The Security Table: Podcast Episode with Chris Romeo
Adam on The Security Table podcast
Shostack + Friends Blog
Recent Blog Posts, Page 17
My Instructional Journey
Thoughts on my instructional journey - and what yours might be
Application and AI roundup - Jan 2024
A busy month+ in appsec, AI, and regulation.
Red Teaming
Red Teaming by Bryce Hoffman is a thought-provoking read.
CSRB Senate Hearing
Comments following the Senate’s CSRB hearing
Threat Modeling Capabilities Released
A great new resource for threat modeling
Red Queen Dynamics: Podcast Episode with Tarah Wheeler
Adam on Red Queen Dynamics podcast
The State of Appsec in 2024
2024 is bringing lots of AI, and Liability, too
Think like Sieged-sec?
Yet again, attackers surprise us
Giant Pink Bunny, Redux
Art is transient
Take Control of What You Read
As 2023 draws to a close, take control of what you read.
The Nazgul of Threat Modeling
(no description available)
Think like Alph-V?
Recently, ransomware operators AlphV were in the news for telling the SEC that AlphV’s victim, MeridianLink, had not filed the relevant SEC form 8K about their breach. While this is something between clever, humorous and outrageous, I’d like to ask a question of those who advocate for adversarial thinking: Did you predict this?
Application and AI roundup - November
A threat modeling conference, lots of government appsec guidance, and some updates from Shostack + Associates
C2PA Threat Modeling
What can we learn from the C2PA security considerations document?