Shostack + Friends Blog

Roger Grimes has an exciting new model of scams that's going to transform how we teach people ot defend against them. (31 Mar 2022)

Interesting articles from around the internet, March edition (28 Mar 2022)

The Evergreen line has had another ship run aground. (23 Mar 2022)

You don’t have to be technical, but you can’t make informed decisions about your business without threat modeling. (18 Mar 2022)

Using games to help us explore engineering techniques (15 Mar 2022)

A few lessons from the Mazda radio incident. (23 Feb 2022)

Understanding how to choose the right threat modeling training can give you the education you want for the skills you need. (18 Feb 2022)

The new Cyber Safety Review Board is an opportunity to get better faster. (09 Feb 2022)

These are the books that I read in the second half of 2021 that I think are worth your time. (28 Jan 2022)

Fascinating history of a transformation in how hackers were seen. (24 Jan 2022)

Adam on #WeHackPurple podcast (22 Jan 2022)

Holy cow, we’ve added new cards to Elevation of Privilege! (20 Jan 2022)

Open threat modeling training, Q1 2022 (13 Jan 2022)

Letterlocking is a lost art of protecting letters from surriptitious readers. (12 Jan 2022)

My opening keynote from Appsec Global 2021 (10 Jan 2022)