Johnny Cold·3d agoThreat Modeling RAG: Every Place Untrusted Text Gets InMost AI threat models stop at the chat box: jailbreaks, system prompt leaks, toxic output. But in most production AI apps the dangerous…
Ibekwe Victor·4d agoThreat Modeling an Online Store — Part 2: Applying STRIDE to Identify Security RisksIn Part 1 of this project, I created a Data Flow Diagram (DFD) for a sample online store using Microsoft Threat Modeling Tool.
Bernard Tan·4d agoThe Scanner Saw Clean. The Pipeline Already Had.I pointed a conventional LLM security scanner at ThreatAssessor and it came back clean. The scanner was not wrong. It just could not see…
Ibekwe Victor·5d agoThreat Modeling an Online Store — Part 1 : Understanding Data Flows, Trust Boundaries, and Security…What happens behind the scenes when a customer purchases a product from an online store?
Johnny Cold·6d agoThreat Modeling an AI Agent Without STRIDE: Attackers, Vectors and a Simple Risk ScoreEvery AI threat model I’ve seen starts with the same question: can someone jailbreak the model? The answer is almost always yes. Prompt…
InMeetCyberbyCyber Chronicle·6d agoAWS Security Agent: Turning Application Architecture into Actionable Threat IntelligenceThreat modeling has always been an important part of application security, but let’s be honest — manually identifying every possible attack…
InMeetCyberbyCyber Chronicle·6d agoIriusRisk: Bringing Security Architecture Reviews into the AI EraWhat if we could identify an application’s security weaknesses before writing a single line of code?
SAI CHARAN REDDY P·Nov 3From an Idea to ThreatWeave: My Journey of Building an AI-Powered Threat Modeling Platform 🚀What happens when you combine years of cybersecurity experience, a complex security problem, and the rapidly evolving capabilities of…
Saleem Yousaf·Nov 1STRIDE, made concrete: threat modelling you can actually doThreat modelling sounds abstract until you do it on something real. STRIDE gives you six lenses to hold up to a system, and most weaknesses…
Bernard Tan·Oct 31Four Primitives, One Honest Gap: Mapping OpenShell to a Real Agent FleetMost AI pipelines have a threat model. Almost none enforce it per agent, per tool call, at runtime. NVIDIA’s OpenShell provides four…
