https://shostack.org/blog/modeling-attackers-and-their-motives/ 2014-11-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/dope-cycle-and-two-minutes-hate/ 2018-04-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/kyber-crystal-and-the-death-star/ 2017-01-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/2017-and-tidal-forces/ 2017-05-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/on-immigration-and-refugees/ 2017-01-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/groundrules-on-complaining-about-security/ 2020-07-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/calls-for-an-ntsb/ 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/introducing-cyber-portfolio-management/ 2020-02-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/learning-lessons-from-incidents/ 2017-04-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/more-satellites-than-you-can-shake-a-stick-at/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/syria-2017/ 2017-04-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/a-new-blog-2017/ 2017-04-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/people-are-the-weakest-link-in-security/ 2017-04-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cyber-balance-sheet/ 2017-04-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/account-recovery/ 2017-04-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/how-not-to-design-an-error-message/ 2017-04-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cyber-grand-shellphish/ 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-elusive-goal-of-security-as-a-scientific-pursuit/ 2017-04-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cassini/ 2017-04-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-and-iot/ 2017-05-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-and-star-wars/ 2017-05-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/privacy-threat-model-for-the-people-of-seattle/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/warrants-for-cleaning-malware-in-kelihos/ 2017-05-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ross-anderson-on-edge/ 2017-05-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hospital-ransomware/ 2017-05-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/security-rarely-flows-downhill/ 2017-05-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/well-deserved-accolades/ 2017-05-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/certificate-pinning-is-great-in-stone-soup/ 2017-05-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/adam-chris-wysopal-webcast/ 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ultimate-stopping-machine/ 2017-05-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/maintaining-updating-software/ 2017-06-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/bicycling-and-risk/ 2017-06-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/bicycling-and-threat-modeling/ 2017-06-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-what-why-how/ 2017-06-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/wtf-why-rebrand/ 2017-06-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/iot-security-workshop-seattle-august-2017/ 2017-06-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/links-of-interest-20170629/ 2017-06-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/dna-replicates-filmed-at-11/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/goldsworthys-nature/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/voter-records-ssn-and-commercial-authentication/ 2022-07-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-encrypted-databases/ 2017-07-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q2-2017/ 2017-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/secure-updates-threat-model/ 2017-07-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/rolling-out-threat-modeling-program/ 2017-07-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/umbrella-sharing-and-threat-modeling/ 2017-07-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-password-managers/ 2018-05-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/humble-bundle-20170719/ 2017-07-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/comparing-the-usability-of-cryptographic-apis/ 2017-08-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/dope-cycle-and-deep-breath/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/magical-approaches-to-threat-modeling/ 2017-08-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/evolution-of-ctenophore-brains/ 2017-08-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/interesting-monday-reads-20170814/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/learning-from-npms-rough-few-months/ 2017-08-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/amicus-brief-in-carpenter-supreme-court-case/ 2017-08-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/celebrating-alt-left-lawlessness/ 2017-08-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/babylonian-triginometry/ 2017-08-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/organizing-threat-modeling-magic/ 2017-08-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/star-wars-star-trek-and-getting-root-on-a-star-ship/ 2017-09-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/breach-vouchers-equifax-2017-breach-links/ 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/open-for-business/ 2017-09-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pie-charts-or-this-could-be-hell/ 2017-09-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-training-london/ 2017-09-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-and-architecture/ 2017-09-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-readability-of-scientific-texts-is-decreasing-over-time/ 2017-09-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/parroting-bad-security-advice/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/its-not-the-crime-its-the-coverup-or-the-chaos/ 2017-09-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/emergent-musical-chaos/ 2017-10-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q3-2017/ 2017-10-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/application-security-team/ 2017-10-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-app-democracy/ 2018-04-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/20-year-software-engineering-and-updates/ 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/emergent-design-issues/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/why-is-reply-not-the-strongest-signal/ 2017-11-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/data-flow-diagrams-3-0/ 2017-11-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-fights-we-have-to-fight-fixing-bugs/ 2017-11-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/microsofts-pci-bluepprint/ 2017-11-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/vulnerabilities-equities-process-and-threat-modeling/ 2022-07-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/averting-the-drift-into-failure/ 2017-11-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/45-years/ 2017-11-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-carpenter-case/ 2017-11-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/learning-from-near-misses/ 2017-12-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gavle-goat-gallantly-guarded/ 2017-12-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/portfolio-thinking-appsec-radar/ 2017-12-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-tooling-from-2017/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pen-testing-the-empire/ 2018-01-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/not-bugs-but-features/ 2018-01-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-resistance-has-infiltrated-this-base/ 2018-01-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fire-and-building-codes/ 2018-01-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-california-tm-panel/ 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/star-treks-astromycologist/ 2018-01-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-cali-2018-izar-tarandach/ 2018-03-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/jonathan-marcils-threat-modeling-toolkit-talk/ 2018-01-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/doing-science-with-near-misses/ 2018-02-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/keep-the-bombe-on-the-bletchley-park-estate/ 2018-02-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-and-human-factors-2018/ 2018-02-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-privacy-of-seattle-residents/ 2018-03-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-citizens-versus-systems/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/citizen-threat-modeling/ 2018-03-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/speculative-execution-threat-model/ 2018-03-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-panel-at-appsec-cali-2018/ 2018-03-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-synopsys/ 2018-04-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/star-wars-friday-trek-and-cissp/ 2018-03-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ries-on-gatekeepers/ 2018-03-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-arm-yourselves/ 2018-03-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blaming-the-user/ 2018-03-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/reasonable-software-security-engineering-podcast/ 2023-12-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/john-harrisons-struggle-continues/ 2018-04-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-arms-network-camera-tmsa/ 2018-04-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gartner-on-devsecops-toolchain/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/security-engineering-computers-versus-bridges/ 2018-04-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-talking-dialogue-and-review/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/346000-wuhan-citizens-secrets/ 2018-04-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-hashtag-threatmodelhero/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/designing-for-good-social-systems/ 2018-04-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/35m-for-covering-up-a-breach/ 2018-04-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-q-and-a/ 2018-05-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/best-cyber-news-blogs-thanks/ 2018-04-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tess-launch-closeup/ 2018-05-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/redzone-podcast-on-threat-modeling/ 2018-05-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/just-culture-and-information-security/ 2018-05-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/joining-the-continuum-team/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/4-common-missteps-in-threat-modeling/ 2018-05-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-google-on-kubernetes/ 2018-05-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ntsb-on-uber-preliminary/ 2018-05-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-the-dread-pirates/ 2018-06-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/conways-law-and-software-security/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/eagle-vs-fox/ 2018-06-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/efail-is-why-we-cant-have-golden-keys/ 2018-06-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-chromium-post-spectre/ 2018-06-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-architectural-review-and-threat-modeling/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/carpenter/ 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/continuum-interview/ 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-crispin-cowan/ 2018-07-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/automotive-privacy/ 2022-08-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-2018/ 2018-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/friday-star-wars-july2018/ 2018-07-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/games-and-cards/ 2018-07-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/keeping-the-internet-secure/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hey-this-movie-looks-pretty-interesting/ 2018-07-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/half-the-us-population-will-live-in-8-states/ 2018-07-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-2018-2/ 2018-07-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/summer-reading-list/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cso-on-appsec-at-the-speed-of-devops/ 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cybersecurity-hall-of-fame/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/aretha-franklin/ 2018-08-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-in-2018-attacks-impacts-and-other-updates/ 2018-08-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/toolbox-after-a-conference/ 2018-08-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-legible-architecture/ 2018-08-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-reflective-practice-and-threat-modeling/ 2018-09-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/space-elevator-test/ 2018-09-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cve-funding-and-process/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-the-architectural-mirror/ 2022-07-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/does-pci-matter/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gao-report-on-equifax/ 2018-11-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/measuring-roi-for-dmarc/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/privacy-extension-to-elevation-of-privilege-game/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/podcast-with-ron-woerner/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/airline-safety/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/change-in-the-weather/ 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-in-2018-video-release/ 2018-11-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/books-worth-your-time-q4-2018/ 2019-02-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gavelblocken-2018/ 2018-11-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/structures-engineering-and-security/ 2018-12-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/house-oversight-committee-on-equifax/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/resources-for-infosec-skillbuilding/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pivots-and-payloads/ 2018-12-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/high-roi-security-advisory-boards/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/beyond-elf-on-a-shelf/ 2018-12-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/scaling-threat-modeling-training/ 2019-01-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/iriusrisk-2-0/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/linkedin-learning-producing-a-video/ 2019-01-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-as-code/ 2019-01-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-attackers-may-adapt-respond/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/incentives-and-multifactor-authentication/ 2019-02-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fire-doesnt-innovate-by-kip-boyle-book-review/ 2019-02-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/nature-and-nurture-in-threat-modeling/ 2019-02-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-queen-of-the-skies-and-innovation/ 2022-08-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/podcast-devsecops/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fifty-five-5star-reviews/ 2019-02-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/dolphins-and-pufferfish/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/what-should-training-cover/ 2019-02-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/adam-at-rsa/ 2019-02-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/spoofing-in-depth/ 2019-02-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/after-a-conference/ 2019-03-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/facebooks-privacy-constitution/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/a-seat-at-the-table-appseccali/ 2019-03-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/happy-pi-day-2019/ 2019-03-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/indias-intermediary-guidelines/ 2019-03-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-in-2019/ 2020-07-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cybersecurity-is-not-very-important/ 2019-03-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/20-years-of-stride-looking-back-looking-forward/ 2019-08-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/leave-those-numbers-for-april-1st/ 2019-04-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/books-worth-your-time-q1-2019/ 2019-04-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hayabusa/ 2019-04-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/no-need-to-tell-the-public/ 2019-04-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/science-of-security-science-for-security/ 2019-04-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-white-box-essays/ 2019-04-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/3-arguments-for-threat-modeling/ 2019-04-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/episode-9-spoilers/ 2019-05-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/testing-building-blocks/ 2019-05-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/promoting-threat-modeling-work/ 2019-05-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/polymorphic-warnings-on-my-mind/ 2019-05-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/when-security-goes-off-the-rails/ 2019-06-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/dns-security/ 2019-06-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/happy-juneteenth-3/ 2019-06-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/passwords-advice/ 2019-06-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-unanimous-declaration-of-the-13-united-states/ 2019-07-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-unanimous-declaration-of-the-thirteen-united-states-of-america-3/ 2019-07-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-road-to-mediocrity/ 2019-07-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/safety-and-security-in-automated-driving/ 2019-07-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/nist-on-sdls/ 2019-07-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-at-layer-8/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/books-worth-reading-q2-2019-apollo-edition/ 2019-07-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/happy-apollo-day/ 2019-07-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/valuing-cybersecurity-research-datasets/ 2019-07-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/actionable-followups-from-the-capital-one-breach/ 2019-07-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-best-practice/ 2019-08-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/toolbox-after-a-conference-2/ 2019-08-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/training-at-embedded-systems-security-days/ 2022-07-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/interesting-reads-august-19/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-building-blocks/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/course-announcement-tampering-in-depth/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/capture-the-flag-events-and-esports/ 2019-09-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/interesting-reads/ 2019-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-portland-talk-and-podcast/ 2019-10-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/quick-threat-modeling-links-october-2019/ 2019-10-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/interesting-reads-2/ 2019-10-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/who-are-we-kidding-with-attacker-centered-threat-modeling/ 2019-10-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/interesting-finds-liberalism-machine-learning-encryption/ 2019-10-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/includes-no-dirt-healthcare-threat-modeling-thursday/ 2019-10-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/medical-device-security-standards/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/message-sequence-charts/ 2019-11-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/managed-attribution-threat-modeling/ 2019-11-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/han-solo-frozen-in-carbonite/ 2019-11-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-gavle-goat-is-up/ 2020-01-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/books-worth-your-time-q4/ 2019-12-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/goodbye-feedburner/ 2019-12-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/empirical-evaluation-of-secure-development-processes/ 2019-12-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/encryption-privacy-policy-and-technology/ 2019-12-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/star-wars-episode9-week-away/ 2019-12-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/echo-threat-modeling-and-privacy/ 2019-12-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-machine-learning/ 2020-02-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-the-human-element/ 2020-01-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/10000-moon-shots/ 2020-01-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/enter-the-spudnet/ 2020-01-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cryptographic-excitement/ 2020-01-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-files/ 2020-01-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-games/ 2020-02-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/repudiation-now-live-on-linkedin-learning/ 2020-02-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-and-human-factors-2020/ 2020-02-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-biml-machine-learning-risk-framework/ 2020-02-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-training-at-blackhat-2020/ 2020-03-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/amazons-alexa-built-in-threat-model/ 2020-03-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/free-threat-modeling-training/ 2020-03-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-with-questionnaires/ 2020-03-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-covid-pandemic/ 2020-03-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/medical-device-threat-modeling/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/friday-star-wars-2/ 2020-03-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/answering-what-are-we-working-on-when-remote/ 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/power-dynamics-in-threat-modeling/ 2020-04-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q1-2020/ 2020-04-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-data-flow-diagrams/ 2020-04-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/bounce-and-range/ 2020-12-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/sdl-article-in-cacm/ 2020-05-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/models-and-accuracy-threat-modeling-thursday/ 2020-05-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/how-are-computers-compromised-2020-edition/ 2020-05-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/code-science-and-production/ 2020-05-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/slr-as-a-webcam/ 2020-05-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/one-bad-apple/ 2020-06-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/evidence-based-security/ 2020-06-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/best-practices-for-iot-security/ 2020-06-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/contextualisation-of-data-flow-diagrams/ 2020-06-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/sonatype-report-on-devsecops/ 2020-06-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-research-more-like-this/ 2020-06-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-jenga-view-of-threat-modeling/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/happy-juneteenth-4/ 2020-06-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-cyentia-library-relaunches/ 2020-06-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-safe-framework/ 2020-06-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-model-in-my-devops/ 2020-07-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/internet-society-opposition-to-laed-act/ 2020-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/amicus-brief-on-cfaa/ 2022-03-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/software-engineering-radio/ 2020-07-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/video-series/ 2020-07-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/sociotechnical-approach-to-cyber-security/ 2020-07-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/maximizing-the-value-of-virtual-security-conferences/ 2020-07-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/when-to-threat-model/ 2020-08-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mdic-annual-public-forum-2020/ 2020-08-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/information-disclosure-in-depth/ 2020-08-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/better-taught-than-caught/ 2022-07-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q2-2020/ 2020-08-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/elevation-of-privilege-in-the-time-of-cholera/ 2020-08-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/podcast-with-sidney-dekker/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-uber-cso-indictment/ 2020-08-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/phil-venables-blogging/ 2020-09-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-insiders-and-incentives/ 2020-09-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/starting-threat-modeling-focused-retrospectives-are-key/ 2020-09-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mentions/ 2020-09-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pci-threat-model/ 2020-09-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/training-threat-modeling-for-security-champions/ 2020-10-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/on-monopolies/ 2020-10-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/notice-the-outrage-machines/ 2020-10-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/on-legitimacy/ 2020-11-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/maps-and-visualization/ 2020-11-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/friday-star-wars-lego-holiday-celebration/ 2020-11-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/on-legitimacy-after-the-election/ 2020-11-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-manifesto/ 2020-11-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/breaking-encryption-myths/ 2020-11-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/stencils-and-sketch-books/ 2020-11-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/its-not-working/ 2020-11-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mitigating-social-bias-in-knowledge-graphs/ 2020-12-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/we-need-a-discipline-of-cybersecurity-public-health/ 2020-12-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fireeye-hack-culture/ 2020-12-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/charley-pride-1934-2020/ 2020-12-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/elevation-of-privilege-in-the-time-of-cholera-redux/ 2022-07-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-asset-trap/ 2020-12-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/change5/ 2020-12-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/dinosaur-feathers/ 2020-12-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/just-the-great-conjunction-of-saturn-and-jupiter-shot-from-the-moon/ 2020-12-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/vaccines/ 2020-12-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/its-2021-check-backups/ 2021-01-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/digital-guru-books/ 2021-01-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/podcast-on-using-games/ 2021-01-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/irius-risk-gary-mcgraw/ 2021-01-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-and-social-issues/ 2021-01-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/better-oks-through-threat-modeling/ 2021-02-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/my-year-without-flying/ 2021-02-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/linkedin-learning/ 2021-02-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/belated-pi-day/ 2021-03-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mmmm-pandemic-puppies/ 2021-03-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ever-given-suez/ 2021-03-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/microsoft-autoupdate-hangs-excel-16-47-21032301/ 2021-03-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-classes/ 2021-03-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/passover-pie/ 2021-04-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/behind-the-scenes-training-development/ 2022-02-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/can-training-work-remotely/ 2021-04-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-updates-must-go-through/ 2021-04-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-githubs-approach/ 2021-04-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/iot-security-threat-modeling/ 2021-04-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/this-time-for-sure-pinky/ 2023-12-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/stop-vaccine-finger-wagging/ 2021-04-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-model-thursday-technology-consumers/ 2021-05-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/apple-guidance-on-intimate-partner-surveillance/ 2021-05-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tracking-company-says-96-of-iphone-users-block-tracking/ 2021-05-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pacific-northwest-appsec-conference/ 2021-05-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/colonial-pipeline-darkside-and-models/ 2021-05-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/nsf-wants-data-on-your-data-needs/ 2021-05-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/using-threat-modeling-to-improve-compliance-tm-thursday/ 2021-05-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/review-practical-cybersecurity-architecture/ 2021-05-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/recording-lectures/ 2024-09-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/van-buren/ 2021-06-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/thoughts-on-the-executive-order/ 2021-06-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ransomware-is-not-the-problem/ 2021-06-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/not-in-my-tm/ 2021-06-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fast-threat-modeling-videos/ 2021-06-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/juneteenth/ 2021-06-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/why-threat-model/ 2021-06-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/applied-tm-at-blackhat21/ 2021-06-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-5g-infra/ 2021-08-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/sketching-video/ 2021-08-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/collaboration-video/ 2021-07-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/tmt-NIST-code-verification-standard/ 2021-07-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/zen-and-the-art-of-not-quantifying-risk/ 2021-07-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ai-and-covid/ 2021-08-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/25-years-in-appsec-looking-back/ 2021-08-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/training-october/ 2021-08-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-through-the-johari-window/ 2021-08-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/this-is-the-blog-youre-looking-for/ 2021-08-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/training-discount/ 2021-09-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/what-can-go-wrong/ 2021-09-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/a-vulnerable-system/ 2021-09-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/nist-brings-threat-modeling-into-the-spotlight/ 2021-09-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/lessons-learned-elevation-of-privilege/ 2021-09-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/what-are-we-going-to-do-co2-edition/ 2021-10-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/trainings-global-appsec-2021/ 2021-10-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/breaking-into-threat-modeling/ 2021-11-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/25-years-of-appsec-owasp/ 2021-11-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cyber-lessons-learned/ 2021-11-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/medical-device-threat-modeling-webinar/ 2021-11-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fda-threat-modeling-playbook-available/ 2021-11-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gavle-goat-2021/ 2021-12-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fast-cheap-good/ 2021-12-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/missed-it-by-that-much/ 2021-12-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/allegory-rocks-sand/ 2021-12-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/25-years-appsec-keynote/ 2022-01-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/letterlocking/ 2022-01-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-open-training/ 2022-01-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/elevation-of-privilege-2022/ 2025-04-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/we-hack-purple/ 2022-01-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/wearing-many-hats/ 2022-01-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q1-2022/ 2022-01-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ten-questions-for-the-csrb/ 2022-02-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/how-to-choose-threat-modeling-training/ 2022-02-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/i-need-an-extension/ 2022-02-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/elevation-of-defenses/ 2022-03-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/how-executives-can-use-threat-modeling/ 2022-03-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ever-forward/ 2022-03-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/shortreads-march/ 2022-03-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/grimes-model-of-scams/ 2022-03-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fda-premarket-draft/ 2022-04-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/future-of-appsec/ 2022-04-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cyberpeace/ 2022-04-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q2-2022/ 2022-05-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/star-wars-day-2022/ 2023-12-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/on-security-of-star-wars/ 2022-05-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-may/ 2022-05-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/moon-dirt/ 2022-05-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-podcast/ 2022-05-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cybergreen/ 2022-06-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/what-can-go-wrong-authentic-thoughts/ 2022-06-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-june/ 2022-06-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/csrb-report/ 2022-07-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/webb-comparator/ 2022-07-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mciib/ 2022-07-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/buffet-overflow/ 2022-07-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-july/ 2022-07-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ITSP-jedi/ 2022-08-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-cover/ 2022-08-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/course-announcement-fall/ 2022-09-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/reddit-privacy-ama/ 2022-09-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/oct-champs-course/ 2022-09-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/oregon/ 2022-09-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-sept/ 2022-09-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pens/ 2022-10-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q3-2022/ 2022-10-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/bootcamp/ 2022-11-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/eop-miro/ 2022-11-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/trainings-and-discounts/ 2022-11-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-oct/ 2022-11-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/csm-podcast/ 2022-11-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-announce/ 2022-12-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gpt-3-threat-modeling/ 2022-12-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gpt-3/ 2022-12-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/human-centered-podcast/ 2022-12-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/death-star-liability/ 2022-12-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/spacenews/ 2022-12-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q4/ 2022-12-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/security-alerts/ 2022-12-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gpt3-threatmodeling-darkreading/ 2022-12-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/spacepostcards/ 2022-12-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gavle/ 2022-12-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/more-on-gpt3/ 2022-12-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fast-cheap-good-redux/ 2022-12-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-model-thursday-curl/ 2022-12-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/747/ 2022-12-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-appsec-landscape-in-2023/ 2023-01-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-is-measure-twice-cut-once-for-software/ 2023-01-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-table-of-contents/ 2023-01-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-books-complete/ 2023-01-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-book-launch-seattle/ 2023-02-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/friday-star-wars-jan-2023/ 2023-01-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-to-the-supply-chain/ 2023-01-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/not-all-jedis/ 2023-01-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hackermind/ 2023-01-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ocean-serpent/ 2023-01-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-jan-2023/ 2023-01-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/watermarks/ 2026-03-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/usablesecurity/ 2023-02-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/2001-lucas/ 2023-02-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/bing-chatgpt/ 2023-02-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/roman-concrete/ 2023-02-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-feb/ 2023-02-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-google-cloud/ 2023-03-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/davincisgravity/ 2023-03-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/my-david-prouse-moment/ 2023-03-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-national-cybersecurity-strategy/ 2023-03-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/star-wars-as-infographic/ 2023-03-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/imperium-for-men/ 2023-03-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/when-will-adam-be-replaced-by-chatgpt/ 2023-04-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-march-2023/ 2024-12-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cumulus-threat-model-thursday/ 2023-04-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/reflecting-on-threats-the-frame/ 2023-04-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/five-threat-model-diagrams-for-ml/ 2023-04-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threats-news-updates/ 2023-04-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/responsible-ai-layoffs/ 2023-04-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/may-the-fourth-secure-you/ 2023-05-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cyber-safety-review-board-historical-incidents/ 2023-05-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-may-2023/ 2023-05-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/phishing-defense/ 2023-06-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsecpnw2023/ 2023-12-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ai-high-interest-credit-card/ 2023-06-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-q2-2023/ 2023-06-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/no-guns-please/ 2023-06-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/microsoft-can-fix-ransomware-tomorrow/ 2023-07-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/valorizing-rule-breaking/ 2023-07-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cisa-secure-by-design-feedback/ 2023-07-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/chuck-acme-remediation-avoidance/ 2023-07-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/sec-cybersecurity-rules/ 2023-08-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/use-the-defcon-wifi/ 2023-08-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ml-sec-ops/ 2023-08-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/airline-close-calls/ 2023-08-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-aug/ 2023-08-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-for-security-champs/ 2023-09-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/comparing-retrospectives/ 2023-09-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/fda-final-cyber-guidance/ 2023-09-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-september/ 2023-10-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-on-sale/ 2023-10-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/adversarial-thinking-wargames/ 2023-10-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/security-principles-in-2023/ 2023-10-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-oct-2023/ 2023-11-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-model-thursday-turkey/ 2023-11-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-model-thursday-c2pa/ 2023-12-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-nov2023/ 2023-11-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/think-like-alphav/ 2023-12-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/nazgul-of-threat-modeling/ 2023-12-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/take-control-of-what-you-read/ 2024-12-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/giant-pink-bunny-redux/ 2025-07-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/think-like-siegedsec/ 2023-12-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-state-of-appsec-2024/ 2024-01-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/red-queen-tarah-wheeler/ 2024-01-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-capabilities/ 2024-01-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/csrb-senate-hearing-comments/ 2024-01-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/red-teaming/ 2024-01-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-jan-2024/ 2024-01-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/instructional-journey/ 2024-02-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-security-table/ 2024-02-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/il-lato-oscuro/ 2024-02-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-and-human-factors-2024/ 2024-02-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threatmodcon-lisbon/ 2024-02-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/solving-hallucinations/ 2024-02-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/insecurity-of-government-infrastructure/ 2024-02-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/archimedes-early-bird/ 2024-02-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-feb-2024/ 2024-12-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/british-library-incident-report/ 2024-03-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/inherent-threats/ 2024-03-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/adventures-in-llm-coding/ 2024-03-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-nvd-crisis/ 2024-03-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cybersecurity-lessons-from-covid19/ 2024-03-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-march-2024/ 2024-03-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/magic-security-dust/ 2024-04-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/healthcare-info-security/ 2024-04-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/csrb-report-on-microsoft/ 2024-04-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/archimedes-learning-platform/ 2024-04-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/other-comments-on-csrb/ 2024-04-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/eternal-sunshine-of-the-spotless-llm/ 2024-04-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/enterprise-security-weekly/ 2024-04-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/sutter-on-safety/ 2024-04-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/happy-star-wars-day/ 2024-05-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/rsa-2024/ 2024-05-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-april-2024/ 2024-05-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/diagrams-and-symbols-in-threat-models/ 2024-05-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-training-early-bird/ 2024-05-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-may-2024/ 2025-04-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-and-logins/ 2024-06-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/universal-cloud-threat-model-threat-model-thurs/ 2024-06-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/william-anders/ 2024-06-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-and-logins-redux/ 2024-06-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/scale-to-zero/ 2024-06-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/why-i-dont-engage-with-sean-hastings/ 2024-06-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/lockbit-study-in-public-health/ 2024-06-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/first-workshop-on-cyber-public-health/ 2024-06-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/97-things/ 2024-06-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/worthwhile-books-2024/ 2024-06-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/inherent-threats-threatmodcon/ 2024-07-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-unanimous-declaration-of-the-thirteen-united-states-of-america-2024/ 2024-07-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-june-2024/ 2024-07-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hard-problems-cyber-public-health/ 2024-07-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/google-on-cyberpublichealth/ 2024-07-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hard-problems-cyber-public-health-video/ 2024-07-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/goals-of-cyber-public-health/ 2024-07-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/your-turn/ 2024-07-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/venkat-podcast/ 2024-08-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-july-2024/ 2024-08-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-gameplay/ 2024-08-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/office-hours-training/ 2024-08-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/handling-pandemic-scale-cyber-threats/ 2024-08-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/secure-boot-and-secure-by-design/ 2024-08-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-august-2024/ 2024-09-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/google-health-symposium-2024/ 2024-09-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/back-to-school/ 2024-09-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/secure-boot-and-liability/ 2024-09-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-sept-2024/ 2024-09-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/back-to-school-ends-today/ 2024-09-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threatmodcon-sf/ 2024-10-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/on-democracy/ 2024-10-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/a-tale-of-two-addresses/ 2024-10-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/coaching/ 2024-10-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/party-over-country/ 2024-10-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-board-2024/ 2024-10-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mitre-attack-threat-modeling-threat-model-thursday/ 2024-10-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-people-who-served-under-trump/ 2024-10-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/scaling-threat-modeling/ 2024-10-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/25-years-of-cve/ 2024-10-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/russia/ 2024-10-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/policy/ 2024-10-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-oct-2024/ 2025-10-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-economy/ 2024-11-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/patching-in-2024/ 2024-11-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/election-prediction/ 2024-11-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/trust-and-security-boundaries/ 2024-11-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/purple-states/ 2024-11-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/car-safety/ 2024-11-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/is-cybersecurity-awareness-month-worth-the-money/ 2024-11-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/black-friday-sale/ 2024-11-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/four-question-frame/ 2024-11-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/risk-talk-at-JPL/ 2024-11-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-nov-2024/ 2024-12-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/human-centered-security/ 2024-12-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gavle-goat-2024/ 2024-12-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/stocking-stuffers-for-security-nerds/ 2024-12-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/a-different-hackathon-design/ 2024-12-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-dec-2024/ 2024-12-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/who-are-we/ 2025-01-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/lessons-for-cyber-from-the-public-health-system/ 2025-01-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/pandemic-scale/ 2025-01-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/spatial-reasoning-and-threat-modeing/ 2025-01-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/national-cyber-incident-response-plan/ 2025-01-28T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hackers-to-founders/ 2025-01-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hoarding-debt-and-threat-modeling/ 2025-01-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/risk-talk-cerias/ 2025-02-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-jan-2025/ 2025-02-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-the-genetic-sequencing-workflow/ 2025-02-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-and-human-factors-2025/ 2025-02-14T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cybertuesday-podcast/ 2025-02-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/medical-device-cybersecurity/ 2025-02-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/inside-man/ 2025-03-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-feb-2025/ 2025-03-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/rsa-webinar/ 2025-03-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/strategy-for-threat-modeling-ai/ 2025-03-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-first-constitutional-crisis-of-2025/ 2025-03-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/covid-5-years-on/ 2025-03-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-announcement/ 2025-03-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/security-researcher-comment-on-hipaa-security-rules/ 2025-04-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/def-con-almanack/ 2025-03-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-march-2025/ 2025-04-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/learning-from-troy-hunts-sneaky-phish/ 2025-04-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/assets-again/ 2025-04-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/thoughts-on-cve/ 2025-04-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/free-threats/ 2025-04-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/andor-season-2/ 2025-04-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cve-futures/ 2025-04-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-informed-defense/ 2025-04-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-april/ 2025-04-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-empires-threat-modeling/ 2025-05-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/andor-threats-information-disclosure/ 2025-05-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/think-like-a-leader/ 2025-05-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cyber-hard-problems-review/ 2025-06-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-earlybird-pricing-25/ 2025-05-19T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-training-for-federal-workers/ 2025-05-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/andor-insider-threat/ 2025-06-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-may-2025/ 2025-06-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/essence-and-beauty-of-threat-modeling/ 2025-06-13T00:00:00.000Z monthly 0.5 https://shostack.org/blog/publish-your-threat-model/ 2025-07-06T00:00:00.000Z monthly 0.5 https://shostack.org/blog/google-approach-to-ai-agents-threat-model-thursday/ 2025-06-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-june-2025/ 2025-07-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-unanimous-declaration-of-the-thirteen-united-states-of-america-2025/ 2025-07-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/voting-for-secession/ 2025-07-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-as-a-dial-not-a-switch/ 2025-07-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-cyber-resilience-act/ 2025-07-21T00:00:00.000Z monthly 0.5 https://shostack.org/blog/risk-management-and-threat-modeling/ 2025-07-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-defcon-25/ 2025-07-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/llms-as-compilers/ 2025-07-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/risk-is-not-a-hammer-usenix-enigma/ 2025-10-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-tools/ 2025-08-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/mansplaining-your-threat-model-as-a-service/ 2025-08-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-july-2025/ 2025-08-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/back-to-school-sale/ 2025-09-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-dc-announcement/ 2025-09-08T00:00:00.000Z monthly 0.5 https://shostack.org/blog/how-could-llms-change-threat-modeling/ 2025-09-09T00:00:00.000Z monthly 0.5 https://shostack.org/blog/cybersec-game-challenge/ 2025-09-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/apollo-15-lrv-boeing/ 2025-09-15T00:00:00.000Z monthly 0.5 https://shostack.org/blog/lunar-rover-vehicle-redux/ 2025-09-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/medtech-innovation-podcast/ 2025-09-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-sept-2025/ 2025-10-01T00:00:00.000Z monthly 0.5 https://shostack.org/blog/ai-insurance-wont-save-you/ 2025-11-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/prompt-enignieering-requires-evaluation/ 2025-10-20T00:00:00.000Z monthly 0.5 https://shostack.org/blog/lean-app-sec-announcement/ 2025-10-23T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-board-2025/ 2025-10-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/the-moonwalkers/ 2025-10-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/oct-ant/ 2025-10-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/stop-trying-to-manage-risk/ 2025-11-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-oct-2025/ 2025-11-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/publishing-publish-your-threat-models/ 2025-11-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-threat-model-reboot/ 2025-11-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/website-accessibility-improvements-2025/ 2025-11-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-nov-2025/ 2025-11-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/windows-links-and-usable-security/ 2025-12-05T00:00:00.000Z monthly 0.5 https://shostack.org/blog/state-of-threat-modeling-2024-2025/ 2025-12-12T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-keynote-available/ 2025-12-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/best-holiday-decorations/ 2025-12-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/gavle-goat-survived-in-2025/ 2025-12-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/a-few-thoughts-closing-2025/ 2025-12-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/congratulations-to-threatmodeler/ 2026-01-07T00:00:00.000Z monthly 0.5 https://shostack.org/blog/take-control-of-what-you-read-redux/ 2026-01-11T00:00:00.000Z monthly 0.5 https://shostack.org/blog/security-advisory-26-01-gps-attacks/ 2026-01-22T00:00:00.000Z monthly 0.5 https://shostack.org/blog/bitlocker-the-fbi-and-risk/ 2026-01-25T00:00:00.000Z monthly 0.5 https://shostack.org/blog/NIST-800-218-revision/ 2026-01-27T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-in-the-age-of-ai/ 2026-01-29T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-dec-jan-2026/ 2026-01-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/owasp-modern-appsec-podcast/ 2026-02-04T00:00:00.000Z monthly 0.5 https://shostack.org/blog/hackers-almanack-defcon-33/ 2026-02-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/vuln-finding-inflection/ 2026-02-18T00:00:00.000Z monthly 0.5 https://shostack.org/blog/welcoming-kymberlee-price-as-chief-operating-officer/ 2026-02-26T00:00:00.000Z monthly 0.5 https://shostack.org/blog/layered-defenses-bsides-seattle-2026/ 2026-03-02T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-feb-2026/ 2026-03-03T00:00:00.000Z monthly 0.5 https://shostack.org/blog/silver-car-recall/ 2026-03-10T00:00:00.000Z monthly 0.5 https://shostack.org/blog/blackhat-and-human-factors-2026/ 2026-03-16T00:00:00.000Z monthly 0.5 https://shostack.org/blog/threat-modeling-ai-systems-course-announce/ 2026-03-17T00:00:00.000Z monthly 0.5 https://shostack.org/blog/wasting-failures-rsac-2026/ 2026-03-24T00:00:00.000Z monthly 0.5 https://shostack.org/blog/kymberlee-reflects-on-bsidessf-and-rsac2026/ 2026-03-30T00:00:00.000Z monthly 0.5 https://shostack.org/blog/appsec-roundup-march-2026/ 2026-03-31T00:00:00.000Z monthly 0.5 https://shostack.org/blog/devsecops-learn-from-star-trek/ 2026-04-01T00:00:00.000Z monthly 0.5 https://shostack.org/pages/threatsbook/ 2026-04-02T20:31:28.452Z monthly 0.5 https://shostack.org/about/adam/papers/25-years-in-application-security.html 2026-04-02T20:31:32.800Z monthly 0.5 https://shostack.org/about.html 2026-04-02T20:31:32.800Z monthly 0.5 https://shostack.org/secure-design-accelerator.html 2026-04-02T20:31:32.800Z monthly 0.5 https://shostack.org/about/adam.html 2026-04-02T20:31:32.800Z monthly 0.5 https://shostack.org/security-advisory-26-01-gps-security-concerns-require-threat-model-updates.html 2026-04-02T20:31:32.800Z monthly 0.5 https://shostack.org/about/adam/archive.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/blog/about.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/blog/the-security-principles-of-saltzer-and-schroeder.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/blog.html 2026-04-02T20:31:32.804Z weekly 0.8 https://shostack.org/books/new-school-infosec-book.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/resources/help-launch-threatmodeling.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/books/threat-modeling-book.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/books/help-launch-threats-book.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/books.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/buy/tools.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/buy.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/blog/category/id-management.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/consulting.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/contact/threat-model.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/contact.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/books/contributions.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/training/corporate.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/games/control-alt-hack.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/games/elevation-of-privilege.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/expert-witness.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/games.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/tm-games.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/resources/lessons.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/meet-adam/blackhat-defcon-2025.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/about/adam/papers.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/partners.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/privacy-policy.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/resources/cyber-public-health.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/resources/early-threat-modeling.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/resources/threat-modeling-quick-start.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/resources/threat-modeling.html 2026-04-02T20:31:32.804Z monthly 0.5 https://shostack.org/resources.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/files/essays/review.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/search.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/about/adam/software.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/about/adam/speaking.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/resources/creativity.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/resources/tm-in-2021.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/about/adam/built.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/books/threat-modeling-book/supplemental.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/training.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/resources/videos.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/resources/whitepapers.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/resources/whitepapers/rolling-out-threat-modeling-program.html 2026-04-02T20:31:32.808Z monthly 0.5 https://shostack.org/resources/whitepapers/threat-modeling-what-why-how.html 2026-04-02T20:31:32.808Z monthly 0.5 https://courses.shostack.org/ weekly