Skip to main content

Shostack + Friends Blog

Posts in category “The New School”

A Board meeting

SEC Cybersecurity Rules

The SEC has important new cybersecurity rules (01 Aug 2023)

Learning from Near Misses

[no description provided] (04 Dec 2017)

Our Favorite Content

General threat modeling posts

The Security Principles of Saltzer and Schroeder, illustrated with Star Wars

Other Star Wars blog posts

Modeling attackers and their motives

Doing science with near misses

Posts about Adam’s “Threats” book

Posts about Adam’s “Threat Modeling” book

Posts about “The New School of Information Security” book

About this blog

Popular Blog Topics

Threat Model Thursday,
exploring specific published threat models

Threat Modeling (general topic)

Application Security

Software Engineering

Privacy + Personal Security

Research + Reports

Podcasts, Videos + Webinars

Subscribe (RSS/Mail)

RSS/ATOM: The RSS feed is here. We recommend RSS as the best way to follow this blog, and think generally RSS is the best way to take control of the information you take in. You can read our thinking here.

Email: If you’d like a lower volume set of updates on what Adam is doing, Adam’s New Thing gets only a few messages a year, guaranteed. We include a subset of posts in each.

Recent posts

Andor Threats: Information Disclosure

03 May 2025

What Andor can teach us about Information disclosure threats

The Empire’s Threat Modeling

02 May 2025

Get one fourth off for May the fourth!

Appsec Roundup - April 2025

27 Apr 2025

Threat modeling. So much threat modeling, and so much more, including foreshadowing of new rules from FDA.

Threat Informed Defense Series

25 Apr 2025

A great, in depth series on threat modeling with ATTACK

Our site works best with Javascript enabled, however we have done our best to minimize any negative impacts to your experience without it.

	
		OSZAR »