Record · corpus.blog/posts/01a087e0-315b-7113-861b-0125f1097d75

Secure By Design roundup - Dec/Jan 2026

shostack.org · published 30 January 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at shostack.org Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 25
Words captured: 766

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

The Normalization of Deviance in AI Read at the source ↗

embracethered.com

Congratulations to ThreatModeler and IriusRisk! Read at the source ↗

shostack.org

https://www.threatmodelingconnect.com/state-of-threat-modeling-2024-25

threatmodelingconnect.com

https://docs.google.com/forms/d/e/1FAIpQLSeXgRR4bJQDlBH40eVE4KWzLhLHp5hM1DHhLcV_01dpq0_09A/viewform?entry.1526440369=N/A&entry.360622520=N/A&entry.1479959083=N/A&entry.1720349863=N/A&entry.1523026302=N/A&entry.1003706792=N/A&entry.535149216=N/A&entry.2118305141=N/A&entry.990550196=N/A&entry.517911990=N/A&entry.1244311519=N/A&entry.1448992516=N/A&entry.472254208=N/A&entry.1034831087=N/A&entry.1717826191=N/A&entry.1679612542=N/A&entry.1288916415=N/A&entry.935200619=N/A&entry.2031143252=N/A&entry.178036360=N/A&entry.350491086=N/A&entry.1353676189=N/A&entry.1753487960=N/A&entry.1641384883=N/A&entry.1695446743=N/A&entry.1685073344=N/A&entry.1473527980=N/A&entry.1931452288=N/A

docs.google.com

https://www.threatmodelingconnect.com/hackathon

threatmodelingconnect.com

TLA+ modeling tips Read at the source ↗

muratbuffalo.blogspot.com

https://lamport.azurewebsites.net/tla/tla.html

lamport.azurewebsites.net

https://developer.apple.com/support/alternative-browser-engines-jp/

developer.apple.com

https://arxiv.org/abs/2412.13459

arxiv.org

https://nesbitt.io/2025/12/27/how-to-ruin-all-of-package-management.html

nesbitt.io

https://venturebeat.com/security/openai-admits-that-prompt-injection-is-here-to-stay

venturebeat.com

Continuously hardening ChatGPT Atlas against prompt injection Read at the source ↗

openai.com

Discarding the Shaft-and-Belt Model of Software Development Read at the source ↗

secondthoughts.ai

https://docbox.etsi.org/CYBER/CYBER/Open/

docbox.etsi.org

https://docbox.etsi.org/CYBER/CYBER/Open/EN-304-626_V0.1.0_2025-12-23_Operating-Systems_Mature-draft.pdf

docbox.etsi.org

https://github.com/mosa/MOSA-Project

github.com

https://embassy.dev/

embassy.dev

https://circleid.com/posts/20230824-eu-cra-regulatory-extremism-and-exceptionalism

circleid.com

One Regulation E, Two Very Different Regimes Read at the source ↗

bitsaboutmoney.com

https://www.bankinfosecurity.com/blogs/dark-patterns-childrens-data-corporate-fiduciary-risk-p-4023

bankinfosecurity.com

https://www.ftc.gov/news-events/news/press-releases/2026/01/ftc-finalizes-order-settling-allegations-gm-onstar-collected-sold-geolocation-data-without-consumers

ftc.gov

https://thequantuminsider.com/2026/01/14/u-s-federal-agencies-are-stepping-up-for-the-quantum-security-transition/

thequantuminsider.com

https://www.youtube.com/watch?v=xa4Ok7WNFHY

youtube.com

https://www.cs.auckland.ac.nz/~pgut001/pubs/bollocks.pdf

cs.auckland.ac.nz

https://shostack.org/security-advisory-26-01-gps-security-concerns-require-threat-model-updates

shostack.org