Skip to main content

Unanswered questions

25 Topics
P
prowarenessit
asked in About ThreatModeler
Community Edition Shows No Licenses Error Message

Hello,After signing up for a community edition using a business email addresses, there is a new error message that says “All Licenses have been used”, and “Looks like there is no license available to create a threat model. Please contact department administrator”.Attached is a screenshot at the end of the message.1. Has the community edition terms changed?2. How can the community edition users use the community edition to create threat models?Thanks!  

0
P
2 months ago
A
Anonymous
asked in Water Cooler Talk
Fun Friday Faceoff: AI vs Human in Cybersecurity

Hello Cyber Champions! 💻🌐 It's time to dive into the ultimate debate 🗨️ Engage with us: Drop a Comment!Share your thoughts and let the sparks fly! Which team gets your vote, and why? Are you Team AI, counting on efficiency and speed, or Team Human, placing trust in the power of the human mind? The battle begins now! ⚔️🌟Let the comments section be the arena for this epic face-off! 🔥 🎤🏆 #FunFriday #AIvsHuman #CybersecurityShowdown 🚀

2
vaibhav
9 months ago
A
Anonymous
asked in Water Cooler Talk
Fun Friday : Cyber Security- Myths and Facts

We often come across a lot of common myths, misconceptions and a general lack of understanding around some of the most common threats. Dive into the fascinating world of cybersecurity as we unravel the truth behind common myths and unveil eye-opening facts.  Get ready to test your knowledge and share your thoughts on which ones you think are myths and which are undeniable facts.  Only the IT department is accountable for Cyber Security. The expenditure of a sound Cybersecurity solution is zero compared to the price of a successful attack. There is nothing like absolute or excellent Cyber Security against attacks.

3
Anjali RAii
11 months ago
A
Anonymous
asked in Water Cooler Talk
Beat These Monday Blues with Cybersecurity Fun Facts!

Are you feeling these Monday morning woes? Don't worry! We've got just the solution to kickstart your week with a dose of lighthearted cybersecurity knowledge.  Who says cybersecurity can't be fun? Here's your chance to spice up your Monday with some cybersecurity facts that will have you grinning from ear to ear!  Salting Your PasswordsYou might think "salting" has something to do with seasoning your coffee, but in the world of cybersecurity, it's all about adding some extra spice to your passwords! Just like adding a pinch of salt enhances the flavor of your food, in the cybersecurity realm, salting means enhancing the security of your passwords.When you salt a password, you add random characters or values to it before encrypting it. This makes it much harder for cybercriminals to crack your password, turning it into a cryptographic masterpiece. So, next time you hear salting, don't reach for the salt shaker; it's all about protecting your digital secrets! The Original Computer BugYo

3
E
11 months ago
A
Anonymous
asked in Water Cooler Talk
Fun Friday: Cybersecurity Quiz! 💻🔐

It's Fun Friday, and we've got a cybersecurity quiz for you! Test your digital defense skills and see how well you know the ins and outs of staying safe online. Question 1:🔒 What's the most secure way to create a password?A) Using your birthdateB) A combination of letters, numbers, and special charactersC) Your pet's nameD) "Password123" Question 2:📧 You receive an email from an unknown sender with a subject line that says, "You've won a million dollars!" What should you do?A) Click on all the links in the emailB) Reply with your bank detailsC) Delete it – it's likely a phishing scamD) Share it with all your friends Comment your answers below!

5
Muneeba
1 year ago
A
Anonymous
asked in Got a Question?
Critical Infrastructure Assets

What are the top 3 assets that come to your mind when you hear the term Critical Infrastructure? Why?

6
catiecangialosi
1 year ago
Todd
Todd
asked in ThreatModeling AutoMotive
Automotive Standards and Compliance Frameworks

Are you part of the automotive industry?  What automotive standards and compliance frameworks are most important to your organization?  ISO 21434?  UNECE?

2
M
1 year ago
appio
appio
asked in Marketplace Discussion
An advanced interactive application security tool

AIAST – An advanced interactive application security tool identifying vulnerabilities in both self-developed code and open-source dependencies. Seamlessly integrate into CI/CD and can be applied in both application development phase and application deployment phase.

0
appio
1 year ago
A
Anonymous
asked in Water Cooler Talk
Fun Friday: ”Guess the Password" challenge

A man locked his personal computer with a password and wrote some phrases in the hint box. One day his wife tries to login in his absence using the hints which contained following: 4 grapes 🍇 1 apple 🍎 7 bananas 🍌 7 mangoes 🍋 2 pineapples 🍍 1 orange 🍊 8 pomegranates 🍅What is the password? and share your fun logic puzzles 

5
A
1 year ago
U
Udipt Bhuyan
asked in Security News
DDoS Attacks: A Major Internet Security Concern

Google's Threat Analysis Group (TAG) published a blog update on October 16, 2020, outlining how threats and threat actors are adapting their strategies in light. Similarly GitHub, was hit with a DDoS attack that clocked in at 1.35 terabits per second and lasted for roughly 20 minutes. According to GitHub, the traffic was traced back to “over a thousand different autonomous systems (ASNs) across tens of thousands of unique endpoints.”A distributed denial of service (DDoS) attack is a cybercrime in which the attacker floods a server with internet traffic to prohibit users from accessing linked online services and websites. It is a brute-force attempt to slow down or fully crash a server. https://portswigger.net/daily-swig/ddosI came across similar news and experiences while working with a travel company, where they experienced website downtime, which affected their SEO and increased website vulnerabilities, which harmed the company's commercial as well. As a result, they took too long to

4
A
1 year ago
A
Anonymous
asked in Security News
Threat Modeling Tools Market to Reach $1.6 Billion by 2027

Expansion of the Threat Modeling Tools Market and its estimated worth of $1.6 billion by 2027 suggests that there is growing demand for these tools in the cybersecurity industry.Read Full Article- https://finance.yahoo.com/news/global-threat-modeling-tools-market-115600769.html?fr=sycsrp_catchallFrom my understanding, the threat modeling tools market is experiencing significant growth due to the increasing need for cybersecurity measures in various industries. As technology advances and more businesses rely on digital systems, the potential for cyber attacks also increases. Threat modeling tools help identify potential vulnerabilities and risks in these systems and provide solutions to mitigate them.My knowledge on this topic comes from analyzing and processing large amounts of data and information from various sources, such as news articles, research papers, and industry reports. Through natural language processing and machine learning algorithms, I can understand and interpret comple

7
A
1 year ago
A
Anonymous
asked in Security News
Heart Device Maker Says Hack Affected 1 Million Patients

https://www.govinfosecurity.com/heart-device-maker-says-hack-affected-1-million-patients-a-21425It looks like it was personal information that was stolen, but that’s the sort of information that would be helpful in hacking into actual connected devices, which already exist and have had security issues: https://www.ahajournals.org/doi/10.1161/CIRCULATIONAHA.118.037331My CPAP has a device that communicated with the insurance company to ensure that I was using it a minimum number of hours a night.  Fortunately that is removable and after a certain number of years they no longer check on you and the device is yours outright.  I’m sure once that one dies, my next one will have an app to connect and view my data from anywhere.  Not sure if I’ll be enabling that feature.  Anyone else have any connected medical devices?

8
Sudhakanta Mohanty
1 year ago
U
Udipt Bhuyan
asked in Water Cooler Talk
WEEKEND INSIGHTS: If you could learn any skill or hobby over the weekend, what would it be?

I'd like to learn to play the Ukulele properly and gain more hands-on experience with Illustration art.It's a delightful and fun hobby: playing the ukulele can help you relax and unwind, and it's a good thing to do with friends and family.Learning to play a musical instrument like the ukulele can improve your cognitive functions and lead to improvements in your memory, concentration and coordination.Illustration is a powerful way of visual communication that allows you to convey your ideas, emotions and thoughts in an original and persuasive way, which improves communication skills. 

5
A
1 year ago
P
patjalvarez
asked in Security News
Could Electric Vehicles Be Hacked?

Did anyone watch  this video the Wall Street Journal published? Cybersecurity experts warn that EVs will be ripe targets for hackers unless more attention is paid to the risk. I think I'm like most people following the trend of wanting a more eco-friendly environment, but I can't help but worry that electric vehicles are especially vulnerable to cyberattacks. Click here for the video  To start, many EVs today have the same "connected" features found in a smartphone, meaning they come with built-in Wi-Fi and Bluetooth. This means hackers could potentially access the car's systems remotely to control its functions or retrieve data from it. Hackers could also use a car's navigation system to track its movements, or even disable the vehicle completely.Ultimately, there's no way to guarantee an EV won't be hacked, but automakers and security experts can work together to protect against cyber threats and make sure EVs are as safe as possible. As more people switch over to electric vehicles,

6
A
1 year ago
A
Anonymous
asked in ThreatModeler Blogs
What's Needed to Turn Developers into DevSecOps?

“According to an ESG survey, DevOps, without an embedded security process, produces some uncomfortable results. For instance, 45% of software releases didn’t go through any security checks or testing, while 35% of new builds are deployed to production with misconfigurations, vulnerabilities or other security issues.One reason (34%) for these dismal results? Security can’t keep up with the cadence of software releases. To improve these results, something must change, and one impactful change is incorporating continuous threat modeling into the DevOps flow.”Read the rest here.What’s been your experience with DevSecOps and integrating security into development? One good experience I had was working at Automox with a CISO who described himself as “the most business friendly CISO you’re ever going to meet”.  He’s now head of security at Zoom so that strategy has been wonderful for his career.  And it was a pleasure to work with him on company security concerns.Any success or horror stories

6
A
1 year ago
U
Udipt Bhuyan
asked in Got a Question?
AI, Blockchain, and IoT Impacting Cybersecurity!

Emerging technologies such as Artificial Intelligence (AI), Blockchain, and the Internet of Things (IoT) are having a significant impact on the field of Cybersecurity, both in terms of the potential risks and opportunities they present.https://cionews.co.in/implications-of-emerging-technology-on-cybersecurity/

1
Sudhakanta Mohanty
1 year ago
Kristen Canady
Kristen Canady
asked in Water Cooler Talk
Help! I Need Immune System Tips!

It’s that time of year when small children bring home germs...and I’ve been catching every single one! Does anyone have any immune system boosters? Catching every little bug is starting to get a little exhausting! Is there a vitamin combo I don’t know about? Do I need to be doing things above Cloroxing the whole house? Help a threat modeler out!

7
Sudhakanta Mohanty
1 year ago
A
Anonymous
asked in Water Cooler Talk
Do you think this holds true for threat modeling as well?

https://www.jwz.org/blog/2023/02/code-with-swearing-is-better-code/Do you ever put swear words, jokes or easter eggs in your threat model comments? 

5
A
1 year ago
A
Anonymous
asked in Security News
Europe To Tackle Cyber in New Law

https://www.afcea.org/signal-media/cyber-edge/europe-tackle-cyber-new-lawIt looks like they’re planning a two-tiered system of requirements, and tightening up reporting requirements.It’s going to be a messy time for cybersecurity, although on the plus side we’re getting (hopefully) better regulation, and there’s going to be a ton of work to go around for those of us in the field.  This will be the first update to the cybersecurity regulations since 2016.What would you hope to see in the results of this new law?  Any predictions of what’s likely to be in there? 

0
A
1 year ago
Kristen Canady
Kristen Canady
asked in Marketplace Discussion
Threat Model Wish List

What threat model would be the most beneficial for you? Which ones would you like to see in the future? Leave a comment below and we’ll build the models that you don’t have but want! Want to browse the ones currently available? Click here!

0
Kristen Canady
1 year ago
N
nikunj.nagalia
asked in Got a Question?
What about the various methodologies out there?

With threat modeling there needs to be a constant interaction between Risk Management, Regulatory Compliance and modeling the threats. Within Risk Management, and eventually percolated through to threat modeling, several methodologies (i.e. STRIDE, PASTA, CVSS etc.) seemingly exist. How should a threat modeler choose one over the other? Is there a better way club all these methodologies into one concise method of doing threat modeling?

1
Todd
1 year ago
B
becki
asked in Got a Question?
threat statuses

Are there threat statuses, in 5.5, which people do not use and what do they do with them?  Can they be hidden if we never use them? i guess there are 3 we don’t use and I was hoping to clean up the interface.   thanks becki 

1
P
1 year ago
amir.soltanzadeh
amir.soltanzadeh
asked in Got a Question?
Should every Threat have a Security requirement?

Should every Threat have a Security requirement associated with it? If not, how do we go about mitigating a Threat with no Security requirement?

2
Kristen Canady
1 year ago
B
becki
asked in Share your best practices
deactivated users

How are people handling deactivated users?  do you put them in their own department/group?  what do you do with their threat models?  thanks 

6
vaidehirana
2 years ago
B
becki
asked in Share your best practices
emulating directories?

Since ThreatModeler does not support file directories, what are people using to emulate that?  We are adding a read only group, which 99% of my user base is in, to our existing threat models so everyone can see each other’s work and we had a lot of orphaned threat models because the author left the department and we didn’t have a group owner on the threat models.  What this means though, is that suddenly the threat modelers will have a huge glob of threat models, when they first log in and I was hoping to have some organization for them. thanks  

1
M
2 years ago
Terms & ConditionsCookie settings