NIST Considering DevSecOps Framework for Agencies
We welcome any initiative that brings DevSecOps practices to the forefront, so it is great to see that NIST is truly unifying these efforts.
Remote Threat Modeling
As we prepare ourselves and adapt to this extended period of remote working, we need to re-evaluate how these changes will affect us.
Continuum joins Lorca UK
LORCA is a joint collaboration between Plexal, CSIT and Deloitte. It’s funded by the Department for Digital, Culture, Media & Sport as part of the National Cyber Security Strategy.
HIPAA & Threat Modeling
Threat modeling is not often talked about in the context of achieving regulatory compliance but they make perfect bedfellows.
CAPEC Threat Modeling
CAPEC provides a publicly available catalog of common attack patterns that helps users understand how adversaries exploit weaknesses in applications and other cyber-enabled capabilities.
Community Edition – New Release
The Community edition allows small teams to experience some of the power of the commercial edition, at no cost.
Serverless Threat Model
Our knowledgeable security department were soon tasked with researching security around serverless. The precise term for serverless itself is a little fraught to define...
Security is a Journey
Having so many conversations with engineering security teams across the globe, patterns and similarities begin to emerge and there is one particular trend that threads through most companies.
IriusRisk 2.1.4 Release
Our engineering team has made a herculean effort to improve responsiveness of the platform. These improvements mean that IriusRisk is now 240% times faster!
Threat Modeling for Web Developers
For the sake of your user’s safety and your company’s reputation, let’s look at what threat modeling is, why you should care, and how to implement it, even in agile environments.