Microsoft Threat Intelligence Podcast · 2026-07-15 · 60 min
In this episode of the Microsoft Threat Intelligence Podcast, host Sherrod DeGrippo is joined by co-authors Michael Howard, Lee Holmes, and Shawn Hernan for a discussion on their new book, Threat-Driven Software Development: Defending Online Services from Modern Threat Actors. Together, they explore how security teams and software developers can build more resilient systems by understanding how real-world threat actors operate. From threat modeling and operational security to the evolving role of AI in both cyber defense and cybercrime, the conversation examines lessons learned from major security incidents and why secure design must be a priority from the earliest stages of software development. In this episode you’ll learn: Why security should be driven by real-world threat actor behavior How developers can reduce risk through better design and operational practices The role of threat modeling in modern software development Some questions we ask: How did the idea for Threat-Driven Software Development come about? Why is operational security just as important as application security? What do you hope readers take away from this book?
Shifts We Are Seeing Across Social Engineering, Post-Disruption Impact Report88 / 100Casey Ellis on How AI Is Reshaping Vulnerability Research and Patching69 / 100A Farewell from Sherrod: New Season Coming SoonHot Cybercrime Summer: Smishing, Supply Chains, and SleuthconSupply Chain Attacks: Open Source or Open Door?