Writing tagged: risk
- 2026-03-22
AI agents now exploit real CVEs for under $10. That changes how we should score the likelihood axis in OWASP, CVSS, DREAD, and FAIR risk frameworks.
- 2026-04-19
ISO/SAE 21434 TARA: A Worked Automotive Risk Assessment and Its Limits
A full ISO/SAE 21434 TARA on a telematics backend: all seven Clause 15 activities, then where the method strains and what keeps it alive as the system changes.
- 2026-05-03
DREAD ranks threats by summing five factor scores. A fine way to force an argument about what to fix first, a poor calculator. Worked on a telematics backend.