#threat-modeling — Public Fediverse posts

I am looking forward to entertaining you at OWASP's 25th Anniversary Virtual Conference on September 22 at 10:25 am PDT about "Gamifying AI Threat Modeling and Security Requirement Analysis"

owasp25thanniversaryvirtualconfe.sched.com/event/2QmLm/...

#appsec #security #games #threatmodeling #ai

OWASP 25th Anniversary Virtual...

I am looking forward to entertaining you at OWASP's 25th Anniversary Virtual Conference on September 22 at 10:25 am PDT about "Gamifying AI Threat Modeling and Security Requirement Analysis"

owasp25thanniversaryvirtualconfe.sched.com/event/2QmLm/...

#appsec #security #games #threatmodeling #ai

OWASP 25th Anniversary Virtual...

I am looking forward to entertaining you at OWASP's 25th Anniversary Virtual Conference on September 22 at 10:25 am PDT about "Gamifying AI Threat Modeling and Security Requirement Analysis"

owasp25thanniversaryvirtualconfe.sched.com/event/2QmLm/...

#appsec #security #games #threatmodeling #ai

OWASP 25th Anniversary Virtual...

I am looking forward to entertaining you at OWASP's 25th Anniversary Virtual Conference on September 22 at 10:25 am PDT about "Gamifying AI Threat Modeling and Security Requirement Analysis"

owasp25thanniversaryvirtualconfe.sched.com/event/2QmLm/...

#appsec #security #games #threatmodeling #ai

OWASP 25th Anniversary Virtual...

I am looking forward to entertaining you at OWASP's 25th Anniversary Virtual Conference on September 22 at 10:25 am PDT about "Gamifying AI Threat Modeling and Security Requirement Analysis"

owasp25thanniversaryvirtualconfe.sched.com/event/2QmLm/...

#appsec #security #games #threatmodeling #ai

OWASP 25th Anniversary Virtual...

OWASP Cornucopia just released v3.4.6 (github.com/OWASP/cornuc...)
A Special thanks to Khushal Malhotra, Prajakta G. kamble, Ayman Algamal, Abhijit Sahoo and Adarsh Kumar for all the bug fixes. Cornucopia is now more secure and stable than ever!

#games #threatmodeling #cornucopia #appsec #security

Release v3.4.6 · OWASP/cornuco...

OWASP Cornucopia just released v3.4.6 (github.com/OWASP/cornuc...)
A Special thanks to Khushal Malhotra, Prajakta G. kamble, Ayman Algamal, Abhijit Sahoo and Adarsh Kumar for all the bug fixes. Cornucopia is now more secure and stable than ever!

#games #threatmodeling #cornucopia #appsec #security

Release v3.4.6 · OWASP/cornuco...

We are also actively looking for community contributors to help us with the help pages for each of the EoP Cards cornucopia.owasp.org/edition/eop. Specifically, we need security minds to help players better answer:

- What can go wrong?
- What are we going to do about it?

#games #threatmodeling

OWASP Cornucopia - The card de...

OWASP Cornucopia just released v3.4.6 (github.com/OWASP/cornuc...)
A Special thanks to Khushal Malhotra, Prajakta G. kamble, Ayman Algamal, Abhijit Sahoo and Adarsh Kumar for all the bug fixes. Cornucopia is now more secure and stable than ever!

#games #threatmodeling #cornucopia #appsec #security

Release v3.4.6 · OWASP/cornuco...

We are also actively looking for community contributors to help us with the help pages for each of the EoP Cards cornucopia.owasp.org/edition/eop. Specifically, we need security minds to help players better answer:

- What can go wrong?
- What are we going to do about it?

#games #threatmodeling

OWASP Cornucopia - The card de...

OWASP Cornucopia just released v3.4.6 (github.com/OWASP/cornuc...)
A Special thanks to Khushal Malhotra, Prajakta G. kamble, Ayman Algamal, Abhijit Sahoo and Adarsh Kumar for all the bug fixes. Cornucopia is now more secure and stable than ever!

#games #threatmodeling #cornucopia #appsec #security

Release v3.4.6 · OWASP/cornuco...

OWASP Cornucopia just released v3.4.6 (github.com/OWASP/cornuc...)
A Special thanks to Khushal Malhotra, Prajakta G. kamble, Ayman Algamal, Abhijit Sahoo and Adarsh Kumar for all the bug fixes. Cornucopia is now more secure and stable than ever!

#games #threatmodeling #cornucopia #appsec #security

Release v3.4.6 · OWASP/cornuco...

#threatmodeling instant classic from @adamshostack
https://shostack.org/books/threat-modeling-book-2nd-edition

Security begins with knowing the threats.

#threatmodeling instant classic from @adamshostack
https://shostack.org/books/threat-modeling-book-2nd-edition

Security begins with knowing the threats.

#threatmodeling instant classic from @adamshostack
https://shostack.org/books/threat-modeling-book-2nd-edition

Security begins with knowing the threats.

#threatmodeling instant classic from @adamshostack
https://shostack.org/books/threat-modeling-book-2nd-edition

Security begins with knowing the threats.

#threatmodeling instant classic from @adamshostack
https://shostack.org/books/threat-modeling-book-2nd-edition

Security begins with knowing the threats.

TechBash 2026 Workshop Spotlight | Threat Modeling with AI

https://vlqh-zgpm.campaign-view.com/ua/SharedView?od=3z5b1449310f71294fafc3d35955582e56a7fc9cec01fb440bc3cc8ba398aa18db&cno=11a2b0b1da402ee&cd=1e7349b985b5090a&m=0

#devconference #security #ai #threatmodeling #workshop #developers #poconos #kalahari

TechBash 2026 Workshop Spotlight | Threat Modeling with AI

https://vlqh-zgpm.campaign-view.com/ua/SharedView?od=3z5b1449310f71294fafc3d35955582e56a7fc9cec01fb440bc3cc8ba398aa18db&cno=11a2b0b1da402ee&cd=1e7349b985b5090a&m=0

#devconference #security #ai #threatmodeling #workshop #developers #poconos #kalahari

TechBash 2026 Workshop Spotlight | Threat Modeling with AI

https://vlqh-zgpm.campaign-view.com/ua/SharedView?od=3z5b1449310f71294fafc3d35955582e56a7fc9cec01fb440bc3cc8ba398aa18db&cno=11a2b0b1da402ee&cd=1e7349b985b5090a&m=0

#devconference #security #ai #threatmodeling #workshop #developers #poconos #kalahari

TechBash 2026 Workshop Spotlight | Threat Modeling with AI

https://vlqh-zgpm.campaign-view.com/ua/SharedView?od=3z5b1449310f71294fafc3d35955582e56a7fc9cec01fb440bc3cc8ba398aa18db&cno=11a2b0b1da402ee&cd=1e7349b985b5090a&m=0

#devconference #security #ai #threatmodeling #workshop #developers #poconos #kalahari

TechBash 2026 Workshop Spotlight | Threat Modeling with AI

https://vlqh-zgpm.campaign-view.com/ua/SharedView?od=3z5b1449310f71294fafc3d35955582e56a7fc9cec01fb440bc3cc8ba398aa18db&cno=11a2b0b1da402ee&cd=1e7349b985b5090a&m=0

#devconference #security #ai #threatmodeling #workshop #developers #poconos #kalahari

TechBash 2026 Workshop Spotlight - Threat Modeling with AI | Robert Hurlbut

https://zc.vg/cqwuZ?m=0

#security #ai #threatmodeling #workshop #developers #devconference #kalahari #poconos #nepa

TechBash 2026 Workshop Spotlight - Threat Modeling with AI | Robert Hurlbut

https://zc.vg/cqwuZ?m=0

#security #ai #threatmodeling #workshop #developers #devconference #kalahari #poconos #nepa

TechBash 2026 Workshop Spotlight - Threat Modeling with AI | Robert Hurlbut

https://zc.vg/cqwuZ?m=0

#security #ai #threatmodeling #workshop #developers #devconference #kalahari #poconos #nepa

TechBash 2026 Workshop Spotlight - Threat Modeling with AI | Robert Hurlbut

https://zc.vg/cqwuZ?m=0

#security #ai #threatmodeling #workshop #developers #devconference #kalahari #poconos #nepa

TechBash 2026 Workshop Spotlight - Threat Modeling with AI | Robert Hurlbut

https://zc.vg/cqwuZ?m=0

#security #ai #threatmodeling #workshop #developers #devconference #kalahari #poconos #nepa

The issue I have with AI threat modeling tools is that you mainly use them alone. Nobody else then you will see these beautiful models and learn about the threats unless you present them to someone. When you do, they will mostly forget them the moment you leave the room.

#security #threatmodeling

The issue I have with AI threat modeling tools is that you mainly use them alone. Nobody else then you will see these beautiful models and learn about the threats unless you present them to someone. When you do, they will mostly forget them the moment you leave the room.

#security #threatmodeling

New by me: CybersecKyle Security How-To Series: Blue Team Fundamentals, Part 4 - Threat Modeling a Small Target

https://www.kylereddoch.me/blog/cyberseckyle-security-how-to-series-blue-team-fundamentals-part-4-threat-modeling-a-small-target/

#Cybersecurity #InfoSec #ThreatModeling #AppSec #CybersecKyleHowTo

New by me: CybersecKyle Security How-To Series: Blue Team Fundamentals, Part 4 - Threat Modeling a Small Target

https://www.kylereddoch.me/blog/cyberseckyle-security-how-to-series-blue-team-fundamentals-part-4-threat-modeling-a-small-target/

#Cybersecurity #InfoSec #ThreatModeling #AppSec #CybersecKyleHowTo

New by me: CybersecKyle Security How-To Series: Blue Team Fundamentals, Part 4 - Threat Modeling a Small Target

https://www.kylereddoch.me/blog/cyberseckyle-security-how-to-series-blue-team-fundamentals-part-4-threat-modeling-a-small-target/

#Cybersecurity #InfoSec #ThreatModeling #AppSec #CybersecKyleHowTo

New by me: CybersecKyle Security How-To Series: Blue Team Fundamentals, Part 4 - Threat Modeling a Small Target

https://www.kylereddoch.me/blog/cyberseckyle-security-how-to-series-blue-team-fundamentals-part-4-threat-modeling-a-small-target/

#Cybersecurity #InfoSec #ThreatModeling #AppSec #CybersecKyleHowTo

New by me: CybersecKyle Security How-To Series: Blue Team Fundamentals, Part 4 - Threat Modeling a Small Target

https://www.kylereddoch.me/blog/cyberseckyle-security-how-to-series-blue-team-fundamentals-part-4-threat-modeling-a-small-target/

#Cybersecurity #InfoSec #ThreatModeling #AppSec #CybersecKyleHowTo

OWASP Cornucopia just released v3.4.5

A Special thanks to Prajakta G Kamble, Adarsh Kumar and Khushal Malhotra for all the bug fixes. Cornucpia is now more secure and stable than ever!

Did you know that OWASP Cornucopia v3 now comes with EoP and PHANTOM-B?

#ai #games #security #threatmodeling

OWASP Cornucopia v3 with EoP a...

OWASP Cornucopia just released v3.4.5

A Special thanks to Prajakta G Kamble, Adarsh Kumar and Khushal Malhotra for all the bug fixes. Cornucpia is now more secure and stable than ever!

Did you know that OWASP Cornucopia v3 now comes with EoP and PHANTOM-B?

#ai #games #security #threatmodeling

OWASP Cornucopia v3 with EoP a...

OWASP Cornucopia just released v3.4.5

A Special thanks to Prajakta G Kamble, Adarsh Kumar and Khushal Malhotra for all the bug fixes. Cornucpia is now more secure and stable than ever!

Did you know that OWASP Cornucopia v3 now comes with EoP and PHANTOM-B?

#ai #games #security #threatmodeling

OWASP Cornucopia v3 with EoP a...

OWASP Cornucopia just released v3.4.5

A Special thanks to Prajakta G Kamble, Adarsh Kumar and Khushal Malhotra for all the bug fixes. Cornucpia is now more secure and stable than ever!

Did you know that OWASP Cornucopia v3 now comes with EoP and PHANTOM-B?

#ai #games #security #threatmodeling

OWASP Cornucopia v3 with EoP a...

OWASP Cornucopia just released v3.4.5

A Special thanks to Prajakta G Kamble, Adarsh Kumar and Khushal Malhotra for all the bug fixes. Cornucpia is now more secure and stable than ever!

Did you know that OWASP Cornucopia v3 now comes with EoP and PHANTOM-B?

#ai #games #security #threatmodeling

OWASP Cornucopia v3 with EoP a...

ENISA Secure by Design and Default Playbook got published. www.enisa.europa.eu/sites/defaul...

It’s a practical guide to secure by design and default principles for SMEs.

I am happy to share that I am one of its contributors.
 
#threatmodeling #securebydesign #enisa #security

enisa.europa.eu/sites/default/...

ENISA Secure by Design and Default Playbook got published. www.enisa.europa.eu/sites/defaul...

It’s a practical guide to secure by design and default principles for SMEs.

I am happy to share that I am one of its contributors.
 
#threatmodeling #securebydesign #enisa #security

enisa.europa.eu/sites/default/...

The next one in the #peoplebehindosco series is Felix.

Hi @Gronner 👋

Felix is a software engineer with more than 10 years experience in the automotive and medical industry. Working at XITASO he focuses on building secure and safe systems. Besides that he provides trainings on security, safety, software architecture and Rust. To learn in and with a community he organises the SWEC and is a member of the iSAQB. He loves learning by exploring: building small embedded system or tools, mostly in Rust. In his spare time he enjoys playing pen & paper games, miniature figure painting and playing the drums.

His Tags: #AppSec, #Embedded, #Rust, #ThreatModeling

Thank you very much for your work as a volunteer and your support in organizing the Open Security conference. Stay tuned and follow the hashtag #peoplebehindosco for more people behind osco.

The next one in the #peoplebehindosco series is Felix.

Hi @Gronner 👋

Felix is a software engineer with more than 10 years experience in the automotive and medical industry. Working at XITASO he focuses on building secure and safe systems. Besides that he provides trainings on security, safety, software architecture and Rust. To learn in and with a community he organises the SWEC and is a member of the iSAQB. He loves learning by exploring: building small embedded system or tools, mostly in Rust. In his spare time he enjoys playing pen & paper games, miniature figure painting and playing the drums.

His Tags: #AppSec, #Embedded, #Rust, #ThreatModeling

Thank you very much for your work as a volunteer and your support in organizing the Open Security conference. Stay tuned and follow the hashtag #peoplebehindosco for more people behind osco.

The next one in the #peoplebehindosco series is Felix.

Hi @Gronner 👋

Felix is a software engineer with more than 10 years experience in the automotive and medical industry. Working at XITASO he focuses on building secure and safe systems. Besides that he provides trainings on security, safety, software architecture and Rust. To learn in and with a community he organises the SWEC and is a member of the iSAQB. He loves learning by exploring: building small embedded system or tools, mostly in Rust. In his spare time he enjoys playing pen & paper games, miniature figure painting and playing the drums.

His Tags: #AppSec, #Embedded, #Rust, #ThreatModeling

Thank you very much for your work as a volunteer and your support in organizing the Open Security conference. Stay tuned and follow the hashtag #peoplebehindosco for more people behind osco.

The next one in the #peoplebehindosco series is Felix.

Hi @Gronner 👋

Felix is a software engineer with more than 10 years experience in the automotive and medical industry. Working at XITASO he focuses on building secure and safe systems. Besides that he provides trainings on security, safety, software architecture and Rust. To learn in and with a community he organises the SWEC and is a member of the iSAQB. He loves learning by exploring: building small embedded system or tools, mostly in Rust. In his spare time he enjoys playing pen & paper games, miniature figure painting and playing the drums.

His Tags: #AppSec, #Embedded, #Rust, #ThreatModeling

Thank you very much for your work as a volunteer and your support in organizing the Open Security conference. Stay tuned and follow the hashtag #peoplebehindosco for more people behind osco.

The next one in the #peoplebehindosco series is Felix.

Hi @Gronner 👋

Felix is a software engineer with more than 10 years experience in the automotive and medical industry. Working at XITASO he focuses on building secure and safe systems. Besides that he provides trainings on security, safety, software architecture and Rust. To learn in and with a community he organises the SWEC and is a member of the iSAQB. He loves learning by exploring: building small embedded system or tools, mostly in Rust. In his spare time he enjoys playing pen & paper games, miniature figure painting and playing the drums.

His Tags: #AppSec, #Embedded, #Rust, #ThreatModeling

Thank you very much for your work as a volunteer and your support in organizing the Open Security conference. Stay tuned and follow the hashtag #peoplebehindosco for more people behind osco.

Most AI security audits miss 70% of the attack surface. Training data, prompt pipelines, model weights, and agentic tool calls are #AI's real battleground. Free open-source #threatmodeling toolkit for engineers and architects:
https://github.com/hwyler/ai-threat-modeling-toolkit

https://hernanhuwyler.wordpress.com/2026/07/30/a-practical-guide-for-engineers-architects-and-governance-teams-who-need-to-get-it-right/?utm_source=mastodon&utm_medium=jetpack_social

Most AI security audits miss 70% of the attack surface. Training data, prompt pipelines, model weights, and agentic tool calls are #AI's real battleground. Free open-source #threatmodeling toolkit for engineers and architects:
https://github.com/hwyler/ai-threat-modeling-toolkit

https://hernanhuwyler.wordpress.com/2026/07/30/a-practical-guide-for-engineers-architects-and-governance-teams-who-need-to-get-it-right/?utm_source=mastodon&utm_medium=jetpack_social

Most AI security audits miss 70% of the attack surface. Training data, prompt pipelines, model weights, and agentic tool calls are #AI's real battleground. Free open-source #threatmodeling toolkit for engineers and architects:
https://github.com/hwyler/ai-threat-modeling-toolkit

https://hernanhuwyler.wordpress.com/2026/07/30/a-practical-guide-for-engineers-architects-and-governance-teams-who-need-to-get-it-right/?utm_source=mastodon&utm_medium=jetpack_social

Most AI security audits miss 70% of the attack surface. Training data, prompt pipelines, model weights, and agentic tool calls are #AI's real battleground. Free open-source #threatmodeling toolkit for engineers and architects:
https://github.com/hwyler/ai-threat-modeling-toolkit

https://hernanhuwyler.wordpress.com/2026/07/30/a-practical-guide-for-engineers-architects-and-governance-teams-who-need-to-get-it-right/?utm_source=mastodon&utm_medium=jetpack_social

Most AI security audits miss 70% of the attack surface. Training data, prompt pipelines, model weights, and agentic tool calls are #AI's real battleground. Free open-source #threatmodeling toolkit for engineers and architects:
https://github.com/hwyler/ai-threat-modeling-toolkit

https://hernanhuwyler.wordpress.com/2026/07/30/a-practical-guide-for-engineers-architects-and-governance-teams-who-need-to-get-it-right/?utm_source=mastodon&utm_medium=jetpack_social

OWASP v3: With EoP and PHANTOM-B

We’re thrilled to bring you v3.4 with an update that expands how we identify threats, whether you're mapping out traditional applications or diving into AI architectures.

Read more: dev.to/owasp/owasp-...

#ai #games #security #appsec #threatmodeling #cornucopia

OWASP Cornucopia v3.4: With Eo...

OWASP v3: With EoP and PHANTOM-B

We’re thrilled to bring you v3.4 with an update that expands how we identify threats, whether you're mapping out traditional applications or diving into AI architectures.

Read more: dev.to/owasp/owasp-...

#ai #games #security #appsec #threatmodeling #cornucopia

OWASP Cornucopia v3.4: With Eo...

OWASP v3: With EoP and PHANTOM-B

We’re thrilled to bring you v3.4 with an update that expands how we identify threats, whether you're mapping out traditional applications or diving into AI architectures.

Read more: dev.to/owasp/owasp-...

#ai #games #security #appsec #threatmodeling #cornucopia

OWASP Cornucopia v3.4: With Eo...

OWASP v3: With EoP and PHANTOM-B

We’re thrilled to bring you v3.4 with an update that expands how we identify threats, whether you're mapping out traditional applications or diving into AI architectures.

Read more: dev.to/owasp/owasp-...

#ai #games #security #appsec #threatmodeling #cornucopia

OWASP Cornucopia v3.4: With Eo...

OWASP v3: With EoP and PHANTOM-B

We’re thrilled to bring you v3.4 with an update that expands how we identify threats, whether you're mapping out traditional applications or diving into AI architectures.

Read more: dev.to/owasp/owasp-...

#ai #games #security #appsec #threatmodeling #cornucopia

OWASP Cornucopia v3.4: With Eo...

"Criminals will rent a quantum computer to break encryption." Most repeated claim in quantum security. But it's not going to work quite like that.

CRQCs will be export-controlled, auth-gated, compliance-monitored. Cloud quantum access won't be on a credit card. The rental threat model assumes a market no government will permit.

https://postquantum.com/post-quantum/criminals-rent-quantum-crqc/

#threatmodeling #CRQC #infosec #PQC

"Criminals will rent a quantum computer to break encryption." Most repeated claim in quantum security. But it's not going to work quite like that.

CRQCs will be export-controlled, auth-gated, compliance-monitored. Cloud quantum access won't be on a credit card. The rental threat model assumes a market no government will permit.

https://postquantum.com/post-quantum/criminals-rent-quantum-crqc/

#threatmodeling #CRQC #infosec #PQC

"Criminals will rent a quantum computer to break encryption." Most repeated claim in quantum security. But it's not going to work quite like that.

CRQCs will be export-controlled, auth-gated, compliance-monitored. Cloud quantum access won't be on a credit card. The rental threat model assumes a market no government will permit.

https://postquantum.com/post-quantum/criminals-rent-quantum-crqc/

#threatmodeling #CRQC #infosec #PQC

"Criminals will rent a quantum computer to break encryption." Most repeated claim in quantum security. But it's not going to work quite like that.

CRQCs will be export-controlled, auth-gated, compliance-monitored. Cloud quantum access won't be on a credit card. The rental threat model assumes a market no government will permit.

https://postquantum.com/post-quantum/criminals-rent-quantum-crqc/

#threatmodeling #CRQC #infosec #PQC