Nobody's Going To Mess with Our STRIDE

Nobody's Going To Mess with Our STRIDE

Matt, Izar, and Chris take issue with a controversial blog post that criticizes STRIDE as being outdated, time-consuming, and does not help the right people do threat modeling. The post goes on to recommend that LLMs should handle the task. The trio counters these points by highlighting STRIDE's origin, utility, and adaptability. Like any good instrument, it is important to use the right tools in the right context. They also touch upon the common misconceptions about threat modeling, t...

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(117)

An AI Agent Escapes and Attacks. Who Goes to Jail?

An AI Agent Escapes and Attacks. Who Goes to Jail?

OpenAI says the policy window is open and wants binding federal rules for frontier labs, clear incident reporting, and disclosure whenever a model gets around its own security controls. The table asks...

14 Okt 37min

There Is Determinism, Non-Determinism, and My Determinism

There Is Determinism, Non-Determinism, and My Determinism

The Security Table is now the AI Security Table, and the first order of business is naming the AI that gets a seat at it. Then Matt asks what a security engineer actually does once agents are writing ...

7 Okt 41min

When AI Controls The Hardware

When AI Controls The Hardware

Anthropic wants to give AI agents one shared way to run microscopes, liquid handlers, and robotic arms, and the squad cannot agree on whether that is progress or the opening scene of every bad sci fi ...

30 Sep 42min

When Code No Longer Matters

When Code No Longer Matters

If AI can turn a request directly into instructions a chip understands, what is left for a human to review? Chris Romeo, Izar Tarandach, and Matt Coles debate whether readable source code remains esse...

23 Sep 36min

Why AI Cheats To Win

Why AI Cheats To Win

An AI agent publishes a malicious Python package while chasing a capture-the-flag goal. Is that an escape, a supply chain failure, or reward hacking doing exactly what it was encouraged to do? Chris R...

16 Sep 39min

When AI Escapes the Sandbox

When AI Escapes the Sandbox

When a model crosses a sandbox boundary, is the lesson that AI has become malicious or that the boundary was never strong enough? Chris Romeo, Izar Tarandach, and Matt Coles examine the CSA post-morte...

9 Sep 49min

The End of Bug Bounty As We Know It

The End of Bug Bounty As We Know It

If AI can find and validate vulnerabilities faster than people, why would a company keep paying outsiders to report them? Chris Romeo, Izar Tarandach, and Matt Coles start with Linus Torvalds' changin...

5 Aug 42min

Make No Mistakes: Inside the First "Agentic Ransomware"

Make No Mistakes: Inside the First "Agentic Ransomware"

Does adaptive malware prove an LLM is directing an attack, or can a capable script produce the same evidence? Chris Romeo, Izar Tarandach, and Matt Coles examine Sysdig's JADEPUFFER report and its cla...

22 Jul 43min

Populært innen Teknologi

teknisk-sett
energi-og-klima
lydartikler-fra-aftenposten
nasjonal-sikkerhetsmyndighet-nsm
elektropodden
tomprat-med-gunnar-tjomlid
rss-ai-forklart
rss-kunstig-intelligens-med-elisabeth-maren-og-morten
shifter
smart-forklart
fornybaren
pedagogisk-intelligens
rss-alt-som-gar-pa-strom
rss-bak-skyen
rss-alt-vi-kan
teknologimagasinet-aftenposten
rss-hvorfor-ble-det-sann
rss-romnasjonen
kortslutning
rss-ki-praten