Shostack + Friends Blog

(17 Apr 2024)

How we leverage a platform for great training (16 Apr 2024)

The CSRB has released its report into an intrusion at Microsoft, and ... it’s a doozy. (13 Apr 2024)

(01 Apr 2024)

A busy month in appsec, AI, and regulation. (29 Mar 2024)

Join us for a provocative exploration on Thursday! (27 Mar 2024)

The NVD is in crisis, and so is patch management. It’s time to modernize. (25 Mar 2024)

Exploring LLM-driven coding as I get ready for Archimedes (21 Mar 2024)

We have an awesome new white paper available! (20 Mar 2024)

Thoughts on the British Library incident (09 Mar 2024)

A busy month in appsec, AI, and regulation. (05 Mar 2024)

Early bird pricing ends March 4 (29 Feb 2024)

We have a new paper at NDSS (26 Feb 2024)

Solving hallucinations in legal briefs is playing on easy mode —— and still too hard (23 Feb 2024)

Submit your papers for ThreatModCon 2024 now! (21 Feb 2024)