A brief primer on how to think about threat modeling GenAI applications.
Threat Modelling Cloud Service Providers in 2025
With the US Government acting in an erratic and hostile manner towards its traditional allies, it makes sense for companies not typically subject to US Jurisdiction to reconsider their threat models when using the big three cloud providers. All of them are US-based companies, and all three conduct a substantial amount of business with the US Government.
Public Cloud is the most insecure form of infrastructure, except for all the others.
Sir Winston Churchill, introducing the Universal Cloud Threat Model to the House of Commons, June 1940.
