Many software organizations are overwhelmed with a laundry list of vulnerabilities. They often have no idea where to start, how to determine prioritization, and whether or not those vulnerabilities accurately represent the threats to our applications, users, and data. Threat modeling is a simple yet effective solution.

This may not be what testers want to hear, but Ingo Philipp is convinced we can't ever answer the question "Did we find all bugs?" It all comes back to the fact that testing can prove the presence of bugs, but not their absence. Here, Ingo explores how we find and fix bugs, as well as the notion of quality assurance.

Downtime doesn’t need to mean unproductive time. It doesn’t have to be spent passively waiting for your next assignment. Instead, you can take advantage of your downtime and use it productively. If you want to maximize your downtime but don’t know where to start, focus on the three P’s: product, process, and people.