Adam Shostack·Aug 10, 202125 Years In AppSec: Looking BackTwenty-five years ago I published a set of code review guidelines that I had crafted while working for a bank. I released them (thanks…
Adam Shostack·Jun 9, 2021Ransomware is not the problemThere’s an infinite number of studies of ransomware lately, all breathlessly talking about how to fight this dangerous threat. They’re all…A response icon1A response icon1
Adam Shostack·Jun 1, 2021Recording LecturesPeople sometimes ask me about my recording setup, and I wanted to share some thoughts about recording good learning content. The most…
Adam Shostack·May 26, 2021Practical Cybersecurity ArchitectureThere’s an insightful comment, “Everybody has a testing environment. Some people are lucky enough enough to have a totally separate…
Adam Shostack·Feb 18, 2021nack My Year Without FlyingIt was just over a year ago that I last walked out of the Seattle airport. Before the pandemic, I was a very frequent flyer. As the…
Adam Shostack·Feb 15, 2021“Better OKRs Through Threat Modeling”Abhay Bhargav has a really excellent post on Better OKRs for Security through Effective Threat Modeling. I really like how he doesn’t…
Adam Shostack·Dec 28, 2020VaccinesYou may have noticed that my end of the year posts are all science focused. Today, a set of resources on the COVID vaccines.
Adam Shostack·Dec 24, 2020Dinosaur FeathersScientists have discovered a chunk of amber with a dinosaur tail in it. (Poor dinosaur!) National Geographic has the story, which is not…
Adam Shostack·Dec 16, 2020The Asset TrapAs we look at what’s happened with the Russian attack on the US government and others via Solarwinds, I want to shine a spotlight on a…
Adam Shostack·Dec 9, 2020Fireeye Hack and CultureFireeye’s announcement of their discovery of a breach is all over the news. The Reuters article quotes a ‘Western security official’ as…