OWASP Top 10 2025 is going live now at owasp.org/Top10/ New is: A03:2025 Software Supply Chain Failures and… A10:2025 Mishandling of Exceptional Conditions The last one based on assessments done with OWASP SAMM core team members. I can take no credit here whatsoever. Congratulations!

It’s here! Excited to give 2 days of training at the OWASP Global AppSec 2025 conference in DC Nov 4-5!

For those who submitted talks to Boston Code Camp - acceptance emails have been sent. Please check your email and remember to click the link to accept your talk. Full schedule and registration will be published in the coming week. Thanks!

Don’t apologize for designing before coding, it’s called “thinking”.

It’s one week away! Join me at the OWASP Global AppSec Washington, DC Nov 4–5 for: 2-Day Training: Whiteboard Hacking – aka Hands-on #ThreatModeling Register today: owasp.glueup.com/event/131624...

Join @roberthurlbut.bsky.social and @harry.kimpel.com for #Boston .NET Architecture Group #Online meetup: Using .NET #Aspire eShop app to collect telemetry in OpenTelemetry on Wednesday, Oct 15 · 7:00 PM to 8:30 PM EDT #DOTNET www.meetup.com/boston-net-a...

Join me at the OWASP Global AppSec Washington, DC Nov 4–5 for: 2-Day Training: Whiteboard Hacking – aka Hands-on #ThreatModeling This interactive workshop takes teams from theory to practice — how to build security in early instead of bolting it on later. Register: owasp.glueup.com/event/131624...

Boston Code Camp is pleased to announce their 39th free developers conference on November 22, 2025 in Burlington, MA! Please save the date and watch this space and our website, www.bostoncodecamp.com, for more details. Hope to see you there!

Call for Speakers is now OPEN for Boston Code Camp this Nov 22nd! Share your knowledge and build your speaking experience at this friendly event. All software technologies are welcome - sign up for a 30 or 60 minute session at buff.ly/3ZTIQAS. #SharingIsCaring

I look forward to speaking on this topic - combining my daily work in #ThreatModeling at Toreon with my studies as a PhD candidate in #SpaceCybersecurity at @capitoltech.bsky.social

From #blackgirlshack: Join us Sept 25 at 1:00 PM ET for Bring a Hacker to Work Day with @Robert Hurlbut of Toreon! He’ll share insights from his article "Space Cybersecurity and Threat Modeling" and discuss how to protect critical space systems. 👉 Register here: blackgirlshack.org/event-6337943

Its been a great two days of giving training at @blueteamcon.com on #ThreatModeling! Now to also enjoy some sessions at the conference this weekend.

The 2025 Blue Team Con Opening Ceremonies begin in 30 minutes - make your way to Talk Track 1 and buckle up!

Registration for my "#ThreatModeling for Defenders" training at @BlueTeamCon in Chicago (happening NEXT week - September 4-7, my workshop training on September 4-5) is ending in a few days on August 31. If you haven't done so yet but thought about it, register soon! #SecureByDesign

🍎 Training Highlight : Hands-on Threat Modeling for Defenders Roberthurlbut.bsky.social will teach you to identify threats and reduce risks in a hands-on environment and tackle challenges like modeling threats for AI-driven systems and applying the MITRE ATT&CK framework. buff.ly/ORnmBxO

DC's Next Top Threat Model is back for @defcon.bsky.social 33!! Visit threatmodel.us for more details. #DEFCON #DEFCON33 #appsec #threatmodeling #security

Learn more about this year's training, Whiteboard Hacking – aka Hands-on Threat Modeling for Defenders, from its presenter @roberthurlbut.bsky.social! Read the abstract and get tickets here: blueteamcon.com/directory/wh...

Join @roberthurlbut.bsky.social and #Boston .NET Architecture Group #Online meetup: Agentic Engineering Wednesday, July 16, 2025 6:30 PM to 8:00 PM EDT #AI #DOTNET www.meetup.com/boston-net-a...

Blue Team Con 2025 tickets are NOW AVAILABLE!! Get access to the ONLY cybersecurity conference for defenders here: blueteamcon.eventbrite.com

Fabulous turnout for Boston Code Camp 38! We're off to a great start! #boscc

Thank you, Boston Code Camp 38 (@boscc.bsky.social), for a great conference today! #boscc #boscc38 Here are the slides for my talk: “Developing a Threat Modeling Mindset” roberthurlbut.com/r/BCC38

Boston Code Camp is thrilled that Robert Hurlbut will present "Developing a Threat Modeling Mindset" at this March 29th event! Register now at bit.ly/bcc38 #boscc @roberthurlbut.bsky.social

✔️ If you submitted a talk for Boston Code Camp - please check your email for a link to confirm your session, we need to finalize the schedule very soon. Thanks!

Boston Code Camp, the legendary free developer's conference, is coming up this March 29. Call for speakers is open now thru Feb 21, please submit your 30 or 60 minute talk! buff.ly/3E0ZwX3 #boscc #SharingIsCaring

Boston Code Camp session submissions are open through Friday, February 21 at 6:01pm ET. If you'd like to share at this great community event, please submit! It's very friendly for new speakers; a great way to get started with public speaking!

Boston Code Camp 38 will be held on Saturday, March 29th, 2205 - more to follow

Thanks to all who attended my #ThreatModeling Workshop yesterday morning! Slides are posted to my GitHub repo for CodeMash2025. #codemash2025 #codemash @codemash.bsky.social

My "Hands-On Threat Modeling Workshop" Pre-Compiler for CodeMash 2025 (@codemash.bsky.social) is almost a week away (January 14, 2025 - 8:00 AM—12:00 PM ET—4 hours). I look forward to seeing you there!

Just got the bad news that my client is cutting budgets and all contracts are not being renewed, so I'll be available to start work in the New Year I'm a Senior Contract .NET C#/F# Engineer with 15 years experience, comfortable working across AWS and Azure. RT's appreciated!

#FF @d0rkph0enix @r0wdy_ @roberthurlbut @joe_carson @TaelurAlexis @Bellebytes @codingo_ @Narayani07 @damienjburks

🚀 Calling all Speakers! 🚀 Don't miss out on this thrilling opportunity to submit your paper for the 2025 #OWASP Global #AppSec EU Call for Presentations. Share your knowledge with the #cybersecurity community and shine a light on your skills. Take action now! sessionize.com/owasp...

Definitely check this out if you haven't already. Besides Tanya's chapter you'll find one from @adamshostack.bsky.social and @izart.bsky.social too.

There are two stages of a security career: Before you know the truth of what you read in the news on an incident, and after, when you know exactly what happened and can't say a single fucking thing.

Top #infosec job tip Learn to scream on the inside really early on.

go.bsky.app/RpHnAcy #threatmodeling #securebydesign

I'm pleased to release our latest whitepaper, Understanding the Four Question Framework for Threat Modeling! It’s free as part of our Black Friday sale, and uhhh, because we like sharing knowledge it’ll remain free. shostack.org/whitepapers/...

Public library energy is the best energy. Like here is all the knowledge we could find, it's been meticulously organized and vetted and it will cost you nothing today, welcome to the absolute pinnacle of human civic evolution, feel free to pull up any bean bag chair you like

CWE stands for Common Weakness Enumeration. It is a community-developed list of software and hardware weakness types that can serve as a common language for describing, sharing,... #security #cwe #cvss #securecoding svenruppert.com/2024/01/10/w...

I'm seeing a lot of bad digital security advice out there right now. I'm begging you, for the love of God, if you are trying to tighten up your digital security, please start with threat modeling: ssd.eff.org/module/your-...

Sharing news from the team that brought the Threat Modeling Manifesto - a set of capabilities for helping individuals and organizations create or optimize a threat modeling program. www.threatmodelingmanifesto.org/capabilities/ #threatmodeling #securitybydesign #privacybydesign