Shostack + Friends Blog

I wish this election were about policy (29 Oct 2024)

Some thoughts on Russia and the election (26 Oct 2024)

Some thoughts on 25 years of the CVE program (25 Oct 2024)

Our newest course: Scaling Threat Modeling (22 Oct 2024)

(20 Oct 2024)

Threat model Thursday, let's dive deep into a detailed approach to using ATT&CK (17 Oct 2024)

Time to vote for OWASP leadership (15 Oct 2024)

(13 Oct 2024)

Scaling threat modeling can be a challenge! (10 Oct 2024)

Output encoding is a tool, not a hammer. Or maybe it's a hammer. (07 Oct 2024)

Democracy has one function, and it’s under threat. (06 Oct 2024)

Threatmodcon was amazing (03 Oct 2024)

Our biggest sale ever ends today! (30 Sep 2024)

If you say threat modeling three times, it appears! (25 Sep 2024)

Secure boot presents questions that should inform the liability conversation (17 Sep 2024)