The NVD Crisis
The NVD is in crisis, and so is patch management. It’s time to modernize.
Shostack + Friends Blog
Recent Blog Posts, Page 9
Adventures in LLM Coding
Exploring LLM-driven coding as I get ready for Archimedes
Inherent Threats (Whitepaper)
We have an awesome new white paper available!
The British Library’s Incident Review
Thoughts on the British Library incident
Application and AI roundup - Feb 2024
A busy month in appsec, AI, and regulation.
Archimedes Early Bird Ends Soon
Early bird pricing ends March 4
Insecurity of Government Infrastructure
We have a new paper at NDSS
Solving Hallucinations
Solving hallucinations in legal briefs is playing on easy mode —— and still too hard
ThreatModCon Lisbon 2024
Submit your papers for ThreatModCon 2024 now!
Blackhat and Human Factors
BlackHat invites human factors work
Conoscere Il Lato Oscuro
Threats is available in Italian!
The Security Table: Podcast Episode with Chris Romeo
Adam on The Security Table podcast
My Instructional Journey
Thoughts on my instructional journey - and what yours might be
Application and AI roundup - Jan 2024
A busy month+ in appsec, AI, and regulation.
Red Teaming
Red Teaming by Bryce Hoffman is a thought-provoking read.