Community HQ

Here is the heart of the Community. Come and get to know our community members!

287 Topics

T
ThreatModeler
published in News & Announcements

🏆🎉 Congratulations to Our Capture the Flag Challenge Winners! 🎉🏆Blog

We're thrilled to announce the triumphant champions of our recent Capture the Flag challenge! 🚩 Your skills and determination have truly impressed us, and it's time to celebrate your outstanding achievements!🥇 First Place: Zajt - Prizes: $250 Gift Card + ThreatModeler's SWAG🥈 Second Place: Securisec - Prizes: $150 Gift Card + ThreatModeler's SWAG🥉 Third Place: Conrad - Prizes: $100 Gift Card + ThreatModeler's SWAGBut wait, there's more! We've got exciting giveaways and surprises lined up for our community. 🎁 Stay tuned for exclusive announcements, competitions, and rewards that you won't want to miss!And the adventure doesn't end here! Our next event is just around the corner, promising more challenges, fun, and camaraderie. 🚀 Get ready to test your skills and make new memories!Thank you to all participants for making this challenge a tremendous success. 🙌 To the winners, your achievements inspire us all, and we can't wait to see what you'll conquer next!#CaptureTheFlagWinners #

949
P
6 months ago
Kristen Canady
Kristen Canady
posted in News & Announcements

ThreatModeler is a finalist for the DevOps.com Dozen Awards 2022 for the Best DevSecOps Solution

We’re so exciting to announce that ThreatModeler is a finalist for the DevOps.com Dozen Awards 2022 for the Best DevSecOps Solution. We thought it would be so awesome to share with our brand new threat modeling community!Finalists are companies that have taken an active role in the DevOps community, demonstrating their leadership and commitment to the improvement of our industry in the past year. DevSecOps is so critical for PREVENTING cyber attacks. We’re honored to be a finalist, and will be sure to share the outcome with those in our community FIRST!Here’s a link for more informaitonhttps://devops.com/devops-dozen%C2%B2-2022-finalists-announced/

8
T
1 year ago
T
ThreatModeler
published in News & Announcements

A Growing Concern in Healthcare CybersecurityBlog

Are you ever haunted by the thought that a simple scan could unleash chaos on your digital life? Imagine this: a seemingly innocent QR code, a quick scan, and suddenly you find yourself at the mercy of cyber criminals. In a world where QR codes have become our digital gateway, the very technology designed for seamless information exchange has turned into a potential Pandora's box. The Health Sector Cybersecurity Coordination Center (HC3) has recently delved into the shadows of this menace, exposing the rising threat of "quishing" - a cunning cyberattack exploiting QR codes for phishing. Brace yourself as we unravel the unsuspecting risks lurking behind those pixelated squares, endangering not just your data, but the very fabric of cybersecurity, especially in the realm of healthcare. Understanding QR Codes and Quishing QR codes, short for Quick Response codes, are machine-readable images represented as matrices that convey information when scanned by an information system. Legitimate Q

468
Vastris31
3 months ago
T
ThreatModeler
published in News & Announcements

New Security Challenge: Malicious generative AIBlog

Imagine a world where technology keeps evolving, pushing the boundaries of what's possible. Now, picture a new, unsettling threat - malicious Generative AI. It's real, and it's here. Recent creations like FraudGPT and WormGPT have unveiled a fresh breed of vulnerabilities, putting our digital security at risk. In this article, we dive deep into the realm of Generative AI, unraveling the very nature of these risks. But don't worry, we won't leave you hanging – we'll present a proactive strategy to bolster your cybersecurity defenses. In our hyper-connected world, understanding and addressing this issue is paramount. Understanding Generative AI Threats:FraudGPT, a subscription-based malicious Generative AI, leverages advanced machine learning algorithms to generate deceptive content. Unlike ethical AI models, it knows no boundaries, enabling it to craft tailored spear-phishing emails, counterfeit invoices, and fabricated news articles for cyberattacks, scams, and public opinion manipulat

377
D
4 months ago
T
ThreatModeler
published in News & Announcements

Multi-Factor Authentication: Protecting Your Digital SpaceBlog

Ever wonder if your passwords are the digital equivalent of leaving your front door wide open? In the ever-changing world of cybersecurity, the vulnerabilities of traditional passwords have become glaringly apparent. From commonplace attacks like relaying and spraying to the more sophisticated threats of spear-phishing and pharming, hackers have mastered their skills in stealing credentials and gaining unauthorized access. Enter multi-factor authentication (MFA), a robust electronic authentication method that demands users to provide two or more forms of identity verification before accessing a system. Unveiling the Layers of MFA MFA operates on three pillars: something you know like passwords, PINs, something you have like physical objects like keys or smart cards, and something you are- biometric verification such as fingerprints or retina scans. Two-factor authentication (2FA) employs two of these checks, while MFA goes a step further, employing two or more, rendering it a formidabl

327
D
4 months ago
A
Anonymous
asked in ThreatModeler Blogs

What's Needed to Turn Developers into DevSecOps?

“According to an ESG survey, DevOps, without an embedded security process, produces some uncomfortable results. For instance, 45% of software releases didn’t go through any security checks or testing, while 35% of new builds are deployed to production with misconfigurations, vulnerabilities or other security issues.One reason (34%) for these dismal results? Security can’t keep up with the cadence of software releases. To improve these results, something must change, and one impactful change is incorporating continuous threat modeling into the DevOps flow.”Read the rest here.What’s been your experience with DevSecOps and integrating security into development? One good experience I had was working at Automox with a CISO who described himself as “the most business friendly CISO you’re ever going to meet”.  He’s now head of security at Zoom so that strategy has been wonderful for his career.  And it was a pleasure to work with him on company security concerns.Any success or horror stories

6
A
1 year ago
T
ThreatModeler
published in ThreatModeler Blogs

Elevating Cybersecurity With Power of Automated Threat ModelingBlog

In an era where the digital realm is supreme, the battle to protect sensitive information has never been more critical. Enter threat modeling, a systematic approach to identifying and mitigating security vulnerabilities in software and systems. However, as technology advances, so do the complexities of the threat environment. This makes traditional manual threat modeling a difficult task. In this article, we will explore the unique advantages of automated threat modeling and why it has become an urgent necessity in the ever-evolving world of cybersecurity.   The Traditional Way of Threat Modeling    Traditional threat modeling is a meticulous, time-consuming process. Here are some of the disadvantages of this approach:Human error: Manual threat modeling heavily relies on human expertise. Which leaves room for oversights and misjudgments.   Resource-Intensive: It consumes valuable time and resources, making it impractical for fast-paced development environments.   Limited scalability: M

336
amir.soltanzadeh
6 months ago
John Steven
John Steven
published in Thought Leadership

What to Threat Model in Each Software Release Cycle - For SSG OwnersBlog

This article "What to Threat Model -- Each Software Release Cycle" is part of the What to Threat Model series. This article targets Software Security Group (SSG) Owners and the Security Champions/Architects working within that group.Author: John Steven Even after an organization has decided what applications and infrastructure to threat model, questions remain for an SSG. "Does each delivery team wait for a particular phase of its lifecycle to conduct the threat model? -- Does threat modeling have to occur during design?" "Do we block on threat modeling before proceeding with the rest of delivery?" "What if the team doesn't have a diagram? -- what artifacts are necessary to begin threat modeling?" Having Enough to start Threat ModelingHaving decided a particular application or piece of infrastructure is worth threat modeling at the organizational level, the work on that threat model begins in earnest. The team assigned begins to collect inputs: system diagrams and answers to key design

635
amir.soltanzadeh
1 year ago
T
ThreatModeler
published in News & Announcements

Threema's Security Shake-Up: Crafting Safer Messaging Apps with Threat ModelingBlog

Is Your Privacy at Risk? The Shocking Truth About Threema's Security!Threema, the trusted messenger of over ten million users, has been thrust into the spotlight for all the wrong reasons. A team of Swiss computer scientists from ETH Zurich has exposed not one, not two, but a staggering seven security flaws within this once-untouchable fortress of privacy.In a high-stakes showdown between these researchers and Threema's developers, the vulnerabilities are laid bare. Join us on a journey through the heart of this digital storm as we unveil these critical issues and shine a spotlight on the game-changing power of threat modeling. Your messaging app might not be as secure as you think – and we've got the answers you need to protect your data!" The Threema Security Flaws: Forward Security and Post-Compromise Security Absence: Threema lacked both forward security, which prevents decryption of past data even after a compromise, and post-compromise security, which can restore security after a

465
vaidehirana
5 months ago
A
Anonymous
posted in News & Announcements

We brought home the gold! ThreatModeler is a CyberSecurity Excellence Awards Winner for 2023

We’re proud to announce our award in the category of Best Cybersecurity Startup - North America (between 50 to 99 employees):https://cybersecurity-excellence-awards.com/2023-cybersecurity-company-awards-winners/https://cybersecurity-excellence-awards.com/candidates/threatmodeler-6/ 

5
A
1 year ago
A
Anonymous
posted in ThreatModeler Blogs

How Threat Modeling Can Help Minimize Your Application's Blast Radius

“The blast radius of a security incident is defined as the amount of damage that the incident could potentially cause. It’s every account, file, application, server or other corporate asset that could be compromised once an attacker gets ‘inside’ the system.”“An Exploit Chain is an attack that involves multiple exploits or attacks that are chained together to fully compromise a device. In these attacks, Hackers cannot use a single exploit to compromise their target but instead can combine a series of exploits that ultimately lead to malware getting installed.”Read the rest here.The blast radius and exploit chain concepts remind me of the Target hack, that was a chain starting with the HVAC system.  After they got in, nobody found them and they were able to spend time gaining a foothold.  If Target had a better model of their attack surface, they might have realized that their internal security controls were too lax.  This allowed the attackers, once inside the network, to gain access t

5
rakesh.kumar789
1 year ago
A
Anonymous
published in News & Announcements

Get Ready to Unleash Your Cyber Skills at ThreatModeler 2023 Capture the Flag Event!News

We invite you to participate in our first inaugural Capture the Flag (CTF) event and experience the thrill of cybersecurity! Brace yourself for a riveting competition where you'll go head-to-head with fellow hackers, tackling diverse challenges to capture "flags."The ultimate prize? The winner is the one who gathers the most flags the quickest! Mark Your Calendar: September 18  Who Can Join? Whether you're a seasoned cyber maestro or just starting your cybersecurity odyssey, this event is tailor-made for and open to cybersecurity enthusiasts of all skill levels. Our mission is to craft an electrifying, accessible experience that celebrates cybersecurity passion in all its forms. Why Participate? Sharpen Your Skills: Hone your cybersecurity prowess in a dynamic, real-world setting.Forge Connections: Network with kindred cybersecurity spirits and expand your professional circle.Epic Thrills: Engage in pulse-pounding challenges designed to push your limits and ignite your competitive spir

1185
S
6 months ago
A
Anonymous
posted in ThreatModeler Blogs

Can Threat Modeling Actually Improve Incident Response?

“Immediately after an incident, especially a major one, there seems to be about 36 hours of chaos. A period of time in which there is a lot of running around, trying to figure out what to do and where to start to answer those questions above. But, if you’ve previously threat modeled the compromised system, it should short circuit a lot of the running around. It eliminates the “where do I start?” because the questions have already been answered.Without threat modeling, you are forced into a more generalized response. But having done threat modeling, you can zero in on important things faster. Since you’ve already modeled how your applications work, you know things like attack surfaces, exploitability and impact”Rest of the blog here.Those of you who’ve been unlucky enough to have to respond to an incident, does this match your experience? 

4
A
1 year ago
T
ThreatModeler
published in Cartoons

Make Healthcare More Secure

As you saw in our most recent blog, healthcare organizations have experienced 875 breaches since December 2020- that is more than one breach each day! But threat modeling can help identify the flaws in your code putting your data at risk. Make your code secure by design and keep it healthy by implementing continuous threat modeling. It's like preventative care for your SDLC!

184
Harsh Patel
6 months ago
A
Anonymous
published in News & Announcements

Is Threat Modeling the Answer to OT Security?Blog

Threat modeling, from its very inception, was envisioned as a solution to information technology (IT) threats. After all, IT is where the data is, which is nominally the fastest and surest path to a ransom for bad actors. Sometimes, bad actors want something other than money. They want to disrupt (at best) or bring down (at worst) and organization. And while that can certainly be done by “attacking” a company’s data, for some companies, it can also be done by attacking their operations. The OT Security Problem What is OT? From RedHat, “OT, or operational technology, is the practice of using hardware and software to control industrial equipment, and it primarily interacts with the physical world. OT includes industrial control systems (ICSs) like programmable logic controllers (PLCs), distributed control systems (DCSs), and supervisory control and data acquisition (SCADA) systems.” What is the OT security problem? Legacy OT hardware and software was never designed to protect itself from

364
P
7 months ago
T
ThreatModeler
published in News & Announcements

Airbus Data Breach and Impending Attacks on Defense GiantsBlog

The global cybersecurity landscape faces increased challenges as a threat actor, known as "USDoD," has compromised the confidential information of 3,200 Airbus vendors. This breach has exposed sensitive details, including names, phone numbers, and email addresses. Furthermore, the perpetrator behind this attack has announced their intention to target aerospace and defense giants Lockheed Martin and Raytheon in upcoming attacks. This alarming development underscores the growing threat of cyberattacks on critical infrastructure and organizations. This threat actor has gained notoriety in the cybercrime landscape. This actor previously made headlines by selling the FBI's InfraGrad database in December 2022. The sale of the InfraGrad database occurred on the now-defunct "Breached" forum and led to the seizure of the domain by authorities. Info-Stealer Infections on the Rise Reports indicate a staggering 6000% increase in info-stealer infections since 2018. Info-stealers have become the pri

423
M
5 months ago
John Steven
John Steven
published in Thought Leadership

Is Every Diagram a Threat Model?Blog

With Executive Order 14028 and the compendium NIST Internal Report 8397, organizations are required to diagram their software and along with that conduct threat modeling exercises. In this context, order 14028 supplies the mandate and IR 8397 provides guidance for how to comply.  Whereas practitioners can quickly interpret and implement given SAST guidance from IR 8397, threat modeling guidance demands interpretation. For instance, when discussing threat modeling technique, IR 8397 references an SEI paper that itself refers to twelve (12) methods of threat modeling.  Shevchenko's "Features by Threat Modeling by Method" - See Original In her SEI paper, Shevchenko provides a table (see right) describing the different features of various threat modeling methodologies. Before proceeding, note that there are different classes of “method” within this list. Some, like CVSS or OCTAVE focus on scoring risk. Others, like STRIDE, or SECURITY CARDS focus on evaluating a checklist to discover risk.

1793
M
1 year ago
A
Anonymous
posted in Cartoons

You don't need to be an expert in security!

We got you covered:Check out the marketplace here.

3
Sudhakanta Mohanty
1 year ago
A
Anonymous
posted in Thought Leadership

How DevSecOps Can Increase Confidence In Security Architecture

“Proliferating threats and increasingly complex IT architectures are putting significant pressure on teams to keep their enterprise systems secure. These trends show no signs of slowing down, which raises the question: How are IT leaders planning to address these challenges as they make their way through 2023?”Read the rest of the article from @archie here:https://www.forbes.com/sites/forbestechcouncil/2023/03/22/how-devsecops-can-increase-confidence-in-security-architecture/

3
A
1 year ago
bailey.sloan
bailey.sloan
published in Podcast

ThreatMatrix Episode 1

Welcome to the ThreatMatrix! In the future, our hosts will be joined by industry experts to discuss all things cybersecurity. Today, Bailey introduces our hosts, Mahdi and Khyati. Listen here: https://open.spotify.com/show/4lQco0Q4oDQnentyqDNFIj?si=c2ZTghUcQxWN7OL6qP4mWw   Today’s question is: What is the cybersecurity risk that you feel is most often overlooked? 

353
A
6 months ago
T
ThreatModeler
published in News & Announcements

Preventing API Misuse and Protecting Privacy With Threat ModelingNews

The problem is centered around the potential abuse of certain APIs by app developers to collect device signals and perform fingerprinting, which can be used to uniquely identify users across various apps and websites. Apple's response to this problem is to require developers to provide reasons for using specific APIs and restrict the usage of these APIs to the declared reasons only. Implications of API Misuse User privacy violationUnrestricted use of these APIs can lead to unauthorized data collection, violating user privacy by allowing apps to track user behavior and uniquely identify them without their consent. Fingerprinting and trackingFingerprinting techniques can be used to create a unique identifier for a user based on various device characteristics. This can be exploited for targeted advertising, user profiling, and potentially even malicious activities. Data monetizationDevelopers or third parties might exploit collected data for monetization purposes, potentially selling user

303
U
7 months ago
T
ThreatModeler
published in News & Announcements

Securing Data and Trust: A Proactive Approach to Mitigating Data Breach RisksBlog

The problem here is a massive data breach involving the UK Electoral Commission, which exposed the personal information of individuals who registered to vote in the United Kingdom between 2014 and 2022. The breach was initially detected in October 2022, but it was later revealed that the breach actually occurred in August 2021. This delay in disclosing the breach raises concerns about the Commission's handling of the incident and its impact on individuals' privacy and security. Implications Privacy violationThe breach exposed sensitive personal information of millions of individuals, including their names, addresses, email addresses, phone numbers, and more. This information can be exploited for various malicious purposes, such as identity theft, financial fraud, and targeted phishing attacks. Phishing and fraudWith access to email addresses, phone numbers, and names, threat actors can launch highly convincing phishing attacks. They can send fraudulent emails or messages that appear to

253
K
6 months ago
T
ThreatModeler
published in News & Announcements

Newly Uncovered Cyber Threat Cluster Carderbee Raises Alarms in Asian Supply ChainsBlog

The issue here is a previously undocumented threat cluster (tracked as Carderbee) that has been conducting software supply chain attacks primarily targeting organizations in Hong Kong and other Asian regions. These attacks leverage a trojanized version of a legitimate software called EsafeNet Cobra DocGuard Client to deliver a backdoor known as PlugX. The attackers have also used malware signed with a legitimate Microsoft certificate, making attribution challenging. Implications Supply chain vulnerabilitiesThe attackers are exploiting vulnerabilities in the software supply chain, compromising legitimate software to distribute malicious payloads. This highlights a significant problem in software supply chain security, where even trusted software can be compromised. Attribution challengesAttribution in cyberattacks can be challenging, as multiple threat actors may share tools and techniques. In this case, the use of PlugX, which is associated with various China-linked hacking groups, mak

233
K
6 months ago
T
ThreatModeler
published in News & Announcements

Cybersecurity in Healthcare: Protecting Patients and Data from Evolving ThreatsBlog

The problems here are about cybersecurity challenges in healthcare organizations that are significant and pose serious risks to patient safety, data security, and overall operational integrity. ThreatModeler, a threat modeling tool, can play a crucial role in helping healthcare organizations address these challenges. Threats to Healthcare Cyber-physical systems vulnerabilitiesThe increasing interconnectivity of cyber-physical systems in healthcare makes them vulnerable to cyberattacks. An attack on these systems can have devastating consequences for patient care and safety. High incidence of cybersecurity IncidentsThe healthcare sector is experiencing a high incidence of cybersecurity incidents, including those affecting critical systems like medical devices and building management. These incidents can disrupt care delivery and compromise patient data. Ransomware threatRansomware attacks are prevalent in healthcare, and some organizations have paid ransoms, which is not advisable. Payi

583
Vastris31
5 months ago
T
ThreatModeler
published in News & Announcements

SapphireStealer: An Evolving Threat in the World of Information StealersBlog

A new threat has appeared in the constantly changing environment of cyber threats, raising severe concerns in the cybersecurity industry. Open-source information thief SapphireStealer originally surfaced in public malware repositories in December 2022, and since then, it has caused a stir. In-depth analysis of SapphireStealer's complexities, capabilities, effects, and cybercriminals' reactions to this evolving threat are provided in this paper. We'll also look at the crucial role threat modeling can play in protecting against such dangers.  The Rise of Information Stealers SapphireStealer has gained popularity among cybercriminals in recent years. These threats offer a straightforward way to compromise and distribute sensitive information and account-related details, making them attractive to financially motivated attackers. The stolen credentials often include corporate account information, access tokens, and other data that can be used to infiltrate corporate networks and execute var

233
Harsh Patel
6 months ago
Terms & ConditionsCookie settings