Shostack + Friends Blog

A threat modeling conference, lots of government appsec guidance, and some updates from Shostack + Associates (30 Nov 2023)

Books that I read in the second quater that are worth your time include two memoirs, a great book on the security of ML, and more! (28 Jun 2023)

Celebrating Star Wars Day in style! (04 May 2023)

Book signings at RSA, big discounts and more! (19 Apr 2023)

Reflecting on the framing of the Threats book (10 Apr 2023)

A few tools, some thoughts on injection, some standards, and some of Adam’s appsec news. (05 Apr 2023)

Searching my feelings as the audiobook of Threats is released. (17 Mar 2023)

The threats book is in the supply chain, inconsistently. (22 Jan 2023)

The live launch party for Threats! (19 Jan 2023)

The serious side of the book (17 Jan 2023)

Like the Force, each threat has a light side, and a dark side. (16 Jan 2023)

Threats is almost in bookstores (08 Dec 2022)

The books I read in the third quarter of 2022 that are worth your time. (23 Oct 2022)

So excited to share the cover with you (19 Aug 2022)

Exciting news from Adam Shostack on Star Wars Day 2022 (04 May 2022)