Shostack + Friends Blog

Threat modeling doesn't need to be big and complex (09 Jun 2022)

I've been working with the CyberGreen Institute to develop public health as a way of thinking about cybersecurity. (02 Jun 2022)

Adam joined Matt Tesauro on the OWASP podcast (31 May 2022)

Life will find a way! (13 May 2022)

A collection of interesting appsec posts. (12 May 2022)

Adam joined Josh and Kurt on the Open Source Security podcast (09 May 2022)

Exciting news from Adam Shostack on Star Wars Day 2022 (04 May 2022)

These are the books that I read in the second quarter, 2022 that are worth your time. (02 May 2022)

A new book on cyberpeace! (25 Apr 2022)

A really fun episode with Adam joining Harshill Parikh of Tromzo's Future of Appsec podcast. (21 Apr 2022)

The FDA has issued draft guidance for pre-market security (08 Apr 2022)

Roger Grimes has an exciting new model of scams that's going to transform how we teach people ot defend against them. (31 Mar 2022)

Interesting articles from around the internet, March edition (28 Mar 2022)

The Evergreen line has had another ship run aground. (23 Mar 2022)

You don’t have to be technical, but you can’t make informed decisions about your business without threat modeling. (18 Mar 2022)