Shostack + Friends Blog

an AI reading a book

Application and AI roundup - May

This month runs quite heavy on AI, but the CISA Safe by Design and Default document is going to be important for the next several years.

A set of cards with threats like our deployment artifacts contain secrets that can be extracted


Cumulus is a cloud-oriented version of Elevation of Privilege