https://shostack.org/blog/modeling-attackers-and-their-motives 2014-11-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/dope-cycle-and-two-minutes-hate 2018-04-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/kyber-crystal-and-the-death-star 2017-01-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/2017-and-tidal-forces 2017-05-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/on-immigration-and-refugees 2017-01-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/groundrules-on-complaining-about-security 2020-07-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/calls-for-an-ntsb 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/introducing-cyber-portfolio-management 2020-02-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/learning-lessons-from-incidents 2017-04-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/more-satellites-than-you-can-shake-a-stick-at 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/syria-2017 2017-04-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/a-new-blog-2017 2017-04-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/people-are-the-weakest-link-in-security 2017-04-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cyber-balance-sheet 2017-04-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/account-recovery 2017-04-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/how-not-to-design-an-error-message 2017-04-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cyber-grand-shellphish 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-elusive-goal-of-security-as-a-scientific-pursuit 2017-04-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cassini 2017-04-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-and-iot 2017-05-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-and-star-wars 2017-05-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/privacy-threat-model-for-the-people-of-seattle 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/warrants-for-cleaning-malware-in-kelihos 2017-05-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ross-anderson-on-edge 2017-05-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hospital-ransomware 2017-05-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/security-rarely-flows-downhill 2017-05-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/well-deserved-accolades 2017-05-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/certificate-pinning-is-great-in-stone-soup 2017-05-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/adam-chris-wysopal-webcast 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ultimate-stopping-machine 2017-05-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/maintaining-updating-software 2017-06-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/bicycling-and-risk 2017-06-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/bicycling-and-threat-modeling 2017-06-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-what-why-how 2017-06-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/wtf-why-rebrand 2017-06-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/iot-security-workshop-seattle-august-2017 2017-06-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/links-of-interest-20170629 2017-06-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/dna-replicates-filmed-at-11 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/goldsworthys-nature 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/voter-records-ssn-and-commercial-authentication 2022-07-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-encrypted-databases 2017-07-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q2-2017 2017-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/secure-updates-threat-model 2017-07-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/rolling-out-threat-modeling-program 2017-07-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/umbrella-sharing-and-threat-modeling 2017-07-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-password-managers 2018-05-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/humble-bundle-20170719 2017-07-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/comparing-the-usability-of-cryptographic-apis 2017-08-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/dope-cycle-and-deep-breath 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/magical-approaches-to-threat-modeling 2017-08-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/evolution-of-ctenophore-brains 2017-08-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/interesting-monday-reads-20170814 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/learning-from-npms-rough-few-months 2017-08-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/amicus-brief-in-carpenter-supreme-court-case 2017-08-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/celebrating-alt-left-lawlessness 2017-08-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/babylonian-triginometry 2017-08-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/organizing-threat-modeling-magic 2017-08-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/star-wars-star-trek-and-getting-root-on-a-star-ship 2017-09-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/breach-vouchers-equifax-2017-breach-links 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/open-for-business 2017-09-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pie-charts-or-this-could-be-hell 2017-09-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-training-london 2017-09-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-and-architecture 2017-09-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-readability-of-scientific-texts-is-decreasing-over-time 2017-09-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/parroting-bad-security-advice 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/its-not-the-crime-its-the-coverup-or-the-chaos 2017-09-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/emergent-musical-chaos 2017-10-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q3-2017 2017-10-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/application-security-team 2017-10-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-app-democracy 2018-04-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/20-year-software-engineering-and-updates 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/emergent-design-issues 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/why-is-reply-not-the-strongest-signal 2017-11-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/data-flow-diagrams-3-0 2017-11-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-fights-we-have-to-fight-fixing-bugs 2017-11-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/microsofts-pci-bluepprint 2017-11-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/vulnerabilities-equities-process-and-threat-modeling 2022-07-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/averting-the-drift-into-failure 2017-11-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/45-years 2017-11-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-carpenter-case 2017-11-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/learning-from-near-misses 2017-12-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gavle-goat-gallantly-guarded 2017-12-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/portfolio-thinking-appsec-radar 2017-12-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-tooling-from-2017 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pen-testing-the-empire 2018-01-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/not-bugs-but-features 2018-01-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-resistance-has-infiltrated-this-base 2018-01-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fire-and-building-codes 2018-01-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-california-tm-panel 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/star-treks-astromycologist 2018-01-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-cali-2018-izar-tarandach 2018-03-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/jonathan-marcils-threat-modeling-toolkit-talk 2018-01-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/doing-science-with-near-misses 2018-02-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/keep-the-bombe-on-the-bletchley-park-estate 2018-02-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-and-human-factors-2018 2018-02-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-privacy-of-seattle-residents 2018-03-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-citizens-versus-systems 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/citizen-threat-modeling 2018-03-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/speculative-execution-threat-model 2018-03-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-panel-at-appsec-cali-2018 2018-03-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-synopsys 2018-04-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/star-wars-friday-trek-and-cissp 2018-03-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ries-on-gatekeepers 2018-03-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-arm-yourselves 2018-03-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blaming-the-user 2018-03-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/reasonable-software-security-engineering-podcast 2023-12-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/john-harrisons-struggle-continues 2018-04-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-arms-network-camera-tmsa 2018-04-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gartner-on-devsecops-toolchain 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/security-engineering-computers-versus-bridges 2018-04-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-talking-dialogue-and-review 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/346000-wuhan-citizens-secrets 2018-04-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-hashtag-threatmodelhero 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/designing-for-good-social-systems 2018-04-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/35m-for-covering-up-a-breach 2018-04-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-q-and-a 2018-05-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/best-cyber-news-blogs-thanks 2018-04-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tess-launch-closeup 2018-05-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/redzone-podcast-on-threat-modeling 2018-05-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/just-culture-and-information-security 2018-05-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/joining-the-continuum-team 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/4-common-missteps-in-threat-modeling 2018-05-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-google-on-kubernetes 2018-05-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ntsb-on-uber-preliminary 2018-05-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-the-dread-pirates 2018-06-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/conways-law-and-software-security 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/eagle-vs-fox 2018-06-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/efail-is-why-we-cant-have-golden-keys 2018-06-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-chromium-post-spectre 2018-06-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-architectural-review-and-threat-modeling 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/carpenter 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/continuum-interview 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-crispin-cowan 2018-07-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/automotive-privacy 2022-08-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-2018 2018-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/friday-star-wars-july2018 2018-07-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/games-and-cards 2018-07-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/keeping-the-internet-secure 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hey-this-movie-looks-pretty-interesting 2018-07-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/half-the-us-population-will-live-in-8-states 2018-07-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-2018-2 2018-07-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/summer-reading-list 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cso-on-appsec-at-the-speed-of-devops 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cybersecurity-hall-of-fame 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/aretha-franklin 2018-08-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-in-2018-attacks-impacts-and-other-updates 2018-08-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/toolbox-after-a-conference 2018-08-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-legible-architecture 2018-08-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-reflective-practice-and-threat-modeling 2018-09-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/space-elevator-test 2018-09-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cve-funding-and-process 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-the-architectural-mirror 2022-07-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/does-pci-matter 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gao-report-on-equifax 2018-11-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/measuring-roi-for-dmarc 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/privacy-extension-to-elevation-of-privilege-game 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/podcast-with-ron-woerner 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/airline-safety 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/change-in-the-weather 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-in-2018-video-release 2018-11-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/books-worth-your-time-q4-2018 2019-02-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gavelblocken-2018 2018-11-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/structures-engineering-and-security 2018-12-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/house-oversight-committee-on-equifax 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/resources-for-infosec-skillbuilding 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pivots-and-payloads 2018-12-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/high-roi-security-advisory-boards 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/beyond-elf-on-a-shelf 2018-12-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/scaling-threat-modeling-training 2019-01-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/iriusrisk-2-0 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/linkedin-learning-producing-a-video 2019-01-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-as-code 2019-01-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-attackers-may-adapt-respond 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/incentives-and-multifactor-authentication 2019-02-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fire-doesnt-innovate-by-kip-boyle-book-review 2019-02-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/nature-and-nurture-in-threat-modeling 2019-02-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-queen-of-the-skies-and-innovation 2022-08-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/podcast-devsecops 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fifty-five-5star-reviews 2019-02-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/dolphins-and-pufferfish 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/what-should-training-cover 2019-02-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/adam-at-rsa 2019-02-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/spoofing-in-depth 2019-02-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/after-a-conference 2019-03-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/facebooks-privacy-constitution 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/a-seat-at-the-table-appseccali 2019-03-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/happy-pi-day-2019 2019-03-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/indias-intermediary-guidelines 2019-03-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-in-2019 2020-07-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cybersecurity-is-not-very-important 2019-03-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/20-years-of-stride-looking-back-looking-forward 2019-08-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/leave-those-numbers-for-april-1st 2019-04-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/books-worth-your-time-q1-2019 2019-04-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hayabusa 2019-04-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/no-need-to-tell-the-public 2019-04-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/science-of-security-science-for-security 2019-04-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-white-box-essays 2019-04-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/3-arguments-for-threat-modeling 2019-04-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/episode-9-spoilers 2019-05-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/testing-building-blocks 2019-05-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/promoting-threat-modeling-work 2019-05-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/polymorphic-warnings-on-my-mind 2019-05-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/when-security-goes-off-the-rails 2019-06-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/dns-security 2019-06-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/happy-juneteenth-3 2019-06-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/passwords-advice 2019-06-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-unanimous-declaration-of-the-13-united-states 2019-07-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-unanimous-declaration-of-the-thirteen-united-states-of-america-3 2019-07-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-road-to-mediocrity 2019-07-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/safety-and-security-in-automated-driving 2019-07-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/nist-on-sdls 2019-07-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-at-layer-8 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/books-worth-reading-q2-2019-apollo-edition 2019-07-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/happy-apollo-day 2019-07-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/valuing-cybersecurity-research-datasets 2019-07-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/actionable-followups-from-the-capital-one-breach 2019-07-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-best-practice 2019-08-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/toolbox-after-a-conference-2 2019-08-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/training-at-embedded-systems-security-days 2022-07-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/interesting-reads-august-19 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-building-blocks 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/course-announcement-tampering-in-depth 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/capture-the-flag-events-and-esports 2019-09-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/interesting-reads 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-portland-talk-and-podcast 2019-10-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/quick-threat-modeling-links-october-2019 2019-10-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/interesting-reads-2 2019-10-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/who-are-we-kidding-with-attacker-centered-threat-modeling 2019-10-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/interesting-finds-liberalism-machine-learning-encryption 2019-10-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/includes-no-dirt-healthcare-threat-modeling-thursday 2019-10-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/medical-device-security-standards 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/message-sequence-charts 2019-11-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/managed-attribution-threat-modeling 2019-11-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/han-solo-frozen-in-carbonite 2019-11-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-gavle-goat-is-up 2020-01-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/books-worth-your-time-q4 2019-12-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/goodbye-feedburner 2019-12-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/empirical-evaluation-of-secure-development-processes 2019-12-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/encryption-privacy-policy-and-technology 2019-12-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/star-wars-episode9-week-away 2019-12-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/echo-threat-modeling-and-privacy 2019-12-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-machine-learning 2020-02-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-the-human-element 2020-01-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/10000-moon-shots 2020-01-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/enter-the-spudnet 2020-01-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cryptographic-excitement 2020-01-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-files 2020-01-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-games 2020-02-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/repudiation-now-live-on-linkedin-learning 2020-02-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-and-human-factors-2020 2020-02-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-biml-machine-learning-risk-framework 2020-02-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-training-at-blackhat-2020 2020-03-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/amazons-alexa-built-in-threat-model 2020-03-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/free-threat-modeling-training 2020-03-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-with-questionnaires 2020-03-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-covid-pandemic 2020-03-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/medical-device-threat-modeling 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/friday-star-wars-2 2020-03-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/answering-what-are-we-working-on-when-remote 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/power-dynamics-in-threat-modeling 2020-04-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q1-2020 2020-04-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-data-flow-diagrams 2020-04-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/bounce-and-range 2020-12-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/sdl-article-in-cacm 2020-05-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/models-and-accuracy-threat-modeling-thursday 2020-05-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/how-are-computers-compromised-2020-edition 2020-05-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/code-science-and-production 2020-05-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/slr-as-a-webcam 2020-05-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/one-bad-apple 2020-06-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/evidence-based-security 2020-06-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/best-practices-for-iot-security 2020-06-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/contextualisation-of-data-flow-diagrams 2020-06-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/sonatype-report-on-devsecops 2020-06-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-research-more-like-this 2020-06-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-jenga-view-of-threat-modeling 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/happy-juneteenth-4 2020-06-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-cyentia-library-relaunches 2020-06-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-safe-framework 2020-06-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-model-in-my-devops 2020-07-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/internet-society-opposition-to-laed-act 2020-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/amicus-brief-on-cfaa 2022-03-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/software-engineering-radio 2020-07-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/video-series 2020-07-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/sociotechnical-approach-to-cyber-security 2020-07-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/maximizing-the-value-of-virtual-security-conferences 2020-07-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/when-to-threat-model 2020-08-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mdic-annual-public-forum-2020 2020-08-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/information-disclosure-in-depth 2020-08-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/better-taught-than-caught 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q2-2020 2020-08-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/elevation-of-privilege-in-the-time-of-cholera 2020-08-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/podcast-with-sidney-dekker 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-uber-cso-indictment 2020-08-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/phil-venables-blogging 2020-09-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-insiders-and-incentives 2020-09-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/starting-threat-modeling-focused-retrospectives-are-key 2020-09-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mentions 2020-09-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pci-threat-model 2020-09-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/training-threat-modeling-for-security-champions 2020-10-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/on-monopolies 2020-10-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/notice-the-outrage-machines 2020-10-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/on-legitimacy 2020-11-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/maps-and-visualization 2020-11-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/friday-star-wars-lego-holiday-celebration 2020-11-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/on-legitimacy-after-the-election 2020-11-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-manifesto 2020-11-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/breaking-encryption-myths 2020-11-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/stencils-and-sketch-books 2020-11-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/its-not-working 2020-11-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mitigating-social-bias-in-knowledge-graphs 2020-12-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/we-need-a-discipline-of-cybersecurity-public-health 2020-12-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fireeye-hack-culture 2020-12-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/charley-pride-1934-2020 2020-12-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/elevation-of-privilege-in-the-time-of-cholera-redux 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-asset-trap 2020-12-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/change5 2020-12-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/dinosaur-feathers 2020-12-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/just-the-great-conjunction-of-saturn-and-jupiter-shot-from-the-moon 2020-12-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/vaccines 2020-12-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/its-2021-check-backups 2021-01-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/digital-guru-books 2021-01-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/podcast-on-using-games 2021-01-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/irius-risk-gary-mcgraw 2021-01-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-and-social-issues 2021-01-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/better-oks-through-threat-modeling 2021-02-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/my-year-without-flying 2021-02-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/linkedin-learning 2021-02-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/belated-pi-day 2021-03-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mmmm-pandemic-puppies 2021-03-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ever-given-suez 2021-03-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/microsoft-autoupdate-hangs-excel-16-47-21032301 2021-03-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-classes 2021-03-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/passover-pie 2021-04-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/behind-the-scenes-training-development 2022-02-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/can-training-work-remotely 2021-04-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-updates-must-go-through 2021-04-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-githubs-approach 2021-04-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/iot-security-threat-modeling 2021-04-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/this-time-for-sure-pinky 2023-12-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/stop-vaccine-finger-wagging 2021-04-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-model-thursday-technology-consumers 2021-05-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/apple-guidance-on-intimate-partner-surveillance 2021-05-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tracking-company-says-96-of-iphone-users-block-tracking 2021-05-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pacific-northwest-appsec-conference 2021-05-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/colonial-pipeline-darkside-and-models 2021-05-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/nsf-wants-data-on-your-data-needs 2021-05-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/using-threat-modeling-to-improve-compliance-tm-thursday 2021-05-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/review-practical-cybersecurity-architecture 2021-05-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/recording-lectures 2024-09-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/van-buren 2021-06-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/thoughts-on-the-executive-order 2021-06-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ransomware-is-not-the-problem 2021-06-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/not-in-my-tm 2021-06-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fast-threat-modeling-videos 2021-06-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/juneteenth 2021-06-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/why-threat-model 2021-06-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/applied-tm-at-blackhat21 2021-06-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-5g-infra 2021-08-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/sketching-video 2021-08-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/collaboration-video 2021-07-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-NIST-code-verification-standard 2021-07-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/zen-and-the-art-of-not-quantifying-risk 2021-07-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ai-and-covid 2021-08-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/25-years-in-appsec-looking-back 2021-08-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/training-october 2021-08-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-through-the-johari-window 2021-08-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/this-is-the-blog-youre-looking-for 2021-08-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/training-discount 2021-09-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/what-can-go-wrong 2021-09-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/a-vulnerable-system 2021-09-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/nist-brings-threat-modeling-into-the-spotlight 2021-09-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/lessons-learned-elevation-of-privilege 2021-09-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/what-are-we-going-to-do-co2-edition 2021-10-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/trainings-global-appsec-2021 2021-10-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/breaking-into-threat-modeling 2021-11-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/25-years-of-appsec-owasp 2021-11-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cyber-lessons-learned 2021-11-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/medical-device-threat-modeling-webinar 2021-11-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fda-threat-modeling-playbook-available 2021-11-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gavle-goat-2021 2021-12-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fast-cheap-good 2021-12-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/missed-it-by-that-much 2021-12-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/allegory-rocks-sand 2021-12-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/25-years-appsec-keynote 2022-01-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/letterlocking 2022-01-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-open-training 2022-01-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/elevation-of-privilege-2022 2025-04-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/we-hack-purple 2022-01-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/wearing-many-hats 2022-01-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q1-2022 2022-01-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ten-questions-for-the-csrb 2022-02-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/how-to-choose-threat-modeling-training 2022-02-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/i-need-an-extension 2022-02-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/elevation-of-defenses 2022-03-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/how-executives-can-use-threat-modeling 2022-03-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ever-forward 2022-03-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/shortreads-march 2022-03-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/grimes-model-of-scams 2022-03-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fda-premarket-draft 2022-04-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/future-of-appsec 2022-04-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cyberpeace 2022-04-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q2-2022 2022-05-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/star-wars-day-2022 2023-12-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/on-security-of-star-wars 2022-05-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-may 2022-05-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/moon-dirt 2022-05-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-podcast 2022-05-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cybergreen 2022-06-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/what-can-go-wrong-authentic-thoughts 2022-06-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-june 2022-06-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/csrb-report 2022-07-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/webb-comparator 2022-07-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mciib 2022-07-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/buffet-overflow 2022-07-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-july 2022-07-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ITSP-jedi 2022-08-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-cover 2022-08-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/course-announcement-fall 2022-09-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/reddit-privacy-ama 2022-09-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/oct-champs-course 2022-09-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/oregon 2022-09-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-sept 2022-09-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pens 2022-10-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q3-2022 2022-10-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/bootcamp 2022-11-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/eop-miro 2022-11-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/trainings-and-discounts 2022-11-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-oct 2022-11-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/csm-podcast 2022-11-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-announce 2022-12-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gpt-3-threat-modeling 2022-12-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gpt-3 2022-12-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/human-centered-podcast 2022-12-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/death-star-liability 2022-12-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/spacenews 2022-12-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q4 2022-12-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/security-alerts 2022-12-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gpt3-threatmodeling-darkreading 2022-12-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/spacepostcards 2022-12-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gavle 2022-12-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/more-on-gpt3 2022-12-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fast-cheap-good-redux 2022-12-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-model-thursday-curl 2022-12-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/747 2022-12-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-appsec-landscape-in-2023 2023-01-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-is-measure-twice-cut-once-for-software 2023-01-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-table-of-contents 2023-01-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-books-complete 2023-01-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-book-launch-seattle 2023-02-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/friday-star-wars-jan-2023 2023-01-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-to-the-supply-chain 2023-01-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/not-all-jedis 2023-01-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hackermind 2023-01-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ocean-serpent 2023-01-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-jan-2023 2023-01-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/watermarks 2026-03-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/usablesecurity 2023-02-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/2001-lucas 2023-02-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/bing-chatgpt 2023-02-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/roman-concrete 2023-02-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-feb 2023-02-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-google-cloud 2023-03-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/davincisgravity 2023-03-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/my-david-prouse-moment 2023-03-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-national-cybersecurity-strategy 2023-03-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/star-wars-as-infographic 2023-03-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/imperium-for-men 2023-03-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/when-will-adam-be-replaced-by-chatgpt 2023-04-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-march-2023 2024-12-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cumulus-threat-model-thursday 2023-04-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/reflecting-on-threats-the-frame 2023-04-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/five-threat-model-diagrams-for-ml 2023-04-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-news-updates 2023-04-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/responsible-ai-layoffs 2023-04-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/may-the-fourth-secure-you 2023-05-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cyber-safety-review-board-historical-incidents 2023-05-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-may-2023 2023-05-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/phishing-defense 2023-06-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsecpnw2023 2023-12-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ai-high-interest-credit-card 2023-06-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q2-2023 2023-06-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/no-guns-please 2023-06-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/microsoft-can-fix-ransomware-tomorrow 2023-07-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/valorizing-rule-breaking 2023-07-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cisa-secure-by-design-feedback 2023-07-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/chuck-acme-remediation-avoidance 2023-07-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/sec-cybersecurity-rules 2023-08-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/use-the-defcon-wifi 2023-08-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ml-sec-ops 2023-08-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/airline-close-calls 2023-08-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-aug 2023-08-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-for-security-champs 2023-09-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/comparing-retrospectives 2023-09-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fda-final-cyber-guidance 2023-09-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-september 2023-10-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-on-sale 2023-10-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/adversarial-thinking-wargames 2023-10-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/security-principles-in-2023 2023-10-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-oct-2023 2023-11-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-model-thursday-turkey 2023-11-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-model-thursday-c2pa 2023-12-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-nov2023 2023-11-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/think-like-alphav 2023-12-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/nazgul-of-threat-modeling 2023-12-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/take-control-of-what-you-read 2024-12-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/giant-pink-bunny-redux 2025-07-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/think-like-siegedsec 2023-12-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-state-of-appsec-2024 2024-01-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/red-queen-tarah-wheeler 2024-01-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-capabilities 2024-01-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/csrb-senate-hearing-comments 2024-01-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/red-teaming 2024-01-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-jan-2024 2024-01-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/instructional-journey 2024-02-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-security-table 2024-02-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/il-lato-oscuro 2024-02-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-and-human-factors-2024 2024-02-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threatmodcon-lisbon 2024-02-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/solving-hallucinations 2024-02-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/insecurity-of-government-infrastructure 2024-02-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/archimedes-early-bird 2024-02-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-feb-2024 2024-12-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/british-library-incident-report 2024-03-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/inherent-threats 2024-03-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/adventures-in-llm-coding 2024-03-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-nvd-crisis 2024-03-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cybersecurity-lessons-from-covid19 2024-03-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-march-2024 2024-03-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/magic-security-dust 2024-04-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/healthcare-info-security 2024-04-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/csrb-report-on-microsoft 2024-04-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/archimedes-learning-platform 2024-04-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/other-comments-on-csrb 2024-04-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/eternal-sunshine-of-the-spotless-llm 2024-04-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/enterprise-security-weekly 2024-04-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/sutter-on-safety 2024-04-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/happy-star-wars-day 2024-05-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/rsa-2024 2024-05-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-april-2024 2024-05-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/diagrams-and-symbols-in-threat-models 2024-05-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-training-early-bird 2024-05-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-may-2024 2025-04-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-and-logins 2024-06-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/universal-cloud-threat-model-threat-model-thurs 2024-06-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/william-anders 2024-06-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-and-logins-redux 2024-06-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/scale-to-zero 2024-06-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/why-i-dont-engage-with-sean-hastings 2024-06-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/lockbit-study-in-public-health 2024-06-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/first-workshop-on-cyber-public-health 2024-06-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/97-things 2024-06-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-2024 2024-06-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/inherent-threats-threatmodcon 2024-07-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-unanimous-declaration-of-the-thirteen-united-states-of-america-2024 2024-07-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-june-2024 2024-07-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hard-problems-cyber-public-health 2024-07-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/google-on-cyberpublichealth 2024-07-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hard-problems-cyber-public-health-video 2024-07-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/goals-of-cyber-public-health 2024-07-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/your-turn 2024-07-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/venkat-podcast 2024-08-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-july-2024 2024-08-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-gameplay 2024-08-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/office-hours-training 2024-08-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/handling-pandemic-scale-cyber-threats 2024-08-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/secure-boot-and-secure-by-design 2024-08-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-august-2024 2024-09-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/google-health-symposium-2024 2024-09-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/back-to-school 2024-09-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/secure-boot-and-liability 2024-09-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-sept-2024 2024-09-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/back-to-school-ends-today 2024-09-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threatmodcon-sf 2024-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/on-democracy 2024-10-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/a-tale-of-two-addresses 2024-10-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/coaching 2024-10-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/party-over-country 2024-10-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-board-2024 2024-10-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mitre-attack-threat-modeling-threat-model-thursday 2024-10-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-people-who-served-under-trump 2024-10-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/scaling-threat-modeling 2024-10-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/25-years-of-cve 2024-10-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/russia 2024-10-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/policy 2024-10-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-oct-2024 2025-10-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-economy 2024-11-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/patching-in-2024 2024-11-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/election-prediction 2024-11-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/trust-and-security-boundaries 2024-11-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/purple-states 2024-11-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/car-safety 2024-11-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/is-cybersecurity-awareness-month-worth-the-money 2024-11-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/black-friday-sale 2024-11-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/four-question-frame 2024-11-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/risk-talk-at-JPL 2024-11-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-nov-2024 2024-12-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/human-centered-security 2024-12-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gavle-goat-2024 2024-12-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/stocking-stuffers-for-security-nerds 2024-12-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/a-different-hackathon-design 2024-12-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-dec-2024 2024-12-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/who-are-we 2025-01-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/lessons-for-cyber-from-the-public-health-system 2025-01-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pandemic-scale 2025-01-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/spatial-reasoning-and-threat-modeing 2025-01-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/national-cyber-incident-response-plan 2025-01-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hackers-to-founders 2025-01-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hoarding-debt-and-threat-modeling 2025-01-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/risk-talk-cerias 2025-02-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-jan-2025 2025-02-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-the-genetic-sequencing-workflow 2025-02-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-and-human-factors-2025 2025-02-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cybertuesday-podcast 2025-02-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/medical-device-cybersecurity 2025-02-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/inside-man 2025-03-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-feb-2025 2025-03-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/rsa-webinar 2025-03-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/strategy-for-threat-modeling-ai 2025-03-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-first-constitutional-crisis-of-2025 2025-03-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/covid-5-years-on 2025-03-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-announcement 2025-03-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/security-researcher-comment-on-hipaa-security-rules 2025-04-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/def-con-almanack 2025-03-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-march-2025 2025-04-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/learning-from-troy-hunts-sneaky-phish 2025-04-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/assets-again 2025-04-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/thoughts-on-cve 2025-04-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/free-threats 2025-04-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/andor-season-2 2025-04-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cve-futures 2025-04-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-informed-defense 2025-04-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-april 2025-04-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-empires-threat-modeling 2025-05-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/andor-threats-information-disclosure 2025-05-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/think-like-a-leader 2025-05-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cyber-hard-problems-review 2025-06-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-earlybird-pricing-25 2025-05-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-training-for-federal-workers 2025-05-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/andor-insider-threat 2025-06-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-may-2025 2025-06-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/essence-and-beauty-of-threat-modeling 2025-06-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/publish-your-threat-model 2025-07-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/google-approach-to-ai-agents-threat-model-thursday 2025-06-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-june-2025 2025-07-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-unanimous-declaration-of-the-thirteen-united-states-of-america-2025 2025-07-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/voting-for-secession 2025-07-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-as-a-dial-not-a-switch 2025-07-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-cyber-resilience-act 2025-07-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/risk-management-and-threat-modeling 2025-07-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-defcon-25 2025-07-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/llms-as-compilers 2025-07-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/risk-is-not-a-hammer-usenix-enigma 2025-10-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-tools 2025-08-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mansplaining-your-threat-model-as-a-service 2025-08-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-july-2025 2025-08-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/back-to-school-sale 2025-09-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-dc-announcement 2025-09-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/how-could-llms-change-threat-modeling 2025-09-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cybersec-game-challenge 2025-09-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/apollo-15-lrv-boeing 2025-09-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/lunar-rover-vehicle-redux 2025-09-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/medtech-innovation-podcast 2025-09-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-sept-2025 2025-10-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ai-insurance-wont-save-you 2025-11-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/prompt-enignieering-requires-evaluation 2025-10-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/lean-app-sec-announcement 2025-10-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-board-2025 2025-10-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-moonwalkers 2025-10-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/oct-ant 2025-10-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/stop-trying-to-manage-risk 2025-11-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-oct-2025 2025-11-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/publishing-publish-your-threat-models 2025-11-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-threat-model-reboot 2025-11-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/website-accessibility-improvements-2025 2025-11-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-nov-2025 2025-11-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/windows-links-and-usable-security 2025-12-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/state-of-threat-modeling-2024-2025 2025-12-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-keynote-available 2025-12-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/best-holiday-decorations 2025-12-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gavle-goat-survived-in-2025 2025-12-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/a-few-thoughts-closing-2025 2025-12-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/congratulations-to-threatmodeler 2026-01-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/take-control-of-what-you-read-redux 2026-01-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/security-advisory-26-01-gps-attacks 2026-01-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/bitlocker-the-fbi-and-risk 2026-01-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/NIST-800-218-revision 2026-01-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-in-the-age-of-ai 2026-01-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-dec-jan-2026 2026-01-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-modern-appsec-podcast 2026-02-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hackers-almanack-defcon-33 2026-02-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/vuln-finding-inflection 2026-04-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/welcoming-kymberlee-price-as-chief-operating-officer 2026-02-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/layered-defenses-bsides-seattle-2026 2026-03-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-feb-2026 2026-03-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/silver-car-recall 2026-03-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-and-human-factors-2026 2026-03-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-ai-systems-course-announce 2026-03-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/wasting-failures-rsac-2026 2026-03-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/kymberlee-reflects-on-bsidessf-and-rsac2026 2026-03-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-march-2026 2026-03-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/devsecops-learn-from-star-trek 2026-04-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/devsecops-lessons-from-st-tng-crew 2026-04-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/artemis-and-cybersecurity 2026-04-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/early-bird-one-week 2026-04-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/adam-reflections-on-rsac26 2026-04-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/roi-of-threat-modeling 2026-04-17T00:00:00.000Z monthly 0.5 https://shostack.org/pages/threatsbook/ 2026-04-21T22:51:11.307Z monthly 0.5 https://shostack.org/about/adam/papers/25-years-in-application-security.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/about.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/secure-design-accelerator.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/about/adam.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/security-advisory-26-01-gps-security-concerns-require-threat-model-updates.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/about/adam/archive.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/blog/about.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/blog/the-security-principles-of-saltzer-and-schroeder.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/blog.html 2026-04-21T22:51:15.691Z weekly 0.8 https://shostack.org/books/new-school-infosec-book.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/resources/help-launch-threatmodeling.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/books/threat-modeling-book.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/books/help-launch-threats-book.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/books.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/buy/tools.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/buy.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/blog/category/id-management.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/consulting.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/contact/threat-model.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/contact.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/books/contributions.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/training/corporate.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/games/control-alt-hack.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/games/elevation-of-privilege.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/expert-witness.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/games.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/tm-games.html 2026-04-21T22:51:15.691Z monthly 0.5 https://shostack.org/resources/lessons.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/meet-adam/blackhat-defcon-2025.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/about/adam/papers.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/partners.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/privacy-policy.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/resources/cyber-public-health.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/resources/early-threat-modeling.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/resources/threat-modeling-quick-start.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/resources/threat-modeling.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/resources.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/files/essays/review.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/search.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/about/adam/software.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/about/adam/speaking.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/resources/creativity.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/resources/tm-in-2021.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/about/adam/built.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/books/threat-modeling-book/supplemental.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/training.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/resources/videos.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/resources/whitepapers.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/resources/whitepapers/rolling-out-threat-modeling-program.html 2026-04-21T22:51:15.695Z monthly 0.5 https://shostack.org/resources/whitepapers/threat-modeling-what-why-how.html 2026-04-21T22:51:15.695Z monthly 0.5 https://courses.shostack.org/ weekly