A threat modeling assistant prompt guides users in generating a CycloneDX 2.0 TM-BOM JSON file that can be imported directly into Precogly, the OWASP threat modeling platform. The instructions cover b…
A developer outlines a four-pillar Application Security program that uses AI to filter false positives from SAST findings, auto-generate STRIDE threat models, and enforce tiered guardrails rather than…
A developer added an agentic interview mode to their STRIDE threat modeling tool, P2 Threat Model Generator, which reads Docker Compose, OpenAPI, and Kubernetes manifests. The new mode uses an LLM to …
The Cloud Security Alliance has published MAESTRO, a threat-modeling framework for agentic AI that decomposes agent systems into seven layers to systematically enumerate security threats. Authored by …
Threat-modeling expert Adam Shostack has developed PHANTOM-B, a framework designed to identify AI-specific threats in 15-minute sessions, addressing the struggle CISOs face in securing AI systems. Pre…
A developer built engineering-docs, a set of 21 skills for coding agents that cover the full lifecycle of writing software documentation, from initial idea to postmortem. The project encodes the struc…
InfoQ opened enrollment for its AI Security & Privacy Engineering Program, a five-week online cohort for senior engineers in regulated industries, starting August 26 and October 14. The program, facil…