iiinova — where your digital self keeps evolving

Stephen Shaffer

@t0sche.infosec.exchange.ap.brid.gy

Engineering risk model-informed decisions. Writing at stephenshaffer.io #infosec #risk #elm 🌉 bridged from ⁂ infosec.exchange/@t0sche, follow @ap.brid.gy to interact

Posts Replies Media

Stephen Shaffer @t0sche.infosec.exchange.ap.brid.gy · 17/08/2026

RE: infosec.exchange/@adulau/1170761984… Couldn’t have imagined a better way for this idea to be picked up and implemented. #Kudos to @circl, @adulau, and @cedric 👏🫶

102

Stephen Shaffer @t0sche.infosec.exchange.ap.brid.gy · 01/11/2025

#EPSS gives us a lens into global exploit pressure. But to further understand our vulnerability risk posture, we need to adjust that pressure through the lens of our own controls — and their measured effectiveness. In my latest blog, I show you how to take EPSS asset-level exploit likelihoods […]

infosec.exchange

Original post on infosec.exchange

000

Reposted by Stephen Shaffer

Simon Zerafa @simonzerafa.infosec.exchange.ap.brid.gy · 26/03/2025

@adamshostack Also:

003

Stephen Shaffer @t0sche.infosec.exchange.ap.brid.gy · 14/03/2025

‼️ On Monday, March 17th 2025, EPSS v4 will be released and replace the current version (v3). ❓ What does this mean? The model is being updated and expanded to include more data sources and is more accurate than v3. The Coverage/Efficiency Curve […] [Original post on infosec.exchange]

000

Stephen Shaffer @t0sche.infosec.exchange.ap.brid.gy · 07/03/2025

Happy to announce I’ll be speaking #VulnCon25 next month. I’ll be chatting about Asset EPSSg, which is a concept that orients you to the exploitation exposure risk at the asset level, rather than the CVE level. More info here […] [Original post on infosec.exchange]

000