securitymadesimple.org/cyber… Among the 7 most popular Threat Modeling methods, PASTA purpose is to provide a process for simulating attacks on applications, analyze the threats that originate from the simulations and then mitigate the risk that those attacks present.

insights.sei.cmu.edu/blog/th… Among the 12, The Process for Attack Simulation and Threat Analysis (PASTA) is a risk-centric threat-modeling framework developed in 2012. It contains seven stages, each with multiple activities..

Part#1 on my interview on threat modeling being published today, thanks to Sebastien Deleersnyder for hosting the interview in the Toreon newsletter #interview #threatmodeling #riskmanagment #applicationsecurity #secdevops toreon.com/tmi-newsletter-17…

0 trust network is assumed to be hostile with external and internal threats where locality is not sufficient for deciding trust and each device, user, and network flow is authenticated and authorised and policies are dynamic and calculated from as many sources of data as possible

What is Zero Trust? A model for more effective security csoonline.com/article/324784… or pitch jargon for selling security products?

Interesting talk by at #securityinsight on chaos engineering principles that can be used to design resilient distributed systems by observing emerging non-secure functionalities and configurations through testing and experimentations principlesofchaos.org

Do not go gentle into that good night; Old age should burn and rave at close of day. Rage, rage against the dying of the light.

Survey: How many of you followers use RASP as stand alone application security wrapper tool (for protection and detection of web attacks) vs integrated as agent with SAST in a IAST tool to find vulnerabilities with reduced number of false positives ?

Your Tesla is probably vulnerable to hackers, but there's an easy fix .. the PIN :) mashable.com/article/tesla-m… via @mashable

#gdpr test

Saw the same this morning 5.30 AM EST xitter.cf/Advil/status/101814420…

More than $60K raised! xitter.cf/shop_argyle/status/101…

Expert Cybersecurity Talk Series At The SecureSet Academy Tampa linkedin.com/pulse/secureset…

I will be speaking on "introduction to risk centric threat modelling" will be as guest speaker of @SecureSetHQ this week's #ExpertSeries #event in #tampa #CyberSec

Maybe merchants would be better to keep old card stripe backups at the counters to not risk loosing revenues because of future #visa payments processing outages xitter.cf/declanmaxwell/status/1…