Diagram Style (Threat Model Thursday)
What makes a diagram good or useful?
Shostack + Friends Blog
Recent Blog Posts
Save on Threat Modeling 2nd Edition
Barnes & Noble is having a preorder sale. Save on Adam's new book, coming February 2027!
Appsec roundup - July + August 2026
The CRA, how AI is showing up in security requirements, threat modeling, bug fixing and inventing biases in its spare time. Also, a lot of cool books by other authors.
Diagrams and Clarity (Threat Model Thursday)
Diagrams serve needs, and surprisingly, form follows function
Register now for our training at OWASP
Join us in San Francisco for our popular 3-day Threat Modeling Intensive With AI
Boundaries, Not Trust Boundaries (Threat Model Thursday)
Boundaries are a crucial topic in the new threat modeling book
Why threat modeling is the technique that survives AI disruption
AI is disrupting software security, but traditional threat modeling remains the ultimate survival skill.
Threat Modeling: A Second Edition
The long-awaited second edition of Threat Modeling...
Threat Modeling LLMs: Adam’s talk at Black Hat USA
PHANTOM-B is a practical tool built for threat modeling AI systems
AI and Business Strategy
How can we shape a business strategy in an ‘AI world?’
Lessons from the OpenAI/HuggingFace AI Security Incident
The big takeaways from the OpenAI incident are over-reliance on benchmarks, anthropomorphization and volume.
Black Hat Talks I'm Excited to Attend This Year (Kymberlee's version)
Kymberlee's list of must-see talks at Black Hat this year
Come think out loud with us: Threat Modeling AI Systems
Kymberlee on the Threat Modeling AI Systems community meetup at Black Hat
The Sessions I'm Genuinely Excited About at Black Hat 2026 (Adam's version)
The things I'm looking forward to at Black Hat this year.
Why PHANTOM-B?
Our newest whitepaper introduces a new threat elicitation tool engineered specifically for LLMs.