A Night in the Life of Our Hedgehog (Caught on Wildlife Cam)
This is what some of you have been...
Author: Brett Crawley (54)
Brett Crawley is a principal application security engineer and the author of Threat Modeling Gameplay with EoP (Packt, 2024). He created SBOM-Graph and the Elevation of Autonomy card deck for threat modelling AI, LLM and agentic systems, contributes to OWASP, and writes The Blast Radius newsletter on supply chain security, AI security and EU regulation.
The Wine Has Turned to Vinegar
Why $249 Billion Can’t Fix Software Security TL;DR:...
One Key to Rule Them All
Why a Single KMS Key on a Multi-Tenant...
CRA, NIS2 and DORA for Engineers
CRA, NIS2 and DORA for Engineers: You Can’t...
How a Hedgehog Got Its Own House
The Case of the Toppled Plant Pot and...
src2sink
Back in February, in my deep dive comparing...
scarno
scarno: Cut the Dead Wood Before It Catches...
Catasto
Your Tools See Repositories. Attackers See an Estate....
SLSA and Provenance: Your SBOM Says What's Inside, This Says Where It Came From
The Blast Radius runs on one conviction: prefer...
Threat Modeling MCP
Threat Modeling the Model Context Protocol: Your Agent...
Data Protection and Data Privacy - Part 2 of 2
From Principle to Practice: Privacy in the Real...
Data Protection and Data Privacy - Part 1 of 2
Untangling the Confusion People often confuse these two...
Get PQC Ready PDQ - Part 2
The Plan, the Order, and the Bill In...
Get PQC Ready PDQ - Part 1
Quantum, AI, and the Window That’s Already Closing...
Threat Modeling AI Systems: A Complete Playbook for Practitioners
The Blast Radius - Edition [4] Over the...
Sparse or Dense? Claude Mythos, Dan Geer, and Where We Should Actually Be Spending Our Effort
Last week, Anthropic announced Claude Mythos Preview and...
Browse all Topics
- Agentic AI
- AI Security
- Application Security
- Auth
- AWS
- CAPEC
- Catasto
- Change
- Claude Code Security
- Cloud Security
- Compliance
- CRA
- Cryptography
- Culture
- Cursor AI
- Cybersecurity
- Dark Patterns
- DevSecOps
- DIY
- DORA
- Elevation of Privilege
- Games
- Garden Wildlife
- Graph Analysis
- Hedgehog
- Inner-Source
- Java
- JavaScript
- KMS
- languages
- learning
- Miro
- Mitre
- Model Context Protocol
- NIS2
- Open-Source
- Origins
- Osteria
- OWASP
- Post Quantum Cryptography
- Privacy
- Privacy by Design
- Python
- Risk
- Running
- SAST
- SBOM
- scarno
- Secure by Design
- Security
- Security by Design
- Security Culture
- Security Maturity
- SLSA
- Social Engineering
- Software Architecture
- Software Design
- Software Development
- Software Engineering
- Software Quality
- src2sink
- Strategy
- STRIDE
- Supply Chain Security
- Technical Dept
- Threat Modeling
- TRIM
- Woodworking