The Field Briefing

Every major breach and exploited flaw, in plain English, the day it lands — sent free to your inbox by the Red Flag Cyber research desk. No hype and no jargon: what happened, who is affected, how serious it is, and what to do next.

• 100% free — no paid tier, no trial that turns into a bill.
• No spam — an issue goes out when a major breach or exploited flaw earns one, not on a quota.
• We never sell your data — your email address is used to send the briefing, nothing else.
• Unsubscribe anytime — one click, in every issue.

Listen to the latest issue

Prefer to listen? The audio edition of the latest issue — #012, October 26, 2026 — reads the issue aloud: Listen to issue #012 (MP3).

Your free checklist: Spot the Phish

The desk's free field guide, yours to download, print, and share — the signup reward for joining The Field Briefing, and free to take either way: Spot the Phish — The 5-Second Email Checklist (one-page PDF). A checklist is a snapshot and the threats keep moving; the checklist is how you judge the message in front of you, and the briefing is how you hear about the next one.

Inside the checklist:

• The sender check — read the full email address, not just the display name, and look for altered, missing, or extra characters.
• The pressure test — threats, deadlines, secrecy, and “act now” language are meant to rush you. Pause instead.
• Links and attachments — inspect a link before you use it, because it can show familiar words and lead somewhere else; never open a file you did not request.
• The safe move — passwords, sign-in codes, payments, and gift cards are never handed over on demand. Stop, leave the message, and verify through the official app, the site you type yourself, or a number you already know is real.

Download the Spot the Phish checklist (PDF) ↓

What an issue contains

Every issue is built from coverage already published on this site — the email is the alert; the site is the record. A typical issue carries:

• The lead breach reports — the newest verified disclosures, each labelled Confirmed or Reported and answering the four questions: what happened, who is affected, how serious, what to do now.
• Exploited-vulnerability alerts — the flaws attackers are already using, drawn from CISA's catalog and filtered for the ones that reach everyday accounts and devices.
• Scam and AI-threat warnings — the lures circulating now, including follow-ups when a story we covered develops: a phishing wave, a settlement, a refund round.
• New guides and videos — the week's practical defenses and 60-second briefings.
• One thing to do today — a single short action that closes a real gap.

Read the sample edition to see the format before you sign up.

Past issues

Every sent issue is numbered and kept in a public archive — the count is the track record:

• #002 — October 9, 2026
• #001 — October 5, 2026

Browse the full public archive on Buttondown → · Read the on-site sample edition

Join free

The Field Briefing is written and sent by the Red Flag Cyber research desk — an independent research desk, faceless by policy, accountable by sources and method and a public corrections log. Judge the sourcing, not the byline.

100% free. No spam. We never sell your data. Unsubscribe anytime.