InfoQ

GitHub CodeQL Code Scanning Now Supports Setting Threat Model GitHub CodeQL Code Scanning Now Supports Setting Threat Model

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...
Security Boulevard

From Shadow APIs to Shadow AI: How the API Threat Model Is Expanding Faster Than Most Defenses

The shadow technology problem is getting worse.  Over the past few years, organizations have scaled microservices, ...
Dark Reading

Attacker Specialization Puts Threat Modeling on Defensive

The cybercriminal underground has increasingly shifted to an ecosystem of ultraspecialization, which has put threat analysts behind the eight ball. Current approaches to threat modeling and analysis ...

Threat actors are using 'distillation' to clone AI models, and this is how it works

Threat actors have been spotted using complex techniques to figure out how mature large language models work, and using the ...
Forbes

Application Threat Modeling Myths Debunked

Application threat modeling has gotten a bad rap over the years. Security leaders looking to implement application threat modeling with their product teams must contend with stakeholders who see it as ...
Dark Reading

Threat Modeling in the Age of OpenAI's Chatbot

There's been a flood of news about OpenAI's new GPT-3 Chatbot. For all the very real critiques, it does an astounding and interesting job of producing reasonable responses. What does it mean for ...
Forbes

The Importance Of Hypotheses In Threat-Hunting Models

According to the Mandiant Security effectiveness report, 53% of attacks infiltrate unnoticed, and 91% don’t generate alerts. It is alarming that signals are only generated for 9% of attacks. This ...
TechCrunch

IriusRisk lands $29M to automate threat modeling for apps

IriusRisk, a threat modeling platform, today announced that it raised $29 million in a Series B funding round led by Paladin Capital Group with participation from BrightPixel Capital, SwanLab Venture ...
Semiconductor Engineering

Defining Chip Threat Models To Identify Security Risks

Experts At The Table: As hardware weaknesses have become a major target for attackers, the race to find new ways to strengthen chip security has begun to heat up. But one-size does not fit all ...
Security

MITRE releases EMB3D, a cybersecurity threat model for embedded devices

After the model garnered significant interest for peer review across diverse industries, numerous organizations piloted the threat model, offering invaluable feedback. The EMB3D team appreciates the ...
Security

How to put threat modeling into practice: A guide for business leaders

Recognizing the value of threat modeling, a process that helps identify potential risks and threats to a business's applications, systems and other resources, is easy enough. By providing ...
CSOonline

IriusRisk launches Open Threat Model standard to secure software development lifecycle

The OTM standard, published under a Creative Commons license, aims to generate greater connectivity and interoperability between threat modeling and the software development lifecycle. IriusRisk has ...