Shostack + Friends Blog

Posts in category “conferences”

The Sessions I'm Genuinely Excited About at Black Hat 2026 (Adam's version)

The things I'm looking forward to at Black Hat this year. (20 Jul 2026)

What to Expect: Threat Modeling Intensive with Complete AI

Learn what goes into our Threat Modeling Intensive with Complete AI (14 Jul 2026)

OWASP Global AppSec EU 2026 Recap (Next up, BlackHat!)

Reflecting on the S+A team's adventures in Vienna and excitement for BlackHat 2026 (07 Jul 2026)

The Unkeynote: challenging the Threat Modeling Manifesto in Vienna

It's a trap. (The trap being: can five Threat Modeling Manifesto working group members sit on the ThreatModCon EU Unkeynote stage together and agree on how AI requires them to amend their own work?) (26 Jun 2026)

From the training room: real security starts on the whiteboard

A look at what's happening in the Threat Modeling Intensive session this week in Vienna (23 Jun 2026)

Why “The AI Explained It” Isn't Good Enough: Introducing the SCORE Framework

Exploring what it means for an AI to explain itself, and why “it gave a reason” is not the same as accountability. (17 Jun 2026)

Summer Plans: Vienna, then Las Vegas

A roundup of where you'll find us over the next couple of months (12 Jun 2026)

PHANTOM-B goes to Black Hat

A busy Black Hat: A new talk, a new practical tool, and a deadline you should know about (21 May 2026)

Adam reflects on BSides SF and RSAC

Adam finally caught his breath and sat down to reflect on BSides SF and RSAC 2026. (14 Apr 2026)

Sunshine and Security – Kymberlee’s week at BSides SF and RSAC 2026

Some of the best parts of BSidesSF and RSAC 2026 don't make it into session recordings... (30 Mar 2026)

Wasting Failures at RSAC™ 2026 Conference

Cybersecurity should learn lessons from industries that are transparent about failure. (23 Mar 2026)

Blackhat and Human Factors

BlackHat invites human factors work (16 Mar 2026)

Layered Defenses at BSides Seattle

How do we use models to help us answer what are we going to do? (02 Mar 2026)

Blackhat and Defcon 2025

Adam’s plans for summer camp (24 Jul 2025)

Blackhat and Human Factors

BlackHat invites human factors work (14 Feb 2025)

A Tale of Two Addresses

Output encoding is a tool, not a hammer. Or maybe it's a hammer. (07 Oct 2024)

Google Health Symposium

Slides from Adam's talk at the Symposium (05 Sep 2024)

Blackhat and Human Factors

BlackHat invites human factors work (19 Feb 2024)

Use the Defcon Wifi

Why it’s ok to use the Defcon wifi (02 Aug 2023)

AppSecPNW 2023

Adam's AppSecPNW 2023 keynote (12 Jun 2023)

Pacific Northwest Appsec Conference

AppSec Pacific Northwest Conference is a free application security conference that will be held Saturday, June 19th. It is a virtual, online event sponsored by the OWASP chapters of Portland, Vancouver, and Victoria. (14 May 2021)

Digital Guru Books

Rupin Gupta runs Digital Guru books. He's one of the nicest people you'll ever meet, a real joy to work with, and he works hard to put books on shelves so that you can discover them. With the conference business changing, Digital Guru needs some help. (15 Jan 2021)

MDIC Annual Public Forum

I'll be speaking at the MDIC's Annual Public Forum today, discussing how threat modeling helps bring maturity to the medtech sector. (13 Aug 2020)

Maximizing the Value of Virtual Security Conferences

A few tips on getting the most out of attending a virtual security conference. (31 Jul 2020)

Blackhat and Human Factors

As a member of the BlackHat Review Board, I would love to see more work on Human Factors presented there. (26 Feb 2020)

Empirical Evaluation of Secure Development Processes

Earlier this year, I helped to organize a workshop at Schloss Dagstuhl on Empirical Evaluation of Secure Development Processes. I think the workshop was a tremendous success. (07 Dec 2019)