Games with Purpose
51 Card and Board Games for Security, Privacy...
Author: Brett Crawley (55)
Brett Crawley is a principal application security engineer and the author of Threat Modeling Gameplay with EoP (Packt, 2024). He created SBOM-Graph and the Elevation of Autonomy card deck for threat modelling AI, LLM and agentic systems, contributes to OWASP, and writes The Blast Radius newsletter on supply chain security, AI security and EU regulation.
AI Assisted Threat Modeling
The Threat Model Was Never the Point: What AI Threat Modeling Does and Doesn’t Do
A Night in the Life of Our Hedgehog (Caught on Wildlife Cam)
This is what some of you have been...
The Wine Has Turned to Vinegar
Why $249 Billion Can’t Fix Software Security TL;DR:...
One Key to Rule Them All
Why a Single KMS Key on a Multi-Tenant...
CRA, NIS2 and DORA for Engineers
CRA, NIS2 and DORA for Engineers: You Can’t...
How a Hedgehog Got Its Own House
The Case of the Toppled Plant Pot and...
src2sink
Back in February, in my deep dive comparing...
scarno
scarno: Cut the Dead Wood Before It Catches...
Catasto
Your Tools See Repositories. Attackers See an Estate....
SLSA and Provenance: Your SBOM Says What's Inside, This Says Where It Came From
The Blast Radius runs on one conviction: prefer...
Threat Modeling MCP
Threat Modeling the Model Context Protocol: Your Agent...
Data Protection and Data Privacy - Part 2 of 2
From Principle to Practice: Privacy in the Real...
Data Protection and Data Privacy - Part 1 of 2
Untangling the Confusion People often confuse these two...
Get PQC Ready PDQ - Part 2
The Plan, the Order, and the Bill In...
Get PQC Ready PDQ - Part 1
Quantum, AI, and the Window That’s Already Closing...
Browse all Topics
- Agentic AI
- AI Security
- Application Security
- Auth
- AWS
- CAPEC
- Catasto
- Change
- Claude Code Security
- Cloud Security
- Compliance
- CRA
- Cryptography
- Culture
- Cursor AI
- Cybersecurity
- Dark Patterns
- DevSecOps
- DIY
- DORA
- Elevation of Privilege
- Games
- Garden Wildlife
- Graph Analysis
- Hedgehog
- Inner-Source
- Java
- JavaScript
- KMS
- languages
- learning
- Miro
- Mitre
- Model Context Protocol
- NIS2
- Open-Source
- Origins
- Osteria
- OWASP
- Post Quantum Cryptography
- Privacy
- Privacy by Design
- Python
- Risk
- Running
- SAST
- SBOM
- scarno
- Secure by Design
- Security
- Security by Design
- Security Culture
- Security Maturity
- SLSA
- Social Engineering
- Software Architecture
- Software Design
- Software Development
- Software Engineering
- Software Quality
- src2sink
- Strategy
- STRIDE
- Supply Chain Security
- Technical Dept
- Threat Modeling
- TRIM
- Woodworking