InfoQ

GitHub CodeQL Code Scanning Now Supports Setting Threat Model GitHub CodeQL Code Scanning Now Supports Setting Threat Model

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

Threat-modelling onboarding: where fraud starts before the first transaction

Fraud starts earlier than most teams model. Many fraud programs still centre transaction monitoring, but attackers can gain a meaningful advantage earlier, at account creation and ...
Dark Reading

Attacker Specialization Puts Threat Modeling on Defensive

The cybercriminal underground has increasingly shifted to an ecosystem of ultraspecialization, which has put threat analysts behind the eight ball. Current approaches to threat modeling and analysis ...
Forbes

Application Threat Modeling Myths Debunked

Application threat modeling has gotten a bad rap over the years. Security leaders looking to implement application threat modeling with their product teams must contend with stakeholders who see it as ...
Dark Reading

Threat Modeling in the Age of OpenAI's Chatbot

There's been a flood of news about OpenAI's new GPT-3 Chatbot. For all the very real critiques, it does an astounding and interesting job of producing reasonable responses. What does it mean for ...
Forbes

The Importance Of Hypotheses In Threat-Hunting Models

According to the Mandiant Security effectiveness report, 53% of attacks infiltrate unnoticed, and 91% don’t generate alerts. It is alarming that signals are only generated for 9% of attacks. This ...
Security

MITRE releases EMB3D, a cybersecurity threat model for embedded devices

After the model garnered significant interest for peer review across diverse industries, numerous organizations piloted the threat model, offering invaluable feedback. The EMB3D team appreciates the ...
TechCrunch

IriusRisk lands $29M to automate threat modeling for apps

IriusRisk, a threat modeling platform, today announced that it raised $29 million in a Series B funding round led by Paladin Capital Group with participation from BrightPixel Capital, SwanLab Venture ...
SiliconANGLE

ThreatModeler acquires competing threat modeling startup IriusRisk

ThreatModeler Software Inc., a provider of cybersecurity posture analysis software, today disclosed that it has acquired a Spain-based rival called IriusRisk SL. The terms of the deal were not ...
Semiconductor Engineering

Defining Chip Threat Models To Identify Security Risks

Experts At The Table: As hardware weaknesses have become a major target for attackers, the race to find new ways to strengthen chip security has begun to heat up. But one-size does not fit all ...
Security

How to put threat modeling into practice: A guide for business leaders

Recognizing the value of threat modeling, a process that helps identify potential risks and threats to a business's applications, systems and other resources, is easy enough. By providing ...
CSOonline

IriusRisk launches Open Threat Model standard to secure software development lifecycle

The OTM standard, published under a Creative Commons license, aims to generate greater connectivity and interoperability between threat modeling and the software development lifecycle. IriusRisk has ...