Robert Hurlbut
@roberthurlbut.bsky.social
Principal #ProdSec Architect / #ThreatModeling Trainer @ Toreon. PhD in Space Cybersecurity candidate at Capitol Technology University, MS MVP, Co-host of Application Security Podcast
Reposted by Robert Hurlbut
OWASP Top 10 2025 is going live now at owasp.org/Top10/
New is:
A03:2025 Software Supply Chain Failures
and…
A10:2025 Mishandling of Exceptional Conditions
The last one based on assessments done with OWASP SAMM core team members. I can take no credit here whatsoever. Congratulations!
New is:
A03:2025 Software Supply Chain Failures
and…
A10:2025 Mishandling of Exceptional Conditions
The last one based on assessments done with OWASP SAMM core team members. I can take no credit here whatsoever. Congratulations!
November 6, 2025 at 7:02 PM
OWASP Top 10 2025 is going live now at owasp.org/Top10/
New is:
A03:2025 Software Supply Chain Failures
and…
A10:2025 Mishandling of Exceptional Conditions
The last one based on assessments done with OWASP SAMM core team members. I can take no credit here whatsoever. Congratulations!
New is:
A03:2025 Software Supply Chain Failures
and…
A10:2025 Mishandling of Exceptional Conditions
The last one based on assessments done with OWASP SAMM core team members. I can take no credit here whatsoever. Congratulations!
It’s here!
Excited to give 2 days of training at the OWASP Global AppSec 2025 conference in DC Nov 4-5!
Excited to give 2 days of training at the OWASP Global AppSec 2025 conference in DC Nov 4-5!
It’s one week away!
Join me at the OWASP Global AppSec Washington, DC Nov 4–5 for:
2-Day Training: Whiteboard Hacking – aka Hands-on #ThreatModeling
Register today: owasp.glueup.com/event/131624...
Join me at the OWASP Global AppSec Washington, DC Nov 4–5 for:
2-Day Training: Whiteboard Hacking – aka Hands-on #ThreatModeling
Register today: owasp.glueup.com/event/131624...
November 4, 2025 at 10:15 AM
It’s here!
Excited to give 2 days of training at the OWASP Global AppSec 2025 conference in DC Nov 4-5!
Excited to give 2 days of training at the OWASP Global AppSec 2025 conference in DC Nov 4-5!
Reposted by Robert Hurlbut
For those who submitted talks to Boston Code Camp - acceptance emails have been sent. Please check your email and remember to click the link to accept your talk. Full schedule and registration will be published in the coming week. Thanks!
October 25, 2025 at 3:27 PM
For those who submitted talks to Boston Code Camp - acceptance emails have been sent. Please check your email and remember to click the link to accept your talk. Full schedule and registration will be published in the coming week. Thanks!
Reposted by Robert Hurlbut
Don’t apologize for designing before coding, it’s called “thinking”.
October 29, 2025 at 7:06 AM
Don’t apologize for designing before coding, it’s called “thinking”.
It’s one week away!
Join me at the OWASP Global AppSec Washington, DC Nov 4–5 for:
2-Day Training: Whiteboard Hacking – aka Hands-on #ThreatModeling
Register today: owasp.glueup.com/event/131624...
Join me at the OWASP Global AppSec Washington, DC Nov 4–5 for:
2-Day Training: Whiteboard Hacking – aka Hands-on #ThreatModeling
Register today: owasp.glueup.com/event/131624...
October 28, 2025 at 10:51 AM
It’s one week away!
Join me at the OWASP Global AppSec Washington, DC Nov 4–5 for:
2-Day Training: Whiteboard Hacking – aka Hands-on #ThreatModeling
Register today: owasp.glueup.com/event/131624...
Join me at the OWASP Global AppSec Washington, DC Nov 4–5 for:
2-Day Training: Whiteboard Hacking – aka Hands-on #ThreatModeling
Register today: owasp.glueup.com/event/131624...
Reposted by Robert Hurlbut
Join @roberthurlbut.bsky.social and @harry.kimpel.com for #Boston .NET Architecture Group #Online meetup: Using .NET #Aspire eShop app to collect telemetry in OpenTelemetry on Wednesday, Oct 15 · 7:00 PM to 8:30 PM EDT #DOTNET www.meetup.com/boston-net-a...
Using .NET Aspire eShop app to collect telemetry in OpenTelemetry (Harry Kimpel), Wed, Oct 15, 2025, 7:00 PM | Meetup
**NOTE: Special meeting time - 7:00 PM ET (instead of 6:30 PM ET for this meeting only).**
**Title:**
Using .NET Aspire eShop application to collect all the telemetry in a
www.meetup.com
October 11, 2025 at 6:56 PM
Join @roberthurlbut.bsky.social and @harry.kimpel.com for #Boston .NET Architecture Group #Online meetup: Using .NET #Aspire eShop app to collect telemetry in OpenTelemetry on Wednesday, Oct 15 · 7:00 PM to 8:30 PM EDT #DOTNET www.meetup.com/boston-net-a...
Join me at the OWASP Global AppSec Washington, DC Nov 4–5 for:
2-Day Training: Whiteboard Hacking – aka Hands-on #ThreatModeling
This interactive workshop takes teams from theory to practice — how to build security in early instead of bolting it on later.
Register: owasp.glueup.com/event/131624...
2-Day Training: Whiteboard Hacking – aka Hands-on #ThreatModeling
This interactive workshop takes teams from theory to practice — how to build security in early instead of bolting it on later.
Register: owasp.glueup.com/event/131624...
October 7, 2025 at 12:29 PM
Join me at the OWASP Global AppSec Washington, DC Nov 4–5 for:
2-Day Training: Whiteboard Hacking – aka Hands-on #ThreatModeling
This interactive workshop takes teams from theory to practice — how to build security in early instead of bolting it on later.
Register: owasp.glueup.com/event/131624...
2-Day Training: Whiteboard Hacking – aka Hands-on #ThreatModeling
This interactive workshop takes teams from theory to practice — how to build security in early instead of bolting it on later.
Register: owasp.glueup.com/event/131624...
Reposted by Robert Hurlbut
Boston Code Camp is pleased to announce their 39th free developers conference on November 22, 2025 in Burlington, MA! Please save the date and watch this space and our website, www.bostoncodecamp.com, for more details.
Hope to see you there!
Hope to see you there!
September 5, 2025 at 9:08 PM
Boston Code Camp is pleased to announce their 39th free developers conference on November 22, 2025 in Burlington, MA! Please save the date and watch this space and our website, www.bostoncodecamp.com, for more details.
Hope to see you there!
Hope to see you there!
Reposted by Robert Hurlbut
Call for Speakers is now OPEN for Boston Code Camp this Nov 22nd! Share your knowledge and build your speaking experience at this friendly event. All software technologies are welcome - sign up for a 30 or 60 minute session at buff.ly/3ZTIQAS. #SharingIsCaring
Present - Boston Code Camp
Submit a Session
buff.ly
September 23, 2025 at 3:59 PM
Call for Speakers is now OPEN for Boston Code Camp this Nov 22nd! Share your knowledge and build your speaking experience at this friendly event. All software technologies are welcome - sign up for a 30 or 60 minute session at buff.ly/3ZTIQAS. #SharingIsCaring
I look forward to speaking on this topic - combining my daily work in #ThreatModeling at Toreon with my studies as a PhD candidate in #SpaceCybersecurity at @capitoltech.bsky.social
From
#blackgirlshack:
Join us Sept 25 at 1:00 PM ET for Bring a Hacker to Work Day with @Robert Hurlbut of Toreon! He’ll share insights from his article "Space Cybersecurity and Threat Modeling" and discuss how to protect critical space systems.
👉 Register here: blackgirlshack.org/event-6337943
#blackgirlshack:
Join us Sept 25 at 1:00 PM ET for Bring a Hacker to Work Day with @Robert Hurlbut of Toreon! He’ll share insights from his article "Space Cybersecurity and Threat Modeling" and discuss how to protect critical space systems.
👉 Register here: blackgirlshack.org/event-6337943
September 12, 2025 at 3:41 PM
I look forward to speaking on this topic - combining my daily work in #ThreatModeling at Toreon with my studies as a PhD candidate in #SpaceCybersecurity at @capitoltech.bsky.social
From
#blackgirlshack:
Join us Sept 25 at 1:00 PM ET for Bring a Hacker to Work Day with @Robert Hurlbut of Toreon! He’ll share insights from his article "Space Cybersecurity and Threat Modeling" and discuss how to protect critical space systems.
👉 Register here: blackgirlshack.org/event-6337943
#blackgirlshack:
Join us Sept 25 at 1:00 PM ET for Bring a Hacker to Work Day with @Robert Hurlbut of Toreon! He’ll share insights from his article "Space Cybersecurity and Threat Modeling" and discuss how to protect critical space systems.
👉 Register here: blackgirlshack.org/event-6337943
September 12, 2025 at 3:40 PM
From
#blackgirlshack:
Join us Sept 25 at 1:00 PM ET for Bring a Hacker to Work Day with @Robert Hurlbut of Toreon! He’ll share insights from his article "Space Cybersecurity and Threat Modeling" and discuss how to protect critical space systems.
👉 Register here: blackgirlshack.org/event-6337943
#blackgirlshack:
Join us Sept 25 at 1:00 PM ET for Bring a Hacker to Work Day with @Robert Hurlbut of Toreon! He’ll share insights from his article "Space Cybersecurity and Threat Modeling" and discuss how to protect critical space systems.
👉 Register here: blackgirlshack.org/event-6337943
Its been a great two days of giving training at @blueteamcon.com on #ThreatModeling! Now to also enjoy some sessions at the conference this weekend.
September 6, 2025 at 1:40 PM
Its been a great two days of giving training at @blueteamcon.com on #ThreatModeling! Now to also enjoy some sessions at the conference this weekend.
Reposted by Robert Hurlbut
The 2025 Blue Team Con Opening Ceremonies begin in 30 minutes - make your way to Talk Track 1 and buckle up!
September 6, 2025 at 1:31 PM
The 2025 Blue Team Con Opening Ceremonies begin in 30 minutes - make your way to Talk Track 1 and buckle up!
Registration for my "#ThreatModeling for Defenders" training at @BlueTeamCon in Chicago (happening NEXT week - September 4-7, my workshop training on September 4-5) is ending in a few days on August 31.
If you haven't done so yet but thought about it, register soon!
#SecureByDesign
If you haven't done so yet but thought about it, register soon!
#SecureByDesign
🍎 Training Highlight : Hands-on Threat Modeling for Defenders
Roberthurlbut.bsky.social will teach you to identify threats and reduce risks in a hands-on environment and tackle challenges like modeling threats for AI-driven systems and applying the MITRE ATT&CK framework.
buff.ly/ORnmBxO
Roberthurlbut.bsky.social will teach you to identify threats and reduce risks in a hands-on environment and tackle challenges like modeling threats for AI-driven systems and applying the MITRE ATT&CK framework.
buff.ly/ORnmBxO
August 27, 2025 at 4:55 PM
Registration for my "#ThreatModeling for Defenders" training at @BlueTeamCon in Chicago (happening NEXT week - September 4-7, my workshop training on September 4-5) is ending in a few days on August 31.
If you haven't done so yet but thought about it, register soon!
#SecureByDesign
If you haven't done so yet but thought about it, register soon!
#SecureByDesign
Reposted by Robert Hurlbut
🍎 Training Highlight : Hands-on Threat Modeling for Defenders
Roberthurlbut.bsky.social will teach you to identify threats and reduce risks in a hands-on environment and tackle challenges like modeling threats for AI-driven systems and applying the MITRE ATT&CK framework.
buff.ly/ORnmBxO
Roberthurlbut.bsky.social will teach you to identify threats and reduce risks in a hands-on environment and tackle challenges like modeling threats for AI-driven systems and applying the MITRE ATT&CK framework.
buff.ly/ORnmBxO
July 30, 2025 at 5:01 PM
🍎 Training Highlight : Hands-on Threat Modeling for Defenders
Roberthurlbut.bsky.social will teach you to identify threats and reduce risks in a hands-on environment and tackle challenges like modeling threats for AI-driven systems and applying the MITRE ATT&CK framework.
buff.ly/ORnmBxO
Roberthurlbut.bsky.social will teach you to identify threats and reduce risks in a hands-on environment and tackle challenges like modeling threats for AI-driven systems and applying the MITRE ATT&CK framework.
buff.ly/ORnmBxO
Reposted by Robert Hurlbut
DC's Next Top Threat Model is back for @defcon.bsky.social 33!! Visit threatmodel.us for more details.
#DEFCON #DEFCON33 #appsec #threatmodeling #security
#DEFCON #DEFCON33 #appsec #threatmodeling #security
July 26, 2025 at 4:10 AM
DC's Next Top Threat Model is back for @defcon.bsky.social 33!! Visit threatmodel.us for more details.
#DEFCON #DEFCON33 #appsec #threatmodeling #security
#DEFCON #DEFCON33 #appsec #threatmodeling #security
Reposted by Robert Hurlbut
Learn more about this year's training, Whiteboard Hacking – aka Hands-on Threat Modeling for Defenders, from its presenter @roberthurlbut.bsky.social!
Read the abstract and get tickets here: blueteamcon.com/directory/wh...
Read the abstract and get tickets here: blueteamcon.com/directory/wh...
July 19, 2025 at 4:03 PM
Learn more about this year's training, Whiteboard Hacking – aka Hands-on Threat Modeling for Defenders, from its presenter @roberthurlbut.bsky.social!
Read the abstract and get tickets here: blueteamcon.com/directory/wh...
Read the abstract and get tickets here: blueteamcon.com/directory/wh...
Reposted by Robert Hurlbut
Join @roberthurlbut.bsky.social and #Boston .NET Architecture Group #Online meetup: Agentic Engineering Wednesday, July 16, 2025
6:30 PM to 8:00 PM EDT #AI #DOTNET www.meetup.com/boston-net-a...
6:30 PM to 8:00 PM EDT #AI #DOTNET www.meetup.com/boston-net-a...
(Online) Agentic Engineering (Speaker: Igor Moochnick), Wed, Jul 16, 2025, 6:30 PM | Meetup
**Title:**
Agentic Engineering
**Abstract:**
Continuing the discussion about AI and software architecture started last month, we have Igor Moochnick speaking to the group.
www.meetup.com
July 12, 2025 at 6:18 PM
Join @roberthurlbut.bsky.social and #Boston .NET Architecture Group #Online meetup: Agentic Engineering Wednesday, July 16, 2025
6:30 PM to 8:00 PM EDT #AI #DOTNET www.meetup.com/boston-net-a...
6:30 PM to 8:00 PM EDT #AI #DOTNET www.meetup.com/boston-net-a...
Reposted by Robert Hurlbut
Blue Team Con 2025 tickets are NOW AVAILABLE!!
Get access to the ONLY cybersecurity conference for defenders here: blueteamcon.eventbrite.com
Get access to the ONLY cybersecurity conference for defenders here: blueteamcon.eventbrite.com
June 3, 2025 at 5:07 PM
Blue Team Con 2025 tickets are NOW AVAILABLE!!
Get access to the ONLY cybersecurity conference for defenders here: blueteamcon.eventbrite.com
Get access to the ONLY cybersecurity conference for defenders here: blueteamcon.eventbrite.com
Thank you, Boston Code Camp 38 (@boscc.bsky.social), for a great conference today! #boscc #boscc38
Here are the slides for my talk:
“Developing a Threat Modeling Mindset”
roberthurlbut.com/r/BCC38
Here are the slides for my talk:
“Developing a Threat Modeling Mindset”
roberthurlbut.com/r/BCC38
roberthurlbut.com
March 29, 2025 at 5:32 PM
Thank you, Boston Code Camp 38 (@boscc.bsky.social), for a great conference today! #boscc #boscc38
Here are the slides for my talk:
“Developing a Threat Modeling Mindset”
roberthurlbut.com/r/BCC38
Here are the slides for my talk:
“Developing a Threat Modeling Mindset”
roberthurlbut.com/r/BCC38
Reposted by Robert Hurlbut
Boston Code Camp is thrilled that Robert Hurlbut will present "Developing a Threat Modeling Mindset" at this March 29th event! Register now at bit.ly/bcc38 #boscc
@roberthurlbut.bsky.social
@roberthurlbut.bsky.social
March 17, 2025 at 1:38 PM
Boston Code Camp is thrilled that Robert Hurlbut will present "Developing a Threat Modeling Mindset" at this March 29th event! Register now at bit.ly/bcc38 #boscc
@roberthurlbut.bsky.social
@roberthurlbut.bsky.social
Reposted by Robert Hurlbut
✔️ If you submitted a talk for Boston Code Camp - please check your email for a link to confirm your session, we need to finalize the schedule very soon. Thanks!
February 24, 2025 at 3:01 PM
✔️ If you submitted a talk for Boston Code Camp - please check your email for a link to confirm your session, we need to finalize the schedule very soon. Thanks!
Reposted by Robert Hurlbut
Boston Code Camp, the legendary free developer's conference, is coming up this March 29. Call for speakers is open now thru Feb 21, please submit your 30 or 60 minute talk! buff.ly/3E0ZwX3 #boscc #SharingIsCaring
Present - Boston Code Camp
Submit a Session
bit.ly
February 1, 2025 at 7:17 PM
Boston Code Camp, the legendary free developer's conference, is coming up this March 29. Call for speakers is open now thru Feb 21, please submit your 30 or 60 minute talk! buff.ly/3E0ZwX3 #boscc #SharingIsCaring
Reposted by Robert Hurlbut
Boston Code Camp session submissions are open through Friday, February 21 at 6:01pm ET. If you'd like to share at this great community event, please submit! It's very friendly for new speakers; a great way to get started with public speaking!
Present - Boston Code Camp
Submit a Session
buff.ly
January 18, 2025 at 10:56 PM
Boston Code Camp session submissions are open through Friday, February 21 at 6:01pm ET. If you'd like to share at this great community event, please submit! It's very friendly for new speakers; a great way to get started with public speaking!