The Universal Cloud TM -- Threat Model Thursday
A new universal threat model - what can we learn from it?
Shostack + Friends Blog
Recent Blog Posts, Page 15
Threat Modeling and Logins
Authentication is more frustrating to your customers when you don’t threat model.
Security Engineering roundup - May 2024
The most important stories around threat modeling, appsec and secure by design for May, 2024.
Blackhat Training Early Bird
The early bird pricing for my Blackhat training expires this Friday
Diagrams and Symbols in Threat Models
How can we think about non-standard symbols in threat modeling diagrams?
Secure by Design roundup - April 2024
A less busy month in appsec, AI, and regulation, but still interesting stories
RSA 2024
A great threat modeling talk at RSA 2024
Happy Star Wars Day
When Obi-Wan sends Luke to Degobah for training, Yoda tries everything he can to reject him. Now, we have to acknowledge that Yoda’s suffering from PTSD, having failed to prevent the overthrow of the Republic, the murder of all the students, and really, frankly, Obi-Wan’s incredibly bad judgement about apprentices. And Yoda’s final excuse is “He is too old! Yes, too old to begin the training.”
Sutter on Safety
What do we need to assess if memory safe langages are 'sufficient'?
Enterprise Security Weekly: Podcast Episode with Adrian Sanabria
Adam on Enterprise Security Weekly podcast
Eternal sunshine of the spotless LLM
Making an LLM forget is harder than it seems
Other comments on the CSRB Microsoft Report
Other people have written about the CSRB report, and I wanted to share their perspectives.
Leveraging our training platform
How we leverage a platform for great training
CSRB Report on Microsoft
The CSRB has released its report into an intrusion at Microsoft, and...it’s a doozy.
Healthcare Info Security: Podcast Episode with Marianne Kolbasuk McGee
Adam on Healthcare Info Security podcast