Threat Modeling and Secure by Design
Our feedback to CISA is now public
Shostack + Friends Blog
Recent Blog Posts, Page 14
Microsoft Can Fix Ransomware Tomorrow
My latest at Dark Reading draws attention to how Microsoft can fix ransomware tomorrow.
No guns please
Art imitating life in ways you didn’t think possible
Worthwhile Books Q2 2023
Books that I read in the second quater that are worth your time include two memoirs, a great book on the security of ML, and more!
AppSecPNW 2023
Adam's AppSecPNW 2023 keynote
Phishing Defenses
Phishing behaviors, as observed in the wild.
Application and AI roundup - May
This month runs quite heavy on AI, but the CISA Safe by Design and Default document is going to be important for the next several years.
The Cyber Safety Review Board Should Investigate Major Historical Incidents
Tarah Wheeler and Adam write in CFR
May the Fourth Secure You
Celebrating Star Wars Day in style!
Layoffs in Responsible AI Teams
Some inferences from layoffs in responsible AI teams
Threats Book News and Updates for April
Book signings at RSA, big discounts and more!
Five Threat Model Diagrams for Machine Learning
Some diagrams to help clarify machine learning threats
Reflecting on Threats: The Frame
Reflecting on the framing of the Threats book