scarno
scarno: Cut the Dead Wood Before It Catches...
Author: Brett Crawley (48)
Brett Crawley is a principal application security engineer and the author of Threat Modeling Gameplay with EoP (Packt, 2024). He created SBOM-Graph and the Elevation of Autonomy card deck for threat modelling AI, LLM and agentic systems, contributes to OWASP, and writes The Blast Radius newsletter on supply chain security, AI security and EU regulation.
Catasto
Your Tools See Repositories. Attackers See an Estate....
SLSA and Provenance: Your SBOM Says What's Inside, This Says Where It Came From
The Blast Radius runs on one conviction: prefer...
Threat Modeling MCP
Threat Modeling the Model Context Protocol: Your Agent...
Data Protection and Data Privacy - Part 2 of 2
From Principle to Practice: Privacy in the Real...
Data Protection and Data Privacy - Part 1 of 2
Untangling the Confusion People often confuse these two...
Get PQC Ready PDQ - Part 2
The Plan, the Order, and the Bill In...
Get PQC Ready PDQ - Part 1
Quantum, AI, and the Window That’s Already Closing...
Threat Modeling AI Systems: A Complete Playbook for Practitioners
The Blast Radius - Edition [4] Over the...
Sparse or Dense? Claude Mythos, Dan Geer, and Where We Should Actually Be Spending Our Effort
Last week, Anthropic announced Claude Mythos Preview and...
Software Engineering Has Regressed 50+ Years Since AI
Bear with me on this train of thought....
Dependency Pruning and Tree Shaking
Cutting the Dead Wood from Your Dependency Graph...
Threat Modeling Your Dependencies - Part 2
Mitigating Third-Party Component Risk: Swapping the Cancer for...
Threat Modeling Your Dependencies - Part 1
How One Bad Library Can Poison Your Entire...
Your SBOM Data Has Been Gathering Dust - Until Now
I’ve been talking about graphs for dependency analysis...
SAST vs Claude Code Security: A Deep Dive
SAST vs Claude Code Security: A Deep Dive...
Browse all Topics
- Agentic AI
- AI Security
- Application Security
- Auth
- CAPEC
- Change
- Claude Code Security
- Compliance
- Cryptography
- Culture
- Cursor AI
- Cybersecurity
- Dark Patterns
- DevSecOps
- Elevation of Privilege
- Games
- Graph Analysis
- Inner-Source
- Java
- JavaScript
- languages
- learning
- Miro
- Mitre
- Model Context Protocol
- Open-Source
- Origins
- Osteria
- OWASP
- Post Quantum Cryptography
- Privacy
- Privacy by Design
- Python
- Risk
- Running
- SAST
- SBOM
- scarno
- Secure by Design
- Security
- Security by Design
- Security Culture
- Security Maturity
- SLSA
- Social Engineering
- Software Architecture
- Software Design
- Software Development
- Software Engineering
- Strategy
- STRIDE
- Supply Chain Security
- Threat Modeling
- TRIM