Secure by Design roundup - April 2024
A less busy month in appsec, AI, and regulation, but still interesting stories
Shostack + Friends Blog
Recent Blog Posts, Page 10
RSA 2024
A great threat modeling talk at RSA 2024
Sutter on Safety
What do we need to assess if memory safe langages are 'sufficient'?
Enterprise Security Weekly: Podcast Episode with Adrian Sanabria
Adam on Enterprise Security Weekly podcast
Eternal sunshine of the spotless LLM
Making an LLM forget is harder than it seems
Other comments on the CSRB Microsoft Report
Other people have written about the CSRB report, and I wanted to share their perspectives.
Leveraging our training platform
How we leverage a platform for great training
CSRB Report on Microsoft
The CSRB has released its report into an intrusion at Microsoft, and...it’s a doozy.
Healthcare Info Security: Podcast Episode with Marianne Kolbasuk McGee
Adam on Healthcare Info Security podcast
Secure by Design roundup - March 2024
A busy month in appsec, AI, and regulation.
Cybersecurity Lessons from Covid19
Join us for a provocative exploration on Thursday!
The NVD Crisis
The NVD is in crisis, and so is patch management. It’s time to modernize.
Adventures in LLM Coding
Exploring LLM-driven coding as I get ready for Archimedes