InfoQ

GitHub CodeQL Code Scanning Now Supports Setting Threat Model GitHub CodeQL Code Scanning Now Supports Setting Threat Model

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...
Security Boulevard

From Shadow APIs to Shadow AI: How the API Threat Model Is Expanding Faster Than Most Defenses

The shadow technology problem is getting worse.  Over the past few years, organizations have scaled microservices, ...

Threat actors are using 'distillation' to clone AI models, and this is how it works

Threat actors have been spotted using complex techniques to figure out how mature large language models work, and using the ...
Dark Reading

Attacker Specialization Puts Threat Modeling on Defensive

The cybercriminal underground has increasingly shifted to an ecosystem of ultraspecialization, which has put threat analysts behind the eight ball. Current approaches to threat modeling and analysis ...
Forbes

Application Threat Modeling Myths Debunked

Application threat modeling has gotten a bad rap over the years. Security leaders looking to implement application threat modeling with their product teams must contend with stakeholders who see it as ...
Dark Reading

Threat Modeling in the Age of OpenAI's Chatbot

There's been a flood of news about OpenAI's new GPT-3 Chatbot. For all the very real critiques, it does an astounding and interesting job of producing reasonable responses. What does it mean for ...
TechCrunch

IriusRisk lands $29M to automate threat modeling for apps

IriusRisk, a threat modeling platform, today announced that it raised $29 million in a Series B funding round led by Paladin Capital Group with participation from BrightPixel Capital, SwanLab Venture ...
Semiconductor Engineering

Defining Chip Threat Models To Identify Security Risks

Experts At The Table: As hardware weaknesses have become a major target for attackers, the race to find new ways to strengthen chip security has begun to heat up. But one-size does not fit all ...
CSOonline

IriusRisk launches Open Threat Model standard to secure software development lifecycle

The OTM standard, published under a Creative Commons license, aims to generate greater connectivity and interoperability between threat modeling and the software development lifecycle. IriusRisk has ...
Security

How to put threat modeling into practice: A guide for business leaders

Recognizing the value of threat modeling, a process that helps identify potential risks and threats to a business's applications, systems and other resources, is easy enough. By providing ...
TechCrunch

A startup’s guide to cyberthreats — threat modeling and proactive security

In today’s interconnected world, cyberthreats are everywhere, and they’re always changing. Startups can’t afford to ignore the importance of securing their digital infrastructure. Waiting until a ...