled slot.
No analytics on you.
No Google Analytics, no Mailchimp tracking pixels, no link-cloaked URLs that report back.
One-click unsubscribe.
Every email. No retention loops, no 'are you sure', no ten-step preference centre.