41554 blogs · [ { "id": "01a087e0-3158-7293-868a-23878ee68e9c", "title": "97 Things Every Application Security Professional Should Know", "url": "https://shostack.org/blog/97-things/", "published_at": "2024-06-18T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-23878ebbbb00", "title": "First Workshop on Cyber Public Health", "url": "https://shostack.org/blog/first-workshop-on-cyber-public-health/", "published_at": "2024-06-17T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-23878de57bbd", "title": "Lockbit, a study in public health", "url": "https://shostack.org/blog/lockbit-study-in-public-health/", "published_at": "2024-06-15T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-23878ced1855", "title": "Why I don't engage with Sean Hastings", "url": "https://shostack.org/blog/why-i-dont-engage-with-sean-hastings/", "published_at": "2024-06-14T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-23878c2c5ed2", "title": "Scale to Zero", "url": "https://shostack.org/blog/scale-to-zero/", "published_at": "2024-06-12T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-23878c295a5e", "title": "Threat Modeling and Logins, Redux", "url": "https://shostack.org/blog/threat-modeling-and-logins-redux/", "published_at": "2024-06-11T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-23878b9d7737", "title": "William Anders", "url": "https://shostack.org/blog/william-anders/", "published_at": "2024-06-08T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-23878acb99cb", "title": "The Universal Cloud TM -- Threat Model Thursday", "url": "https://shostack.org/blog/universal-cloud-threat-model-threat-model-thurs/", "published_at": "2024-06-06T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-23878a960218", "title": "Threat Modeling and Logins", "url": "https://shostack.org/blog/threat-modeling-and-logins/", "published_at": "2024-06-04T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-23878a06b348", "title": "Security Engineering roundup - May 2024", "url": "https://shostack.org/blog/appsec-roundup-may-2024/", "published_at": "2024-05-30T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-23878916a654", "title": "Blackhat Training Early Bird", "url": "https://shostack.org/blog/blackhat-training-early-bird/", "published_at": "2024-05-21T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-238788ee8b06", "title": "Diagrams and Symbols in Threat Models", "url": "https://shostack.org/blog/diagrams-and-symbols-in-threat-models/", "published_at": "2024-05-16T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-2387887b39e8", "title": "Secure by Design roundup - April 2024", "url": "https://shostack.org/blog/appsec-roundup-april-2024/", "published_at": "2024-05-08T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-2387880f3850", "title": "RSA 2024", "url": "https://shostack.org/blog/rsa-2024/", "published_at": "2024-05-06T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-238787951be8", "title": "Happy Star Wars Day", "url": "https://shostack.org/blog/happy-star-wars-day/", "published_at": "2024-05-04T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-238786b006b0", "title": "Sutter on Safety", "url": "https://shostack.org/blog/sutter-on-safety/", "published_at": "2024-04-29T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-2387869f0190", "title": "Enterprise Security Weekly: Podcast Episode with Adrian Sanabria", "url": "https://shostack.org/blog/enterprise-security-weekly/", "published_at": "2024-04-27T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-238786977754", "title": "Eternal sunshine of the spotless LLM", "url": "https://shostack.org/blog/eternal-sunshine-of-the-spotless-llm/", "published_at": "2024-04-21T00:00:00+00:00" }, { "id": "01a087e0-3158-7293-868a-2387864a0a7a", "title": "Other comments on the CSRB Microsoft Report", "url": "https://shostack.org/blog/other-comments-on-csrb/", "published_at": "2024-04-17T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f2570618d8e8", "title": "Leveraging our training platform", "url": "https://shostack.org/blog/archimedes-learning-platform/", "published_at": "2024-04-16T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f25705a55396", "title": "CSRB Report on Microsoft", "url": "https://shostack.org/blog/csrb-report-on-microsoft/", "published_at": "2024-04-13T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f25704c5c045", "title": "Healthcare Info Security: Podcast Episode with Marianne Kolbasuk McGee", "url": "https://shostack.org/blog/healthcare-info-security/", "published_at": "2024-04-07T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f257047330aa", "title": "Introducing Magic Security Dust!", "url": "https://shostack.org/blog/magic-security-dust/", "published_at": "2024-04-01T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f25703c1771b", "title": "Secure by Design roundup - March 2024", "url": "https://shostack.org/blog/appsec-roundup-march-2024/", "published_at": "2024-03-29T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f25702e0d077", "title": "Cybersecurity Lessons from Covid19", "url": "https://shostack.org/blog/cybersecurity-lessons-from-covid19/", "published_at": "2024-03-27T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f25702072cc7", "title": "The NVD Crisis", "url": "https://shostack.org/blog/the-nvd-crisis/", "published_at": "2024-03-25T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f257017bd9d1", "title": "Adventures in LLM Coding", "url": "https://shostack.org/blog/adventures-in-llm-coding/", "published_at": "2024-03-21T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f257017b34c0", "title": "Inherent Threats (Whitepaper)", "url": "https://shostack.org/blog/inherent-threats/", "published_at": "2024-03-20T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f25700906672", "title": "The British Library’s Incident Review", "url": "https://shostack.org/blog/british-library-incident-report/", "published_at": "2024-03-09T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256ffdaa095", "title": "Application and AI roundup - Feb 2024", "url": "https://shostack.org/blog/appsec-roundup-feb-2024/", "published_at": "2024-03-05T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256ff270495", "title": "Archimedes Early Bird Ends Soon", "url": "https://shostack.org/blog/archimedes-early-bird/", "published_at": "2024-02-29T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256feddefb0", "title": "Insecurity of Government Infrastructure", "url": "https://shostack.org/blog/insecurity-of-government-infrastructure/", "published_at": "2024-02-26T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256fe8846e8", "title": "Solving Hallucinations", "url": "https://shostack.org/blog/solving-hallucinations/", "published_at": "2024-02-23T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256fe685772", "title": "ThreatModCon Lisbon 2024", "url": "https://shostack.org/blog/threatmodcon-lisbon/", "published_at": "2024-02-21T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256fd6f42e8", "title": "Blackhat and Human Factors", "url": "https://shostack.org/blog/blackhat-and-human-factors-2024/", "published_at": "2024-02-19T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256fcd5809b", "title": "Conoscere Il Lato Oscuro", "url": "https://shostack.org/blog/il-lato-oscuro/", "published_at": "2024-02-14T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256fc4e2063", "title": "The Security Table: Podcast Episode with Chris Romeo", "url": "https://shostack.org/blog/the-security-table/", "published_at": "2024-02-07T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256fc1d8076", "title": "My Instructional Journey", "url": "https://shostack.org/blog/instructional-journey/", "published_at": "2024-02-06T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256fbec0385", "title": "Application and AI roundup - Jan 2024", "url": "https://shostack.org/blog/appsec-roundup-jan-2024/", "published_at": "2024-01-29T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256fb16075d", "title": "Red Teaming", "url": "https://shostack.org/blog/red-teaming/", "published_at": "2024-01-21T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256fac8d838", "title": "CSRB Senate Hearing", "url": "https://shostack.org/blog/csrb-senate-hearing-comments/", "published_at": "2024-01-19T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256fa9db21d", "title": "Threat Modeling Capabilities Released", "url": "https://shostack.org/blog/threat-modeling-capabilities/", "published_at": "2024-01-12T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f9eda494", "title": "Red Queen Dynamics: Podcast Episode with Tarah Wheeler", "url": "https://shostack.org/blog/red-queen-tarah-wheeler/", "published_at": "2024-01-05T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f97968ab", "title": "The State of Appsec in 2024", "url": "https://shostack.org/blog/the-state-of-appsec-2024/", "published_at": "2024-01-02T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f8f5d7de", "title": "Think like Sieged-sec?", "url": "https://shostack.org/blog/think-like-siegedsec/", "published_at": "2023-12-29T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f892df96", "title": "Giant Pink Bunny, Redux", "url": "https://shostack.org/blog/giant-pink-bunny-redux/", "published_at": "2023-12-27T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f8726152", "title": "Take Control of What You Read", "url": "https://shostack.org/blog/take-control-of-what-you-read/", "published_at": "2023-12-26T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f811bea8", "title": "The Nazgul of Threat Modeling", "url": "https://shostack.org/blog/nazgul-of-threat-modeling/", "published_at": "2023-12-15T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f727d6cc", "title": "Think like Alph-V?", "url": "https://shostack.org/blog/think-like-alphav/", "published_at": "2023-12-12T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f68d827b", "title": "Application and AI roundup - November", "url": "https://shostack.org/blog/appsec-roundup-nov2023/", "published_at": "2023-11-30T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f683eb4c", "title": "C2PA Threat Modeling", "url": "https://shostack.org/blog/threat-model-thursday-c2pa/", "published_at": "2023-11-29T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f58892b8", "title": "Threat Modeling Thursday: Thanksgiving", "url": "https://shostack.org/blog/threat-model-thursday-turkey/", "published_at": "2023-11-23T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f51695a8", "title": "Application and AI roundup - October", "url": "https://shostack.org/blog/appsec-roundup-oct-2023/", "published_at": "2023-11-09T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f4a03f0a", "title": "Security Principles in 2023", "url": "https://shostack.org/blog/security-principles-in-2023/", "published_at": "2023-10-27T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f3b82d89", "title": "Adversarial Thinking and Wargames", "url": "https://shostack.org/blog/adversarial-thinking-wargames/", "published_at": "2023-10-12T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f2f0da6a", "title": "Threat Modeling on Sale", "url": "https://shostack.org/blog/threat-modeling-on-sale/", "published_at": "2023-10-06T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f2b57ff5", "title": "Application and AI roundup - September", "url": "https://shostack.org/blog/appsec-roundup-september/", "published_at": "2023-10-04T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f28af8c8", "title": "FDA Final Cyber Guidance is out", "url": "https://shostack.org/blog/fda-final-cyber-guidance/", "published_at": "2023-09-26T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f20cedd3", "title": "Comparing Retrospectives", "url": "https://shostack.org/blog/comparing-retrospectives/", "published_at": "2023-09-19T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f1fa14ef", "title": "Open training: Threat Modeling for Champs (October)", "url": "https://shostack.org/blog/threat-modeling-for-security-champs/", "published_at": "2023-09-14T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f149f7fc", "title": "Application and AI roundup - August", "url": "https://shostack.org/blog/appsec-roundup-aug/", "published_at": "2023-08-30T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f0ba9900", "title": "Airline Close Calls", "url": "https://shostack.org/blog/airline-close-calls/", "published_at": "2023-08-22T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256f02c0339", "title": "ML Sec Ops: Feature with Diana Kelley", "url": "https://shostack.org/blog/ml-sec-ops/", "published_at": "2023-08-18T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256ef6ed743", "title": "Use the Defcon Wifi", "url": "https://shostack.org/blog/use-the-defcon-wifi/", "published_at": "2023-08-02T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256eeda26ed", "title": "SEC Cybersecurity Rules", "url": "https://shostack.org/blog/sec-cybersecurity-rules/", "published_at": "2023-08-01T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256ee6cc752", "title": "Chuck, Acme, and Remediation Avoidance", "url": "https://shostack.org/blog/chuck-acme-remediation-avoidance/", "published_at": "2023-07-27T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256edaa2a6f", "title": "Threat Modeling and Secure by Design", "url": "https://shostack.org/blog/cisa-secure-by-design-feedback/", "published_at": "2023-07-19T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256ed7e7748", "title": "Valorizing Rule-breaking", "url": "https://shostack.org/blog/valorizing-rule-breaking/", "published_at": "2023-07-17T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256ed2623d3", "title": "Microsoft Can Fix Ransomware Tomorrow", "url": "https://shostack.org/blog/microsoft-can-fix-ransomware-tomorrow/", "published_at": "2023-07-05T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256ec85751e", "title": "No guns please", "url": "https://shostack.org/blog/no-guns-please/", "published_at": "2023-06-30T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256ec208b36", "title": "Worthwhile Books Q2 2023", "url": "https://shostack.org/blog/worthwhile-books-q2-2023/", "published_at": "2023-06-28T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256eba22fce", "title": "AI will be the high interest credit card of 2023", "url": "https://shostack.org/blog/ai-high-interest-credit-card/", "published_at": "2023-06-16T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256eac3e7b7", "title": "AppSecPNW 2023", "url": "https://shostack.org/blog/appsecpnw2023/", "published_at": "2023-06-12T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256ea2a9ac6", "title": "Phishing Defenses", "url": "https://shostack.org/blog/phishing-defense/", "published_at": "2023-06-07T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256e97159aa", "title": "Application and AI roundup - May", "url": "https://shostack.org/blog/appsec-roundup-may-2023/", "published_at": "2023-05-30T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256e8c04e79", "title": "The Cyber Safety Review Board Should Investigate Major Historical Incidents", "url": "https://shostack.org/blog/cyber-safety-review-board-historical-incidents/", "published_at": "2023-05-25T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256e7fa5ef3", "title": "May the Fourth Secure You", "url": "https://shostack.org/blog/may-the-fourth-secure-you/", "published_at": "2023-05-04T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256e77ce004", "title": "Layoffs in Responsible AI Teams", "url": "https://shostack.org/blog/responsible-ai-layoffs/", "published_at": "2023-04-21T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256e7595bfb", "title": "Threats Book News and Updates for April", "url": "https://shostack.org/blog/threats-news-updates/", "published_at": "2023-04-19T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256e71c8c8c", "title": "Five Threat Model Diagrams for Machine Learning", "url": "https://shostack.org/blog/five-threat-model-diagrams-for-ml/", "published_at": "2023-04-13T00:00:00+00:00" }, { "id": "01a087e0-3157-7060-ae0d-f256e707493e", "title": "Reflecting on Threats: The Frame", "url": "https://shostack.org/blog/reflecting-on-threats-the-frame/", "published_at": "2023-04-10T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc855a3c4b72", "title": "Cumulus", "url": "https://shostack.org/blog/cumulus-threat-model-thursday/", "published_at": "2023-04-06T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc85598370d7", "title": "Application Security Roundup - March", "url": "https://shostack.org/blog/appsec-roundup-march-2023/", "published_at": "2023-04-05T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc8558904475", "title": "When will Adam be replaced by ChatGPT?", "url": "https://shostack.org/blog/when-will-adam-be-replaced-by-chatgpt/", "published_at": "2023-04-01T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc8557937f63", "title": "Imperium for Men", "url": "https://shostack.org/blog/imperium-for-men/", "published_at": "2023-03-31T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc855782f157", "title": "Star Wars, The Infographic", "url": "https://shostack.org/blog/star-wars-as-infographic/", "published_at": "2023-03-24T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc85576c446c", "title": "The National CyberSecurity Strategy: Liability is Coming", "url": "https://shostack.org/blog/the-national-cybersecurity-strategy/", "published_at": "2023-03-21T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc85572c976b", "title": "My David Prouse Moment", "url": "https://shostack.org/blog/my-david-prouse-moment/", "published_at": "2023-03-17T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc8556bed32f", "title": "Leonardo da Vinci’s Gravity Experiment", "url": "https://shostack.org/blog/davincisgravity/", "published_at": "2023-03-10T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc855675f133", "title": "Threat Modeling Google Cloud (Threat Model Thursday)", "url": "https://shostack.org/blog/threat-modeling-google-cloud/", "published_at": "2023-03-01T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc8555f3b26d", "title": "Application Security Roundup - Feb", "url": "https://shostack.org/blog/appsec-roundup-feb/", "published_at": "2023-02-27T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc855527d7f9", "title": "Roman Concrete", "url": "https://shostack.org/blog/roman-concrete/", "published_at": "2023-02-24T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc8554f1e5db", "title": "Bing’s ChatGPT", "url": "https://shostack.org/blog/bing-chatgpt/", "published_at": "2023-02-21T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc8554183b36", "title": "2001, as directed by George Lucas", "url": "https://shostack.org/blog/2001-lucas/", "published_at": "2023-02-11T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc8553693666", "title": "Usable Security and Privacy for Engineers", "url": "https://shostack.org/blog/usablesecurity/", "published_at": "2023-02-09T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc85528d855d", "title": "Watermarks", "url": "https://shostack.org/blog/watermarks/", "published_at": "2023-02-03T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc85521cfdf2", "title": "Application Security Roundup - January", "url": "https://shostack.org/blog/appsec-roundup-jan-2023/", "published_at": "2023-01-30T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc85521a6687", "title": "Fumée d'incendie", "url": "https://shostack.org/blog/ocean-serpent/", "published_at": "2023-01-29T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc8551bac42e", "title": "The Hacker Mind", "url": "https://shostack.org/blog/hackermind/", "published_at": "2023-01-27T00:00:00+00:00" }, { "id": "01a087e0-3156-7011-bc81-bc8550e233be", "title": "Not all developers can be Jedi", "url": "https://shostack.org/blog/not-all-jedis/", "published_at": "2023-01-23T00:00:00+00:00" } ] posts Claim your blog
Back to shostack.org
Blog · corpus.blog/blogs/shostack.org/posts

shostack.org

shostack.org

2024

2023