Brett Crawley October 19, 2026 Threat Modeling

AI Assisted Threat Modeling

The Threat Model Was Never the Point: What AI Threat Modeling Does and Doesn’t Do

Continue reading

The Threat Model Was Never the Point: What AI Threat Modelling Does and Doesn't Do

Brett Crawley October 1, 2026 Security Culture

Line drawing of a wine glass filled with pale vinegar, with a price tag reading $249B hanging from the stem, beside the title "The Wine Has Turned to Vinegar".

The Wine Has Turned to Vinegar

Brett Crawley August 20, 2026 src2sink

src2sink: The Ground Truth Your LLM SAST Is Missing

src2sink

Brett Crawley August 5, 2026 scarno

scarno:Cut the dead wood before it catches fire

scarno

Brett Crawley April 28, 2026 AI Security

Threat Modeling AI Systems: A Complete Playbook for Practitioners

Recently Published

Games with Purpose

51 Card and Board Games for Security, Privacy...

A hedgehog's front foot poking out from under the hay inside its house.

A Night in the Life of Our Hedgehog (Caught on Wildlife Cam)

This is what some of you have been...

One Key to Rule Them All

Why a Single KMS Key on a Multi-Tenant...

CRA, NIS2 and DORA for Engineers

CRA, NIS2 and DORA for Engineers: You Can’t...

How a Hedgehog Got Its Own House

The Case of the Toppled Plant Pot and...

Your Tools See Repositories. Attackers See an Estate.

Catasto

Your Tools See Repositories. Attackers See an Estate....

SLSA and Provenance: Your SBOM Says What's Inside, This Says Where It Came From

The Blast Radius runs on one conviction: prefer...

Threat Modeling MCP

Threat Modeling MCP

Threat Modeling the Model Context Protocol: Your Agent...

Data Protection and Data Privacy Part 2 of 2

Data Protection and Data Privacy - Part 2 of 2

From Principle to Practice: Privacy in the Real...

Untangling the Confusion

Data Protection and Data Privacy - Part 1 of 2

Untangling the Confusion People often confuse these two...

PQC Part 2: The Plan, the Order, and the Bill

Get PQC Ready PDQ - Part 2

The Plan, the Order, and the Bill In...

Get PQC Ready PDQ - Part 1

Quantum, AI, and the Window That’s Already Closing...

Sparse or Dense? Claude Mythos, Dan Geer, and Where We Should Actually Be Spending Our Effort

Last week, Anthropic announced Claude Mythos Preview and...

Software Engineering Has Regressed 50+ Years Since AI

Bear with me on this train of thought....

Dependency Pruning and Tree Shaking

Cutting the Dead Wood from Your Dependency Graph...

Threat Modeling Your Dependencies - Part 2

Mitigating Third-Party Component Risk: Swapping the Cancer for...

See more articles