Red Teaming
Red Teaming by Bryce Hoffman is a thought-provoking read.
Shostack + Friends Blog
Recent Blog Posts, Page 12
CSRB Senate Hearing
Comments following the Senate’s CSRB hearing
Threat Modeling Capabilities Released
A great new resource for threat modeling
Red Queen Dynamics: Podcast Episode with Tarah Wheeler
Adam on Red Queen Dynamics podcast
The State of Appsec in 2024
2024 is bringing lots of AI, and Liability, too
Think like Sieged-sec?
Yet again, attackers surprise us
Giant Pink Bunny, Redux
Art is transient
Take Control of What You Read
As 2023 draws to a close, take control of what you read.
The Nazgul of Threat Modeling
(no description available)
Application and AI roundup - November
A threat modeling conference, lots of government appsec guidance, and some updates from Shostack + Associates
C2PA Threat Modeling
What can we learn from the C2PA security considerations document?
Threat Modeling Thursday: Thanksgiving
What can we learn from Gunnar Peterson’s Threat Model for Thanksgiving?
Application and AI roundup - October
Exciting news from the SEC, lots of AI, and lots of threat modeling.
Security Principles in 2023
Principles are lovely, but do they lead us to actionable results?