Sign in

KB

@kbala.bsky.social
104 followers 91 following 27 posts

Enabling shift-left security practices! Member CTO-Club-NY

PostsRepliesMedia
KB @kbala.bsky.social · 22/09/2026
kbala97.github.io/CyberTechHea... @microsoft.com
kbala97.github.io
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Could a good old STRIDE-based threat modeling approach have caught this?
010
KB @kbala.bsky.social · 15/09/2026
kbala97.github.io/CyberTechHea... @nodejs.org
kbala97.github.io
AI Speed is Security’s biggest adversary
Impossible to keep up with emergency reactive mode. Threatmodelling proactively is a critical need in a post-Mythos post-Astra world!
000
KB @kbala.bsky.social · 16/08/2026
Read my 6th book on Threat Modeling: A Convenient Guide to Starting You on Threat Modeling by @bogo.hapyyr.com.ap.brid.gy An excellent quick guidebook to getting started with Threat Modeling. A handbook to create, build and learn quickly. kbala97.github.io/CyberTechHea...
kbala97.github.io
A Convenient Guide to Starting You On Threat Modeling
An excellent quick guidebook to getting started with Threat Modeling. A handbook to get started, build and learn quickly.
010
KB @kbala.bsky.social · 24/07/2026
Threat Modeling in Modern Software Engineering by Max Shelton Read my 5th book on threatmodeling: An excellent book that expands the foundations of continuous threat modeling while addressing the growing impact of LLMs and AI. kbala97.github.io/CyberTechHea...
kbala97.github.io
Threat Modeling in Modern Software Engineering
Excellent book that expands the foundations of continuous threat modeling while addressing the growing impact of LLMs and AI. It walks through multiple methodologies with practical, real‑world use cas...
010
Reposted by KB
Cynthia Brumfield @metacurity.com · 17/07/2026
See my piece from two months ago www.csoonline.com/article/4170...
csoonline.com
What happens when China’s AI catches up to Mythos?
As Washington and Beijing meet this week, the gap between American and Chinese AI is narrowing — and the technology that could destabilize the world’s digital infrastructure is leaking out with potent...
031
KB @kbala.bsky.social · 15/07/2026
Context bombs and the evolving defense against autonomous AI agents. A fascinating shift in how we think about defending systems from increasingly capable autonomous threats. Read more here: kbala97.github.io/CyberTechHea...
kbala97.github.io
Cyber Technology and Health
020
Reposted by KB
Taylor Lorenz @taylorlorenz.bsky.social · 27/06/2026
RIP Om Malik 💔
tormentnexus.substack.com
Om Malik 1966-2026
(Note: This is a special edition of The Torment Nexus, dedicated to my friend Om Malik, who passed away due to congestive heart failure at the age of 59.
27514
KB @kbala.bsky.social · 24/06/2026
We're excited to introduce ThreatModeler® Nexus™: The agentic threat modeling platform built for the realities of an AI-driven world. @threatmodeler.bsky.social ThreatModeler Nexus enables continuous Agentic threat modeling! www.linkedin.com/feed/update/...
linkedin.com
We're excited to introduce ThreatModeler® Nexus™. The agentic threat modeling platform built for the realities of an AI-driven world. AI can find vulnerabilities faster than ever. The challenge ...
We're excited to introduce ThreatModeler® Nexus™. The agentic threat modeling platform built for the realities of an AI-driven world. AI can find vulnerabilities faster than ever. The challenge now ...
010
KB @kbala.bsky.social · 15/06/2026
Anthropic's Claude Mythos makes the need for threatmodeling more critical: Providing best practices to product teams on architectural patterns and anti-patterns to secure your system by design. The old adage “Prevention is better than cure” very much applies here! kbala97.github.io/CyberTechHea...
kbala97.github.io
Anthropic’s Claude Mythos and the need for threat modeling
Claude Mythos makes the need for threatmodeling even more critical: Providing best practice guidelines to product teams on architectural patterns and anti-patterns to secure your system by design. The...
010
Reposted by KB
Metropolitan Transportation Authority @mta.info · 14/06/2026
KNICKS IN FIVE! Congratulations, New York Knicks 🏆
Last stop: NBA Champions! Congratulations New York Knicks!
9527101
KB @kbala.bsky.social · 19/04/2026
Read my 4th book on Threat Modeling - "Threat Modeling: A Practical Guide for Development Teams" by Izar and Matthew @threatmodeling.dev and @matthewcole.bsky.social is very relevant now given the new and exponentially large attack vectors with agentic-AI systems! kbala97.github.io/CyberTechHea...
kbala97.github.io
Books
010
KB @kbala.bsky.social · 13/03/2026
"Mastering Threat Modeling: A Comprehensive Guide To Identifying And Mitigating Risks" is a great book by Pramod Kumar. It walks the reader through history, core concepts, risk assessment, use cases and the future of threat modeling. Well written! kbala97.github.io/CyberTechHea...
kbala97.github.io
Books
011
KB @kbala.bsky.social · 31/01/2026
"Threat Modeling: Designing for Security" is an excellent book by @adamshostack.bsky.social that begins with an introductory perspective and gradually builds toward more complex concepts, supported by real-world examples. Overall, a well written, enjoyable read. kbala97.github.io/CyberTechHea...
kbala97.github.io
Books
011
KB @kbala.bsky.social · 09/01/2026
Creates the number 1 Threat Modeling company focused on secure by design!
010
Reposted by KB
TechCrunch @techcrunch.com · 26/12/2025
The very best reporting and investigative journalism from our friends at other publications.
techcrunch.com
These are the cybersecurity stories we were jealous of in 2025 | TechCrunch
The very best reporting and investigative journalism from our friends at other publications.
0246
KB @kbala.bsky.social · 21/12/2025
I had the pleasure and good fortune of collaborating with Jon on a board of a company. I have no doubt Jon will continue to influence our world!!
010
KB @kbala.bsky.social · 06/12/2025
copilot.microsoft.com/shares/JTTxc...
copilot.microsoft.com
What were the 10.0 score CVSS announced recently?
Shared via Copilot
000
KB @kbala.bsky.social · 20/11/2025
Cloudflare’s outage root cause is well explained here: Prince (CEO) explained that a feature file doubled in size. The larger-than-expected feature file was then propagated to all the machines that make up our network.” arstechnica.com/tech-policy/...
arstechnica.com
Massive Cloudflare outage was triggered by file that suddenly doubled in size
“I worry this is the big botnet flexing,” CEO said. But outage was self-inflicted.
000
KB @kbala.bsky.social · 18/11/2025
OWASP’s 2025 Wake-Up Call: Why Broken Access Control Still Haunts Web Security November 18, 2025 OWASP’s 2025 findings show broken access control remains one of the most persistent and damaging web security problems. kbala97.github.io/CyberTechHea...
kbala97.github.io
Cyber Technology and Health
010
KB @kbala.bsky.social · 04/09/2025
The Security Vulnerabilities to Watch For When You’re Vibe Coding: This article discusses common security vulnerabilities developers should be aware of when “vibe coding”—coding quickly without strict adherence to best practices. @harryguinness.bsky.social kbala97.github.io/CyberTechHea...
kbala97.github.io
Cyber Technology and Health
010
KB @kbala.bsky.social · 28/08/2025
Separating AI Hope from AI Hype: If you believe the hype, AI will soon take all our jobs, or solve all our problems, or destroy all boundaries between reality and lies. This brilliant podcast by @randomwalker.bsky.social Arvind Narayanan will help sort that out. kbala97.github.io/CyberTechHea...
kbala97.github.io
Cyber Technology and Health
010
KB @kbala.bsky.social · 13/08/2025
Why Good Security Fails: The Asymmetry of InfoSec Investment A paradox of security is that when you have invested appropriately and have less incidents, someone will ask: “Why are we spending on security when we don’t have any issues?" @philvenables.bsky.social kbala97.github.io/CyberTechHea...
kbala97.github.io
Cyber Technology and Health
010
KB @kbala.bsky.social · 10/08/2025
The Art of Selling as an Engineer: What Does a Solutions Architect Do? A great podcast to learn about what a “Solutions Architect” does and brings value! As always, a great podcast from Daliani Liu. kbala97.github.io/CyberTechHea...
kbala97.github.io
Cyber Technology and Health
020
KB @kbala.bsky.social · 03/08/2025
What are AI Foundational Models? The current wave in AI is replacing task-specific models with those that are trained on a broad set of unlabeled data that can be used for different tasks, with minimal fine-tuning. kbala97.github.io/CyberTechHea...
kbala97.github.io
Cyber Technology and Health
010
KB @kbala.bsky.social · 26/07/2025
AI Tools Make development Slower for Senior Open-Source Developers: AI tools take 19% longer to complete tasks compared to those working without AI assistance. A lot of nuances to this very interesting study. kbala97.github.io/CyberTechHea...
kbala97.github.io
Cyber Technology and Health
010
KB @kbala.bsky.social · 20/07/2025
Input Validation Vulnerabilities Dominate MITRE’s 2024 CWE Top 25 List kbala97.github.io/CyberTechHea...
kbala97.github.io
Cyber Technology and Health
010
Reposted by KB
Cynthia Brumfield @metacurity.com · 27/06/2025
A year after the CrowdStrike incident spawned BSODs across the world, in July, Microsoft will roll out its Windows endpoint security platform to allow Windows solutions to run outside the kernel, hopefully eliminating the chance of such an incident again. redmondmag.com/articles/202...
redmondmag.com
Microsoft Readies Multiple Security Updates in Name of Windows 'Resiliency' -- Redmondmag.com
Seven months after unveiling its Windows Resiliency Initiative (WRI), Microsoft on Thursday announced a raft of new and upcoming security capabilities.
044
KB @kbala.bsky.social · 21/06/2025
Finished reading a great book by Brook Shoenfield on "Threat Modeling" to secure systems early during the design phase and Shifting-Left on cybersecurity in the product lifecycle. kbala97.github.io/CyberTechHea...
kbala97.github.io
Securing Systems: Applied Security Architecture and Threat Models
An excellent introduction to security architecture and threat modeling, this book provides practical insights into designing secure systems. It covers essential concepts and methodologies that are cru...
010
Reposted by KB
Joseph Frusci @theaveragejoe.org · 14/12/2024
How NAT works?
0113
Reposted by KB
Joseph Frusci @theaveragejoe.org · 06/12/2024
#Cybersecurity attack vectors.
1163
KB @kbala.bsky.social · 29/11/2024
Super creative!
010