Shostack + Friends Blog

What’s next for the CVE program? (24 Apr 2025)

Pray they don’t alter the price any further (21 Apr 2025)

Thinking about Covid, five years on. (11 Mar 2025)

An exciting new book on human-centered security. (09 Dec 2024)

Books that I've read that are worth your time (27 Jun 2024)

Proud to be an O’Reilly author! (18 Jun 2024)

Commemorating William Anders (08 Jun 2024)

(04 May 2024)

Threats is available in Italian! (14 Feb 2024)

What can we learn from Gunnar Peterson’s Threat Model for Thanksgiving? (23 Nov 2023)

Principles are lovely, but do they lead us to actionable results? (27 Oct 2023)

Art imitating life in ways you didn’t think possible (30 Jun 2023)

Books that I read in the second quater that are worth your time include two memoirs, a great book on the security of ML, and more! (28 Jun 2023)

Reflecting on the framing of the Threats book (10 Apr 2023)

Searching my feelings as the audiobook of Threats is released. (17 Mar 2023)

Adam joined Paul Roberts on the Conversing Labs podcast (23 Jan 2023)

The threats book is in the supply chain, inconsistently. (22 Jan 2023)

The live launch party for Threats! (19 Jan 2023)

The serious side of the book (17 Jan 2023)

Like the Force, each threat has a light side, and a dark side. (16 Jan 2023)

Books that I read in the fourth quater that are worth your time include several about safety with lessons for cybersecurity (19 Dec 2022)

The books I read in the third quarter of 2022 that are worth your time. (23 Oct 2022)

Adam joined Josh and Kurt on the Open Source Security podcast (09 May 2022)

These are the books that I read in the second quarter, 2022 that are worth your time. (02 May 2022)

A new book on cyberpeace! (25 Apr 2022)

These are the books that I read in the second half of 2021 that I think are worth your time. (28 Jan 2022)

Rupin Gupta runs Digital Guru books. He's one of the nicest people you'll ever meet, a real joy to work with, and he works hard to put books on shelves so that you can discover them. With the conference business changing, Digital Guru needs some help. (15 Jan 2021)

These are the books that I read in Q2 2020 that I think are worth your time. (19 Aug 2020)

I want to talk about two books: Bounce, by Matthew Syed and Range, by David Epstein. I want to talk about them together in part because Range is explicitly framed as a response to Bounce. (08 May 2020)

These are the books I read in the first quarter (and forgot to mention last quarter) that I think are worth your time. (14 Apr 2020)

Just what the title says... (01 Dec 2019)

Some books worth reading, particularly related to space and history (15 Jul 2019)

Just what the title says... (05 Apr 2019)

An unexpected book review. (04 Feb 2019)

Some books worth reading. (26 Nov 2018)

[no description provided] (14 Sep 2018)

[no description provided] (11 Apr 2018)

[no description provided] (25 Nov 2017)

Some of what I've read over the past quarter and want to recommend as worthy of your time. (11 Oct 2017)

[no description provided] (19 Jul 2017)

I'm always looking for interesting books to read. These are the books that I enjoyed enough to recommend in Q2. (07 Jul 2017)