|
The Secure Code Review Challenge — Solution #6: FileDrop (Username Is User Input Too)
|
|
0
|
1
|
October 1, 2026
|
|
How Can Businesses Secure AI Agents Accessing Data?
|
|
0
|
7
|
October 1, 2026
|
|
Publish your threat models!
|
|
1
|
72
|
September 29, 2026
|
|
CyberSec Game Challenge 2026
|
|
2
|
12
|
September 20, 2026
|
|
The Secure Code Review Challenge — Solution #5: Notekeeper (Insecure Deserialization)
|
|
0
|
10
|
September 18, 2026
|
|
:de: TMC DACH Neues/News
|
|
15
|
353
|
September 4, 2026
|
|
Threat Modeling Mental Health + Stress
|
|
1
|
78
|
September 4, 2026
|
|
The Secure Code Review Challenge — Solution #4: File Converter (A Guessable ID Is an Accessible ID)
|
|
0
|
13
|
September 3, 2026
|
|
The Secure Code Review Challenge — Solution #3: Dice (When Input Sanitization Is Not Enough)
|
|
0
|
31
|
August 21, 2026
|
|
ThreatModCon 2026 SanFrancisco
|
|
0
|
22
|
August 18, 2026
|
|
Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)
|
|
0
|
22
|
August 6, 2026
|
|
Quantitative Risk with Risquanter - TMC DACH
|
|
1
|
52
|
August 3, 2026
|
|
PHANTOM-B: A STRIDE analog for LLMs
|
|
4
|
65
|
July 25, 2026
|
|
The Secure Code Review Challenge — Solution #1: Schooled
|
|
0
|
33
|
July 23, 2026
|
|
Call for papers: ThreatModCon 2026 San Francisco
|
|
0
|
65
|
July 13, 2026
|
|
Good Questions in Threat Modeling?
|
|
3
|
86
|
July 8, 2026
|
|
Introducing the Secure Code Review Challenge (Practice Real-World Reviews)
|
|
0
|
40
|
July 6, 2026
|
|
Help me design coverage metrics
|
|
11
|
183
|
June 23, 2026
|
|
TMC New York City meetup - Live workshop on secure coding with Claude Code and Codex
|
|
0
|
29
|
June 14, 2026
|
|
New video: Clinejection - One Misconfigured GitHub Action Can Compromise Your App (Deep Dive & Lessons Learned)
|
|
0
|
28
|
June 10, 2026
|
|
"Did we do a good job?" TMC DACH virtual meetup recap
|
|
1
|
85
|
June 6, 2026
|
|
New Video: Let "Claude Code" do your Pentesting!
|
|
0
|
40
|
June 5, 2026
|
|
TMI newsletter #53 on threat modeling enforcement, community feedback on ENISA TM playbook, and much more
|
|
0
|
27
|
June 5, 2026
|
|
New Video: deep dive into CVE-2026–3854 — a critical RCE in GitHub
|
|
1
|
51
|
May 31, 2026
|
|
Luanch of the first TMC BeNeLux Chapter
|
|
4
|
105
|
May 14, 2026
|
|
How to Use "AI" For Security Code Reviews
|
|
0
|
57
|
May 11, 2026
|
|
Introducing a OWASP Game for threat modeling Agentic AI, Cloud, Devops, Frontend, LLM, Automation, and Web
|
|
0
|
32
|
May 11, 2026
|
|
New Article: What AppSec Engineers Actually Do (and Why It Matters)
|
|
5
|
106
|
May 6, 2026
|
|
VICAR: Bridging the Gap Between Threat Modeling and Remediation
|
|
11
|
311
|
April 27, 2026
|
|
Have you met AttackTree.online?
|
|
1
|
115
|
April 15, 2026
|