News & Announcements

Be the first to know all the things: product updates, support announcements, company news, upcoming events, etc.

  • 103 Topics
  • 17 Replies

103 Topics

A
Anonymous
posted in News & Announcements

We brought home the gold! ThreatModeler is a CyberSecurity Excellence Awards Winner for 2023

We’re proud to announce our award in the category of Best Cybersecurity Startup - North America (between 50 to 99 employees):https://cybersecurity-excellence-awards.com/2023-cybersecurity-company-awards-winners/https://cybersecurity-excellence-awards.com/candidates/threatmodeler-6/ 

5
A
2 months ago
A
Anonymous
posted in News & Announcements

Smart Manufacturing Magazine: Manufactured Disruption: Securing Cyber-Physical Systems

“The adoption of the Internet of Things (IoT) has also accelerated as manufacturers increasingly connect physical devices to the internet to facilitate data collection and communication. However, these connected devices can also be targeted by hackers seeking to gain access to a facility’s operations or steal sensitive data.” - @Pthakker, ThreatModeler COO.Full articleThe article mentions the Triton malware that was used to gain access to a petrochemical facility in Saudi Arabia. Reminds me of the casino hack where they targeted the IoT thermostat in the fish tank.  Anyone have any other good IoT hack stories?  

0
A
3 months ago
T
ThreatModeler
published in News & Announcements

The Stevie Awards Feature ThreatModeler

We are feeling the love from the Stevies today! Not only did they highlight the Silver American Business Award that we won late last year, but they also featured ThreatModeler on their blog. They spent time talking about CloudModeler and what it means to DevSecOps, and overall did a great job talking about why companies need ThreatModeler now.Take a peek at the article. We’ve pasted it below, and it can also be found at this link. Threat Modeling Pioneer Enables Collaborative Platform for Real-time Cloud Security Modeling Stevie-winner ThreatModeler™ is a collaborative platform where security experts or non-security professionals alike can visualize design flaws within a few hours or minutes instead of weeks. ThreatModeler software was created to address the shortcomings of data flow diagrams, bring threat modeling capabilities in-house, and make it scalable. The vision for ThreatModeler software is to be able to model ALL the threats, automatically, with no security expertise required

70
T
4 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler Dice Feature: ChatGPT Raises Cybersecurity and A.I. ConcernsNews

Since its release, ChatGPT, a chatbot capable of producing incredibly human-like text thanks to a sophisticated machine-learning model, has industry observers heralding a new stage in artificial intelligence (A.I.) development. ChatGPT’s ability to produce realistic conversations and messages—and adapt to its mistakes—could have applications in industries ranging from finance to art.   In the three months since OpenAI announced ChatGPT, the chatbot has generated significant headlines and buzz, with as many as a million people testing out the tech soon after its release. Microsoft has made significant investments in the platform, with an eye toward possibly integrating it into its cloud services. The excitement over ChatGPT, however, comes with a dark side, including concerns over security and the ability of cybercriminals to use the chatbot for their means. Check Point Research has documented several instances of threat actors deploying much more sophisticated phishing emails written w

10
T
4 months ago
T
ThreatModeler
published in News & Announcements

Media Coverage for Threat Model MarketplaceNews

Beta News: “New marketplace offers downloadable threat models for free”https://betanews.com/2023/01/19/new-marketplace-offers-downloadable-threat-models-for-free/Silicon Angle: “New ThreatModeler marketplace offers prebuilt, field-tested threat models”https://siliconangle.com/2023/01/19/new-threatmodeler-marketplace-offers-pre-built-field-tested-threat-models/SC Media: “Threat Model Marketplace aims to make DevSecOps more accessible”https://www.scmagazine.com/news/cloud-security/threat-model-marketplace-aims-to-make-devsecops-more-accessibleVM Blog: “ThreatModeler First to Democratize DevSecOps with Launch of Threat Model Marketplace”https://vmblog.com/archive/2023/01/19/threatmodeler-first-to-democratize-devsecops-with-launch-of-threat-model-marketplace.aspx#.Y8qn2ezMJjNDevOps Digest: “ThreatModeler Launches Threat Model Marketplace”https://www.devopsdigest.com/threatmodeler-launches-threat-model-marketplaceThe Fast Mode: “ThreatModeler Launches Cybersecurity Asset Marketplace”https:/

00
T
4 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler Infosecurity Magazine Feature: ThreatModeler Makes DevSecOps More Accessible With New MarketplaceNews

ThreatModeler, a company that provides threat modeling software, has launched the Threat Model Marketplace.This new platform aims to make DevSecOps more accessible for businesses of all sizes. The marketplace includes pre-built threat models that can be integrated into a development pipeline alongside educational resources such as tutorials, best practices and case studies. More specifically, the online shop launched with 50 pre-built threat modeling templates, and the company intends to introduce up to 50 new threat models per month. Future updates will reportedly enable third parties to upload customized threat models to be downloaded for free or for a nominal cost.“Threat modeling is so valuable for maintaining secure systems that Executive Order 14028 makes threat modeling activities a compliance demand for many organizations,” explained ThreatModeler CTO John Steven.“With organizations eager for help to overcome the persistent challenges that modeling can entail, Threat Model Mark

10
T
4 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler Channel Vision Magazine Feature: ThreatModeler Launches Threat Model MarketplaceNews

ThreatModeler, a leader in threat modeling and securing cloud infrastructure from design to deployment, today launches its trademarked Threat Model Marketplace, a cybersecurity asset marketplace offering pre-built, field-tested threat models to be downloaded — free for a limited time — and incorporated into threat modeling initiatives.With Threat Model Marketplace, enterprises can accelerate efforts to visualize attack surfaces, understand security requirements and prioritize steps to mitigate threats across environments, including AWS, Azure, and the Google Cloud Platform.As the skilled worker shortage continues, organizations are being inundated with threats and complex cybersecurity mandates that compound the challenge of maintaining secure architectures. Compliance presents perhaps the largest hurdle for companies to address as new executive orders and legislation, such as the Quantum Security Preparedness Act, are introduced to combat the evolving threat landscape. While important

00
T
4 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler SC Magazine Feature: Juniper starts the year listing more than 230 vulnerabilitiesNews

Juniper this week issued security advisories that lay out details on more than 230 vulnerabilities, about 200 of which security pros say impact third-party components.The networking vendor patched roughly two dozen of the vulnerabilities, all of which could potentially be leveraged for distributed denial of service (DDoS) attacks.That’s part of the reason the Cybersecurity and Infrastructure Security Agency (CISA) posted a notice on these patches with a link to the Juniper site. Only three of the vulnerabilities were rated critical — and there’s no indication that any were exploited in the wild.Juniper’s recently disclosed list security advisories cover 28 individual CVEs and four advisories that encompass an additional 203 CVEs, explained Tim Silverline, vice president of security at Gluware. Silverline said the average CVSS score of the disclosed vulnerabilities is about 7.0.Silverline said a large majority of the disclosures are related to DDoS impact vulnerabilities, which means th

10
T
4 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler Security Boulevard Feature: CircleCI Rotates GitHub 0Auth Tokens After Security IncidentNews

Following a security incident, CircleCI has completed the process of rotating GitHub OAuth tokens for their customers.CircleCI said Saturday that while customers could still rotate their own tokens, it has “confidence in the security of the CircleCI platform, and customers can continue to build.”The platform first sent out an alert on January 4, 2023, saying it was investigating an incident—without providing further details. While the company said it was “confident that there are no unauthorized actors active in our systems; however, out of an abundance of caution, we want to ensure that all customers take certain preventative measures to protect your data as well,” CircleCI urged customers to “immediately rotate any and all secrets stored in CircleCI … in project environment variables or in contexts” and recommended they “review internal logs for their systems for any unauthorized access” from December 21, 2022, to January 4, 2023, or once secrets rotation had been completed.“Organiza

00
T
4 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler The CyberWire Feature: ThreatModeler Delivers Proactive Cyber Security Trend in RoundupNews

ThreatModeler Survey: IT Leaders Confident in Effectiveness of Tools, Though Many are Looking for More Proactive, Automated Solutions (News Direct) Research finds that enterprises that leverage threat modeling report more confidence in their security and development tools

10
T
5 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler VMBlog Feature: ThreatModeler Survey: IT Leaders Confident in Effectiveness of Tools, Though Many are Looking for More Proactive, Automated SolutionsNews

ThreatModeler released survey findings that reveal key trends and pain points facing businesses as they build and maintain secure and resilient architectures. The survey sourced responses from those in the information technology industry with owner, executive, C-level and senior management positions.Enterprises today are dealing with ballooning security threats, increasingly complex architectures, and a lack of skilled workers to meet everyday needs. According to the survey, more than 67% of IT leaders agree that their team has found it difficult to keep their architectures resilient in face of increased IT/OT architecture complexity and rising threats. Even when aware of vulnerabilities, nearly 64% agree that their teams have found it difficult to prioritize which ones they should address first."IT leaders know that the only realistic way they can keep up with accelerating complexity and increasing threats is by being proactive," said Archie Agarwal, Founder and CEO, ThreatModeler. "P

00
T
5 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler GlobalSecurityMag Feature: Research: ThreatModeler measures IT leaders’ confidence/frustration with toolsNews

ThreatModeler released its complete survey findings that reveal key trends and pain points for IT leaders as they build and maintain secure and resilient architectures.Key Survey Findings• Enterprises today are dealing with ballooning security threats, increasingly complex architectures, and a lack of skilled workers to meet everyday needs.o More than 67% of IT leaders agree that their team has found it difficult to keep their architectures resilient in face of increased IT/OT architecture complexity and rising threats.o Even when aware of vulnerabilities, nearly 64% agree that their teams have found it difficult to prioritize which ones they should address first.• ThreatModeler’s survey results show that enterprises are turning to automation and proactive technologies to reduce the burden on development and security teams amid the growing skills gap and ongoing labor shortage.o More than 71% of IT leaders agree/strongly agree the labor and skills shortages have led their team to seek

00
T
5 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler Security Magazine Feature: New cybersecurity technology 2022News

ThreatModelerHelps Detect & Remediate Security Flaws ThreatModeler 6.0 provides end users with information, tools and collaboration options to facilitate the management of threat models for large enterprises. Without relying on code, the platform provides a common language to enable developers and security teams to communicate and shift security left of the cloud development lifecycle. The 6.0 update enhances approvals workflows with the ability to tag collaborators and assign tasks with in-platform notifications and enhancements to audit, development and compliance reporting. Users can specify the time period, activity and components of each report to enable a view of threats across the security environment. The custom reporting tool enables teams to compile both simplistic and complex information for review and remediation. Image courtesy of ThreatModelerFind out more at www.threatmodeler.com 

20
T
5 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler Dice Insights Feature: Beyond Ransomware: Cybercrime Trends to Watch in 2023News

The global cybercrime problem continues to grow and change, bringing with it additional challenges for those tech and cybersecurity pros entrusted with securing their organizations’ data and infrastructure. The latest statistics from the FBI’s Internet Crime Report show agents recorded nearly 850,000 complaints related to cybercrime in 2021, a 7 percent increase from the previous year. All told, the FBI estimates cyber losses to American citizens totaled $7 billion in 2021. The biggest culprits include ransomware, business e-mail compromise schemes, and the criminal use of cryptocurrency.Ransomware tends to make the most headlines, and with good reason. Cybercriminal gangs continue to wield a dangerous combination of crypto-locking malware and extortion threats to great effect. The 2022 Verizon Data Breach Investigations Report found 25 percent of all breaches now involve some type of ransomware component. Adding to these concerns, security firm FortiGuard Labs published a December rep

20
T
5 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler Survey: IT Leaders Confident in Effectiveness of Tools, Though Many are Looking for More Proactive, Automated Solutions

Research finds that enterprises that leverage threat modeling report more confidence in their security and development tools JERSEY CITY, N.J, December 20, 2022 – ThreatModeler, a leader in threat modeling and securing cloud infrastructure from design to deployment, today released survey findings that reveal key trends and pain points facing businesses as they build and maintain secure and resilient architectures. The survey sourced responses from those in the information technology industry with owner, executive, C-level and senior management positions. Enterprises today are dealing with ballooning security threats, increasingly complex architectures, and a lack of skilled workers to meet everyday needs. According to the survey, more than 67% of IT leaders agree that their team has found it difficult to keep their architectures resilient in face of increased IT/OT architecture complexity and rising threats. Even when aware of vulnerabilities, nearly 64% agree that their teams have fou

10
T
5 months ago
T
ThreatModeler
published in News & Announcements

Vote for ThreatModeler in the DevOps Dozen Awards!!!News

ThreatModeler has been selected as a finalist for two categories in the DevOps Dozen 2022 Awards! Vote ThreatModeler for Best DevSecOps Solution and Best Cloud Native Security Solution/Service. Voting is open to the public and closes on December 31st: https://devopsdozen.com/ 

00
T
5 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler Forbes Feature: What Organizations Should Know Before Making The Shift To Threat ModelingNews

Originally Featured in Forbes : Read More HereFounder, CEO and chief technical architect at ThreatModeler.There are many reasons why so many companies are choosing to migrate to the cloud. The cloud comes with no hardware maintenance, low start-up costs, an improved digital experience and many more benefits.But the cloud also comes with an increase in cybersecurity complexity. On the cloud, everything is digital and dynamic. This requires a new approach to security.A Proactive Approach To Security To secure a cloud environment, there must be a way to have a holistic view and understanding of the entire landscape to monitor for any changes continuously. There will always be new, unexpected threats trying to penetrate an organization’s cloud environment. It is important for these organizations to have a way to view the attack surface from the attacker’s perspective and be fully prepared to defend against it. This is where threat modeling comes in. Threat modeling turns cybersecurity from

91
P
6 months ago
T
ThreatModeler
published in News & Announcements

Defensive strategies must evolve as networks disperse across environments

ThreatModeler’s own John Steven appeared in SC Magazine to discuss the evolution of networks and how threat modeling is critical to DevSecOps. The evolution of networks has accelerated under the pandemic as more organizations have embraced multi-cloud and hybrid-cloud strategies, with remote workers accessing data and applications dispersed across complicated computing environments.While some traditional network security tools have failed to meet today’s security requirements, a new paper by Netography urges the industry to evolve defensive strategies and address all stages of the threat continuum as networks have become dispersed, a process the firm calls "atomized."The paper, written by Netography CEO Martin Roesch and titled “A reckoning: The massive implications of losing network visibility and control,” highlighted that the security community has ignored the fundamentals of network visibility and control, despite the use of zero trust architectures and endpoint detection and respo

00
T
6 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler Featured in SC MediaNews

The evolution of networks has accelerated under the pandemic as more organizations have embraced multi-cloud and hybrid-cloud strategies, with remote workers accessing data and applications dispersed across complicated computing environments.While some traditional network security tools have failed to meet today’s security requirements, a new paper by Netography urges the industry to evolve defensive strategies and address all stages of the threat continuum as networks have become dispersed, a process the firm calls "atomized."The paper, written by Netography CEO Martin Roesch and titled “A reckoning: The massive implications of losing network visibility and control,” highlighted that the security community has ignored the fundamentals of network visibility and control, despite the use of zero trust architectures and endpoint detection and response (EDR), giving attackers plenty of places to hide and cause chaos across the cloud.  “We thought we had built a better mousetrap with zero t

30
T
6 months ago
Kristen Canady
Kristen Canady
posted in News & Announcements

ThreatModeler is a finalist for the DevOps.com Dozen Awards 2022 for the Best DevSecOps Solution

We’re so exciting to announce that ThreatModeler is a finalist for the DevOps.com Dozen Awards 2022 for the Best DevSecOps Solution. We thought it would be so awesome to share with our brand new threat modeling community!Finalists are companies that have taken an active role in the DevOps community, demonstrating their leadership and commitment to the improvement of our industry in the past year. DevSecOps is so critical for PREVENTING cyber attacks. We’re honored to be a finalist, and will be sure to share the outcome with those in our community FIRST!Here’s a link for more informaitonhttps://devops.com/devops-dozen%C2%B2-2022-finalists-announced/

8
T
6 months ago
T
ThreatModeler
published in News & Announcements

Critical Infrastructure’s Open Source Problem

This article was written by Sue Poremba on November 17, 2022. It features ThreatModeler CTO John Steven, which is bolded below. Critical Infrastructure’s Open Source ProblemOpen source has a security problem, and that could have real-world impact when it affects critical infrastructure.According to research from Synopsis, 78% of code in codebases is open source, and 81% of the codebases have at least one vulnerability. That number goes up to 88% when the code sits untouched with no feature updates for two years.Open source code plays a vital role in computing and the internet, and it plays a major role in the connectivity of critical infrastructure. Many segments of critical infrastructure, like the electric grid or water systems, are also woefully out of date, making them part of that critical infrastructure segment riddled with outdated and unchecked code.“Open source software is a part of all software development, whether it’s operational technology (OT) or IT. It’s just ubiquitous

60
T
6 months ago
T
ThreatModeler
published in News & Announcements

IT LEADERS ADOPTING THREAT INTELLIGENCE, BUT CHALLENGES PERSIST

While the majority of enterprise IT security managers rely on threat intelligence to reduce cybersecurity risk, many still lack the necessary skills and resources to carry out these initiatives fully, according to a Vulcan Cyber report on threat intelligence adoption trends and challenges.The survey of 100 information security, vulnerability management, and threat intelligence executives and practitioners found threat intelligence adoption is on the rise, with a growing percentage of companies putting dedicated teams (75%) and budgets (66%) in place.However, nearly three-quarters (73%) of respondents indicated that a lack of skills to leverage threat intelligence is a key problem, and the majority (55%) said their threat intelligence data is not predictive enough.Despite challenges with prediction, 56% of respondents said they currently use or plan to use predictive models including the Exploit Prediction Scoring System (EPSS).The open, data-driven EPSS was designed to help organizatio

00
T
6 months ago
T
ThreatModeler
published in News & Announcements

ThreatModeler Featured in SC Media

Three-quarters of respondents to Vulcan Cyber’s survey on vulnerability risk management say they have dedicated threat intelligence teams, and two-thirds say they have dedicated threat intelligence budgets. In spite of those figures, 73% said a “lack of skills” is their biggest challenge that is keeping their organization from fully leveraging investments in threat intelligence resources. Just over half (55%) said their program is not sufficient enough to stay ahead of threat actors.Conducted by Gartner Peer Insights and Vulcan Cyber, 100 information security, vulnerability management and other executives and practitioners were surveyed for the “Threat Intelligence Adoption Rises to Reduce Vulnerability Risk” report between June 8 and July 29.The vast majority of respondents said they rely on threat intelligence “often or very often” for vulnerability prioritizations, while 97% of organizations rated their ability to respond based on threat intelligence as average or better.Nearly two-

00
T
6 months ago
Kristen Canady
Kristen Canady
published in News & Announcements

Meet Your Community TeamNews

As you get more and more familiar with the ThreatModeler Community, you’ll see more and more of these names pop up. We wanted to help put a face to the names, so meet your moderation team! We’re here to help with anything you need and find the answers to any and all of your questions. Get to know us even better by checking out our answers in the introduction thread! 

20
Kristen Canady
6 months ago
T
ThreatModeler
published in News & Announcements

Get Started with the Threat Modeling Community

Is this your first time visiting the ThreatModeler Community? Welcome! We’re so glad you found us. If you’ve been here before, welcome back! This thread will prepare you to get the most out of the community, explain the purpose of each of the sections, and explore what you can expect to learn in them.   Why are we here?This community is built for those who hope to use ThreatModeler to minimize risk with threat modeling. Whether you’re new to our product or to threat modeling as a practice, or you’re seasoned and looking for ways to take the next step, this community is for you. As the foremost expert in threat modeling, ThreatModeler is hyper-focused on helping DevOps teams make proactive security decisions instead of reacting to vulnerabilities and threats. We’ve curated this space with experts who are here to help you succeed, answer your questions along the way, and educate you as you learn how threat modeling can decrease risk for your organization. You’ll also find those peers who

381
Kristen Canady
7 months ago
Terms & ConditionsCookie settings