Post

Uncle Joe
@sydseter.com

True threat modelers don't be usin' no checklists, savvy... They spy 'em out with their trusty spyglasses! And when they be layin' down the cards, they don't waste their breath on soft #games like Solitaire or Sir Tommy! Nay, they be wagerin' their gold on high-stakes plunder like Cornucopia or EoP!

3 reposts3 likes

Uncle Joe
@sydseter.com

Threat Modeling is about exploration, not checkbox compliance. Exploration and innovation happen when playing and exploring like children. Games are an excellent way of sparking the imagination and waking up the brain. So use #games as a way of enhancing learning, collaboration, and innovation.

Uncle Joe
@sydseter.com

The new OWASP Cornucopia 25th anniversary edition contains the OWASP Cornucopia Companion and Website App Edition. The new Expansion comes with 6 suits covering new topics: #Agentic AI (AAI), Automated Threats (BOT), #Cloud (CLD), #Frontend (FRE), Large Language Models ( #LLM), and #DevOps (DVO).

Uncle Joe
@sydseter.com

Read: dev.to/owasp/introducing-a-owasp-game-for-threat-modeling-agentic-ai-cloud-devops-frontend-llm-automation-5984 Play at copi.owasp.org Buy: cybersecgames.com/pages/owasp-cornucopia-threat-modeling-collection Download: github.com/OWASP/cornucopia/releases/tag/v3.0.0

dev.toIntroducing a OWASP Game for threat modeling Agentic AI, Cloud, Devops, Frontend, LLM, Automation, and WebShift-left doesn't start with scanning the code for security vulnerabilities; it begins with...