Appsec Roundup - May 2025
Lots of fascinating threat model-related advances, new risk management tools, games, and more!
Shostack + Friends Blog
Recent Blog Posts, Page 9
Andor: Insider Threats
Andor teaches us about insider threats
Free Threat Modeling Training for Displaced Federal Workers
Free training for displaced government employees
Blackhat Earlybird Prices End Friday
Blackhat earlybird prices end Friday May 23; training prices will go up by about 10%. Blackhat is the primary place we encourage people to join us for open trainings. And if you plan to be there, why not register today?
Cyber Hard Problems Report
The Cyber Hard Problems report is coming out
Andor: Think like a leader
Think like a what??!
Andor Threats: Information Disclosure
What Andor can teach us about Information disclosure threats
The Empire’s Threat Modeling
Get one fourth off for May the fourth!
Appsec Roundup - April 2025
Threat modeling. So much threat modeling, and so much more, including foreshadowing of new rules from FDA.
Threat Informed Defense Series
A great, in depth series on threat modeling with ATTACK
CVE Futures
What’s next for the CVE program?
Andor, Season 2
Excited for Star Wars: Andor Season 2
Free Threats
Pray they don’t alter the price any further
A few thoughts on CVE
Thoughts on the CVE funding crisis
Assets, Again
What's wrong with this process?