Application and AI roundup - May
This month runs quite heavy on AI, but the CISA Safe by Design and Default document is going to be important for the next several years.
Shostack + Friends Blog
Posts in category "application security"
Five Threat Model Diagrams for Machine Learning
Some diagrams to help clarify machine learning threats
Cumulus
Cumulus is a cloud-oriented version of Elevation of Privilege
Application Security Roundup - March
A few tools, some thoughts on injection, some standards, and some of Adam’s appsec news.