Apollo 15 Lunar Rover Vehicle
What can a signed Apollo 15 print teach us about modern threat modeling and risk management?
Shostack + Friends Blog
Recent Blog Posts
New Adventure! CyberSec Game Challenge 2025
Register for CyberSec Game Challenge 2025!
How could LLMs change threat modeling
LLMs will change threat modeling. Will it be for the better?
OWASP Training in Washington, D.C.
Register for OWASP training in Washington D.C.!
Our back to school sale
Our biggest back to school sale of the year!
Secure By Design roundup - July/Aug 2025
All the exciting secure by design news from the end of summer
Mansplaining your threat model, as a service
Everyone wants robots to help with threat models. How’s that working out?
Threat Modeling Tools
A 2025 view of threat modeling tools
Risk is not a hammer
My Usenix Enigma 2025 talk
LLMs as Compilers
What if we think about LLM coding as if it’s a compiler stage?
Blackhat and Defcon 2025
Adam’s plans for summer camp
Risk Management and Threat Modeling
Threat modeling finds threats; risk management helps us deal with the tricky ones.
The Cyber Resilience Act (CRA)!
The CRA is coming and it's going to be a dramatic change for technology producers
Threat modeling as a dial, not a switch
Thinking of threat modeling with a knob helps you get more out of it.
Voting Twice for Secession Would be More Fair
Thinking about secession and mechanisms