Vulnerabilities Are Ingredients And OWASP Top 10 The Seasoning- Meghan Jacquot
summary
Project Zero raw data shows zero days rising and 67% memory corruption in 2021–22, with ~22% variants and ~50% reworked patched bugs; a 30‑day bug‑bounty sample shows injection most frequent. Advice includes root‑cause analysis, applying OpenSSF/AlphaOmega for memory issues, STRIDE and the diamond model for threat mapping, creating mind maps, and adopting threat‑modeling as code. Concrete signals: counts and categories, reproducible exploit writeups, and whether mitigations actually test as fixed determine priority.
AI-written summary · about
chapters (8)
- 0:00Start
- 32:33What is Threat Modeling
- 37:48Diamond Threat Modeling and OWASP
- 38:53Five Stages of Threat Modeling
- 40:06Create the Model
- 41:05Identify Threats
- 41:41Address the Threats
- 45:34Validate the Model
related talks
41mSecurity Vulnerabilities Decomposition: Another Way To Look At Vulnerabilities
39mCVE 101: The Unfolding Of A Zero Day Attack
47mOWASP Top 10
35m0-day In-the-Wild Exploitation in 2022...so far.
43mSecurity Vulnerabilities Decomposition: Another way to look at Vulnerabilities
33m40,000 CVEs and Counting: What 60 Years of AppSec Tells Us About 2026
01h 30mCommon Webapp Vulnerabilities and What to Do About Them
32mBuilding a secure future using DEVSECOPS practices and technologies