I'm looking for really good technical blogs or even blog posts. From stepping through gritty details of exploits to big picture ideas even to discussion about specific tools, how they work, and pros and cons. I am just finding myself, having been in field for five years or so, really hungry for more quality info.<p>There are tons of company marketing blogs that are largely superficial, but finding good technical or in-depth blogs is a bit harder. I've read some good stuff from Dark Reading and Bleeping Computer. The SANS blogs can be good as well. That about covers what I largely have followed. Hope some folks have some interesting reads to share.<p>edit: podcasts and other media forms are great as well
Chompie (<a href="https://twitter.com/chompie1337" rel="nofollow">https://twitter.com/chompie1337</a>) does a great job on exploit writeups. Take a look at <a href="https://www.graplsecurity.com/post/iou-ring-exploiting-the-linux-kernel" rel="nofollow">https://www.graplsecurity.com/post/iou-ring-exploiting-the-l...</a>. She's got a few more blog posts at Grapl, but she's moved on to new things at xforcered at IBM.
<a href="https://reddit.com/r/netsec" rel="nofollow">https://reddit.com/r/netsec</a> has a lot of good technical material posted