CRA, NIS2 and DORA for Engineers
CRA, NIS2 and DORA for Engineers: You Can’t...
Tagged in: Supply Chain Security (11)
src2sink
Back in February, in my deep dive comparing...
scarno
scarno: Cut the Dead Wood Before It Catches...
Catasto
Your Tools See Repositories. Attackers See an Estate....
SLSA and Provenance: Your SBOM Says What's Inside, This Says Where It Came From
The Blast Radius runs on one conviction: prefer...
Get PQC Ready PDQ - Part 1
Quantum, AI, and the Window That’s Already Closing...
Dependency Pruning and Tree Shaking
Cutting the Dead Wood from Your Dependency Graph...
Threat Modeling Your Dependencies - Part 2
Mitigating Third-Party Component Risk: Swapping the Cancer for...
Threat Modeling Your Dependencies - Part 1
How One Bad Library Can Poison Your Entire...
Your SBOM Data Has Been Gathering Dust - Until Now
I’ve been talking about graphs for dependency analysis...
Ideas and Opinions from the Trenches
There are lots of ways we can optimise what we do, through a data driven approach, but we need to be careful and use critical and creative thinking.
Browse all Topics
- Agentic AI
- AI Security
- Application Security
- Auth
- CAPEC
- Catasto
- Change
- Claude Code Security
- Compliance
- CRA
- Cryptography
- Culture
- Cursor AI
- Cybersecurity
- Dark Patterns
- DevSecOps
- DIY
- DORA
- Elevation of Privilege
- Games
- Garden Wildlife
- Graph Analysis
- Hedgehog
- Inner-Source
- Java
- JavaScript
- languages
- learning
- Miro
- Mitre
- Model Context Protocol
- NIS2
- Open-Source
- Origins
- Osteria
- OWASP
- Post Quantum Cryptography
- Privacy
- Privacy by Design
- Python
- Risk
- Running
- SAST
- SBOM
- scarno
- Secure by Design
- Security
- Security by Design
- Security Culture
- Security Maturity
- SLSA
- Social Engineering
- Software Architecture
- Software Design
- Software Development
- Software Engineering
- src2sink
- Strategy
- STRIDE
- Supply Chain Security
- Threat Modeling
- TRIM
- Woodworking