Security problems rarely begin as such. This #PyTexas talk introduces #ThreatModeling as a lightweight habit for #Python teams to focus on patterns that help essential stakeholders reason together.
Join us Nov 3 @ 8p CST to learn more!
pytexas.org/meetup
Join us Nov 3 @ 8p CST to learn more!
pytexas.org/meetup
November 3, 2026 at 4:31 PM
Security problems rarely begin as such. This #PyTexas talk introduces #ThreatModeling as a lightweight habit for #Python teams to focus on patterns that help essential stakeholders reason together.
Join us Nov 3 @ 8p CST to learn more!
pytexas.org/meetup
Join us Nov 3 @ 8p CST to learn more!
pytexas.org/meetup
[THREAT] Identified threat: LLM was fine-tuned on a dataset that included production access tokens
[RESPONSE] Dev/management: Realistically, who would actually exploit this?
#threatmodeling #infosec
[RESPONSE] Dev/management: Realistically, who would actually exploit this?
#threatmodeling #infosec
November 3, 2026 at 2:00 PM
[THREAT] Identified threat: LLM was fine-tuned on a dataset that included production access tokens
[RESPONSE] Dev/management: Realistically, who would actually exploit this?
#threatmodeling #infosec
[RESPONSE] Dev/management: Realistically, who would actually exploit this?
#threatmodeling #infosec
[THREAT] Identified threat: Sequential invoice IDs let any logged-in user view any other tenant's invoice
[RESPONSE] Dev/management: Validation happens in the browser before submit.
#threatmodeling #infosec
[RESPONSE] Dev/management: Validation happens in the browser before submit.
#threatmodeling #infosec
November 4, 2026 at 2:00 PM
[THREAT] Identified threat: Sequential invoice IDs let any logged-in user view any other tenant's invoice
[RESPONSE] Dev/management: Validation happens in the browser before submit.
#threatmodeling #infosec
[RESPONSE] Dev/management: Validation happens in the browser before submit.
#threatmodeling #infosec
[THREAT] Identified threat: Former engineers retain VPN, GitHub, and AWS access months after leaving
[RESPONSE] Dev/management: Cyber insurance covers it. Moving on.
#threatmodeling #infosec
[RESPONSE] Dev/management: Cyber insurance covers it. Moving on.
#threatmodeling #infosec
November 2, 2026 at 2:00 PM
[THREAT] Identified threat: Former engineers retain VPN, GitHub, and AWS access months after leaving
[RESPONSE] Dev/management: Cyber insurance covers it. Moving on.
#threatmodeling #infosec
[RESPONSE] Dev/management: Cyber insurance covers it. Moving on.
#threatmodeling #infosec
[THREAT] Identified threat: 'Encryption' layer XORs the payload with a hardcoded byte string
[RESPONSE] Dev/management: MVP. We'll harden it once we have product-market fit.
#threatmodeling #infosec
[RESPONSE] Dev/management: MVP. We'll harden it once we have product-market fit.
#threatmodeling #infosec
October 30, 2026 at 2:00 PM
[THREAT] Identified threat: 'Encryption' layer XORs the payload with a hardcoded byte string
[RESPONSE] Dev/management: MVP. We'll harden it once we have product-market fit.
#threatmodeling #infosec
[RESPONSE] Dev/management: MVP. We'll harden it once we have product-market fit.
#threatmodeling #infosec
[THREAT] Identified threat: Production Windows host has RDP open to the world on 3389
[RESPONSE] Dev/management: Traffic is low enough that no one will notice.
#threatmodeling #infosec
[RESPONSE] Dev/management: Traffic is low enough that no one will notice.
#threatmodeling #infosec
November 1, 2026 at 2:00 PM
[THREAT] Identified threat: Production Windows host has RDP open to the world on 3389
[RESPONSE] Dev/management: Traffic is low enough that no one will notice.
#threatmodeling #infosec
[RESPONSE] Dev/management: Traffic is low enough that no one will notice.
#threatmodeling #infosec
Security problems rarely begin as such. This #PyTexas talk introduces #ThreatModeling as a lightweight habit for #Python teams building AI, data, & cloud systems, focused on patterns that help essential teams reason together.
Join us Nov 3 @ 8p CST to learn more!
pytexas.org/meetup
Join us Nov 3 @ 8p CST to learn more!
pytexas.org/meetup
October 30, 2026 at 9:03 PM
Security problems rarely begin as such. This #PyTexas talk introduces #ThreatModeling as a lightweight habit for #Python teams building AI, data, & cloud systems, focused on patterns that help essential teams reason together.
Join us Nov 3 @ 8p CST to learn more!
pytexas.org/meetup
Join us Nov 3 @ 8p CST to learn more!
pytexas.org/meetup
[THREAT] Identified threat: Multifunction printer stores scanned documents on an open SMB share
[RESPONSE] Dev/management: This app isn't important enough to bother with.
#threatmodeling #infosec
[RESPONSE] Dev/management: This app isn't important enough to bother with.
#threatmodeling #infosec
October 31, 2026 at 2:00 PM
[THREAT] Identified threat: Multifunction printer stores scanned documents on an open SMB share
[RESPONSE] Dev/management: This app isn't important enough to bother with.
#threatmodeling #infosec
[RESPONSE] Dev/management: This app isn't important enough to bother with.
#threatmodeling #infosec
[THREAT] Identified threat: Page-view events to the analytics vendor include URLs containing reset tokens
[RESPONSE] Dev/management: This feature has like four users.
#threatmodeling #infosec
[RESPONSE] Dev/management: This feature has like four users.
#threatmodeling #infosec
October 28, 2026 at 2:00 PM
[THREAT] Identified threat: Page-view events to the analytics vendor include URLs containing reset tokens
[RESPONSE] Dev/management: This feature has like four users.
#threatmodeling #infosec
[RESPONSE] Dev/management: This feature has like four users.
#threatmodeling #infosec
[THREAT] Identified threat: Per-row encryption was descoped; PII columns are plaintext at rest
[RESPONSE] Dev/management: Legacy system. We're sunsetting it next quarter.
#threatmodeling #infosec
[RESPONSE] Dev/management: Legacy system. We're sunsetting it next quarter.
#threatmodeling #infosec
October 29, 2026 at 2:00 PM
[THREAT] Identified threat: Per-row encryption was descoped; PII columns are plaintext at rest
[RESPONSE] Dev/management: Legacy system. We're sunsetting it next quarter.
#threatmodeling #infosec
[RESPONSE] Dev/management: Legacy system. We're sunsetting it next quarter.
#threatmodeling #infosec
🎥 https://twp.ai/9ObcVy
**You can't have privacy without security.**
#AppSec #Privacy #ThreatModeling #SoftwareSupplyChainSecurity
6/6
**You can't have privacy without security.**
#AppSec #Privacy #ThreatModeling #SoftwareSupplyChainSecurity
6/6
youtu.be
Crime Stoppers Breach: Who Protects Canadians' Privacy?
twp.ai
October 28, 2026 at 1:55 AM
🎥 https://twp.ai/9ObcVy
**You can't have privacy without security.**
#AppSec #Privacy #ThreatModeling #SoftwareSupplyChainSecurity
6/6
**You can't have privacy without security.**
#AppSec #Privacy #ThreatModeling #SoftwareSupplyChainSecurity
6/6
Introducing OWASP By Design!
A brand-new mini-con focused on Threat Modeling, Secure Design, and Privacy.
Expect presentations, fresh perspectives, and engaging discussions led by the OWASP Threat Modeling Project team.
owaspglobalappsecusa...
#OWASP #ThreatModeling #AppSec #PrivacyByDesign
A brand-new mini-con focused on Threat Modeling, Secure Design, and Privacy.
Expect presentations, fresh perspectives, and engaging discussions led by the OWASP Threat Modeling Project team.
owaspglobalappsecusa...
#OWASP #ThreatModeling #AppSec #PrivacyByDesign
October 25, 2026 at 2:11 PM
Introducing OWASP By Design!
A brand-new mini-con focused on Threat Modeling, Secure Design, and Privacy.
Expect presentations, fresh perspectives, and engaging discussions led by the OWASP Threat Modeling Project team.
owaspglobalappsecusa...
#OWASP #ThreatModeling #AppSec #PrivacyByDesign
A brand-new mini-con focused on Threat Modeling, Secure Design, and Privacy.
Expect presentations, fresh perspectives, and engaging discussions led by the OWASP Threat Modeling Project team.
owaspglobalappsecusa...
#OWASP #ThreatModeling #AppSec #PrivacyByDesign
[THREAT] Identified threat: Customer SSNs are encrypted with AES-ECB; the ciphertext leaks structure
[RESPONSE] Dev/management: Realistically, who would actually exploit this?
#threatmodeling #infosec
[RESPONSE] Dev/management: Realistically, who would actually exploit this?
#threatmodeling #infosec
October 27, 2026 at 2:00 PM
[THREAT] Identified threat: Customer SSNs are encrypted with AES-ECB; the ciphertext leaks structure
[RESPONSE] Dev/management: Realistically, who would actually exploit this?
#threatmodeling #infosec
[RESPONSE] Dev/management: Realistically, who would actually exploit this?
#threatmodeling #infosec
[THREAT] Identified threat: Every device ships with the same cloud-API key embedded in firmware
[RESPONSE] Dev/management: Budget is frozen. Can't allocate engineer time.
#threatmodeling #infosec
[RESPONSE] Dev/management: Budget is frozen. Can't allocate engineer time.
#threatmodeling #infosec
October 26, 2026 at 2:00 PM
[THREAT] Identified threat: Every device ships with the same cloud-API key embedded in firmware
[RESPONSE] Dev/management: Budget is frozen. Can't allocate engineer time.
#threatmodeling #infosec
[RESPONSE] Dev/management: Budget is frozen. Can't allocate engineer time.
#threatmodeling #infosec
[THREAT] Identified threat: Customer data is in a SaaS no one in security has heard of
[RESPONSE] Dev/management: This feature has like four users.
#threatmodeling #infosec
[RESPONSE] Dev/management: This feature has like four users.
#threatmodeling #infosec
October 25, 2026 at 2:00 PM
[THREAT] Identified threat: Customer data is in a SaaS no one in security has heard of
[RESPONSE] Dev/management: This feature has like four users.
#threatmodeling #infosec
[RESPONSE] Dev/management: This feature has like four users.
#threatmodeling #infosec
[THREAT] Identified threat: RDS instance is on a public subnet with 0.0.0.0/0 in the security group
[RESPONSE] Dev/management: the security architect told me it's not an issue.
#threatmodeling #infosec
[RESPONSE] Dev/management: the security architect told me it's not an issue.
#threatmodeling #infosec
October 24, 2026 at 2:00 PM
[THREAT] Identified threat: RDS instance is on a public subnet with 0.0.0.0/0 in the security group
[RESPONSE] Dev/management: the security architect told me it's not an issue.
#threatmodeling #infosec
[RESPONSE] Dev/management: the security architect told me it's not an issue.
#threatmodeling #infosec
[THREAT] Identified threat: JWT verifier accepts the 'none' algorithm in production
[RESPONSE] Dev/management: Exploiting it would still need a CSRF token. Layered defense.
#threatmodeling #infosec
[RESPONSE] Dev/management: Exploiting it would still need a CSRF token. Layered defense.
#threatmodeling #infosec
October 23, 2026 at 2:00 PM
[THREAT] Identified threat: JWT verifier accepts the 'none' algorithm in production
[RESPONSE] Dev/management: Exploiting it would still need a CSRF token. Layered defense.
#threatmodeling #infosec
[RESPONSE] Dev/management: Exploiting it would still need a CSRF token. Layered defense.
#threatmodeling #infosec
[THREAT] Identified threat: /export.csv returns the entire user table without authentication
[RESPONSE] Dev/management: No customer has ever asked us about this.
#threatmodeling #infosec
[RESPONSE] Dev/management: No customer has ever asked us about this.
#threatmodeling #infosec
October 22, 2026 at 2:00 PM
[THREAT] Identified threat: /export.csv returns the entire user table without authentication
[RESPONSE] Dev/management: No customer has ever asked us about this.
#threatmodeling #infosec
[RESPONSE] Dev/management: No customer has ever asked us about this.
#threatmodeling #infosec
Claude Security can now spot vulnerabilities that reappear in code
📖 Read more: www.helpnetsecurity.com/2026/10/22/c...
#agenticAI #AI #monitoring #scanning #threatmodeling #vulnerabilitymanagement #cybersecurity #cybersecuritynews @anthropic.com
📖 Read more: www.helpnetsecurity.com/2026/10/22/c...
#agenticAI #AI #monitoring #scanning #threatmodeling #vulnerabilitymanagement #cybersecurity #cybersecuritynews @anthropic.com
Claude Security can now spot vulnerabilities that reappear in code - Help Net Security
The Claude Security update adds recurring code scanning, automatic fix tracking and integrations to manage vulnerability findings.
www.helpnetsecurity.com
October 22, 2026 at 12:09 PM
Claude Security can now spot vulnerabilities that reappear in code
📖 Read more: www.helpnetsecurity.com/2026/10/22/c...
#agenticAI #AI #monitoring #scanning #threatmodeling #vulnerabilitymanagement #cybersecurity #cybersecuritynews @anthropic.com
📖 Read more: www.helpnetsecurity.com/2026/10/22/c...
#agenticAI #AI #monitoring #scanning #threatmodeling #vulnerabilitymanagement #cybersecurity #cybersecuritynews @anthropic.com
Passing Every Test, Still Wide Open: A Practical Guide to Threat Modeling AI Systems!
#Cybersecurity #ThreatModeling #AISecurity #ArtificialIntelligence #GenerativeAI #LLMSecurity #STRIDE #OWASP #MITREATLAS #PromptInjection #RAG #SecureByDesign #RiskManagement
👇👇👇👇
www.linkedin.com/pulse/passin...
#Cybersecurity #ThreatModeling #AISecurity #ArtificialIntelligence #GenerativeAI #LLMSecurity #STRIDE #OWASP #MITREATLAS #PromptInjection #RAG #SecureByDesign #RiskManagement
👇👇👇👇
www.linkedin.com/pulse/passin...
Passing Every Test, Still Wide Open: A Practical Guide to Threat Modeling AI Systems!
An AI system can pass every functional test and still be wide open to attack. Threat modeling is how you find the gaps before an attacker does.
www.linkedin.com
October 22, 2026 at 4:51 AM
Passing Every Test, Still Wide Open: A Practical Guide to Threat Modeling AI Systems!
#Cybersecurity #ThreatModeling #AISecurity #ArtificialIntelligence #GenerativeAI #LLMSecurity #STRIDE #OWASP #MITREATLAS #PromptInjection #RAG #SecureByDesign #RiskManagement
👇👇👇👇
www.linkedin.com/pulse/passin...
#Cybersecurity #ThreatModeling #AISecurity #ArtificialIntelligence #GenerativeAI #LLMSecurity #STRIDE #OWASP #MITREATLAS #PromptInjection #RAG #SecureByDesign #RiskManagement
👇👇👇👇
www.linkedin.com/pulse/passin...
[THREAT] Identified threat: JWT HS256 secret is the literal string 'secret' across all environments
[RESPONSE] Dev/management: We already marked it deprecated. That counts as a fix.
#threatmodeling #infosec
[RESPONSE] Dev/management: We already marked it deprecated. That counts as a fix.
#threatmodeling #infosec
October 21, 2026 at 2:00 PM
[THREAT] Identified threat: JWT HS256 secret is the literal string 'secret' across all environments
[RESPONSE] Dev/management: We already marked it deprecated. That counts as a fix.
#threatmodeling #infosec
[RESPONSE] Dev/management: We already marked it deprecated. That counts as a fix.
#threatmodeling #infosec
Privacy-preserving AI can protect your heart data, the bill is the problem
📖 Read more: www.helpnetsecurity.com/2026/10/21/e...
#cybersecurity #cybersecuritynews #AI #datasecurity #Europe #hardware #healthcare #threatmodeling
📖 Read more: www.helpnetsecurity.com/2026/10/21/e...
#cybersecurity #cybersecuritynews #AI #datasecurity #Europe #hardware #healthcare #threatmodeling
Privacy-preserving AI can protect your heart data, the bill is the problem - Help Net Security
Privacy-preserving AI can protect health data at every trust boundary, but encryption overhead can reach 1,200%. Here’s what to ask vendors.
www.helpnetsecurity.com
October 21, 2026 at 1:54 PM
Privacy-preserving AI can protect your heart data, the bill is the problem
📖 Read more: www.helpnetsecurity.com/2026/10/21/e...
#cybersecurity #cybersecuritynews #AI #datasecurity #Europe #hardware #healthcare #threatmodeling
📖 Read more: www.helpnetsecurity.com/2026/10/21/e...
#cybersecurity #cybersecuritynews #AI #datasecurity #Europe #hardware #healthcare #threatmodeling
[THREAT] Identified threat: Core switch is reachable from any office subnet with default admin/admin
[RESPONSE] Dev/management: It's behind the VPN, so external attackers can't reach it.
#threatmodeling #infosec
[RESPONSE] Dev/management: It's behind the VPN, so external attackers can't reach it.
#threatmodeling #infosec
October 20, 2026 at 2:00 PM
[THREAT] Identified threat: Core switch is reachable from any office subnet with default admin/admin
[RESPONSE] Dev/management: It's behind the VPN, so external attackers can't reach it.
#threatmodeling #infosec
[RESPONSE] Dev/management: It's behind the VPN, so external attackers can't reach it.
#threatmodeling #infosec
[THREAT] Identified threat: Server room door is propped open because the badge reader is slow
[RESPONSE] Dev/management: There's no CVE for it yet, so we don't have to act.
#threatmodeling #infosec
[RESPONSE] Dev/management: There's no CVE for it yet, so we don't have to act.
#threatmodeling #infosec
October 19, 2026 at 2:00 PM
[THREAT] Identified threat: Server room door is propped open because the badge reader is slow
[RESPONSE] Dev/management: There's no CVE for it yet, so we don't have to act.
#threatmodeling #infosec
[RESPONSE] Dev/management: There's no CVE for it yet, so we don't have to act.
#threatmodeling #infosec
Cloudflare bets you’re overpaying an LLM to read your invoices
📖 Read more: www.helpnetsecurity.com/2026/10/20/c...
#cybersecurity #cybersecuritynews #AI #LLM #threatmodeling @cloudflare.social
📖 Read more: www.helpnetsecurity.com/2026/10/20/c...
#cybersecurity #cybersecuritynews #AI #LLM #threatmodeling @cloudflare.social
Cloudflare bets you're overpaying an LLM to read your invoices - Help Net Security
Cloudflare Clairic extraction model pulls typed data from text and images in one pass. In a test pipeline, it cut run time 69% and cost 49%.
www.helpnetsecurity.com
October 20, 2026 at 8:23 AM
Cloudflare bets you’re overpaying an LLM to read your invoices
📖 Read more: www.helpnetsecurity.com/2026/10/20/c...
#cybersecurity #cybersecuritynews #AI #LLM #threatmodeling @cloudflare.social
📖 Read more: www.helpnetsecurity.com/2026/10/20/c...
#cybersecurity #cybersecuritynews #AI #LLM #threatmodeling @cloudflare.social