Red Queen Dynamics: Podcast Episode with Tarah Wheeler
Adam on Red Queen Dynamics podcast
Shostack + Friends Blog
The State of Appsec in 2024
2024 is bringing lots of AI, and Liability, too
Think like Sieged-sec?
Yet again, attackers surprise us
Giant Pink Bunny, Redux
Art is transient
Take Control of What You Read
As 2023 draws to a close, take control of what you read.
The Nazgul of Threat Modeling
(no description available)
Think like Alph-V?
Application and AI roundup - November
A threat modeling conference, lots of government appsec guidance, and some updates from Shostack + Associates
C2PA Threat Modeling
What can we learn from the C2PA security considerations document?
Threat Modeling Thursday: Thanksgiving
What can we learn from Gunnar Peterson’s Threat Model for Thanksgiving?
Application and AI roundup - October
Exciting news from the SEC, lots of AI, and lots of threat modeling.
Security Principles in 2023
Principles are lovely, but do they lead us to actionable results?
Adversarial Thinking and Wargames
Thinking about adversarial thinking
Threat Modeling on Sale
Best price ever for Threat Modeling
Application and AI roundup - September
September was a big month in appsec for both memory safety and policy