# Latest **URL:** https://threatmodelingconnect.discourse.group/latest.md?page=1 [Latest](https://threatmodelingconnect.discourse.group/latest.md) · [Categories](https://threatmodelingconnect.discourse.group/categories.md) · [Tags](https://threatmodelingconnect.discourse.group/tags.md) **Page:** 2 --- ## [Virtual meetup summary TMC DACH 1st anniversary: Vibestagram - the vibe coding experiment](https://threatmodelingconnect.discourse.group/t/virtual-meetup-summary-tmc-dach-1st-anniversary-vibestagram-the-vibe-coding-experiment/1230)
**Author:** [@Laxarella](https://threatmodelingconnect.discourse.group/u/Laxarella)\ **Replies:** 1\ **Last updated:** [March 19, 2026, 8:50pm UTC](https://threatmodelingconnect.discourse.group/t/virtual-meetup-summary-tmc-dach-1st-anniversary-vibestagram-the-vibe-coding-experiment/1230 "2026-03-19T20:50:10Z")
:gb: See :de: Bericht vom TMC DACH Geburtstag und „Vibestagram“: KI‑gestütztes Coding Experiment und Security‑Erfahrungen (TMC DACH) Kontext Beim virtuellen Termin von TMC DACH am 18.03.26 nahmen rund 25 Personen t… --- ## [Project G.H.O.S.T – Multi‑Layer Threat Modeling for Modern Game Ecosystems](https://threatmodelingconnect.discourse.group/t/project-g-h-o-s-t-multi-layer-threat-modeling-for-modern-game-ecosystems/1227)
**Author:** [@Hari](https://threatmodelingconnect.discourse.group/u/Hari)\ **Replies:** 1\ **Last updated:** [March 11, 2026, 8:49am UTC](https://threatmodelingconnect.discourse.group/t/project-g-h-o-s-t-multi-layer-threat-modeling-for-modern-game-ecosystems/1227 "2026-03-11T08:49:23Z")
Project G.H.O.S.T introduces a first‑of‑its‑kind, multi‑layer threat modeling framework designed specifically for modern online gaming ecosystems. Unlike traditional models that isolate risk into technical or behavioral … --- ## [Hackathon 26 - 3rd place AAR](https://threatmodelingconnect.discourse.group/t/hackathon-26-3rd-place-aar/1222)
**Author:** [@takotako](https://threatmodelingconnect.discourse.group/u/takotako)\ **Replies:** 3\ **Last updated:** [March 6, 2026, 1:33am UTC](https://threatmodelingconnect.discourse.group/t/hackathon-26-3rd-place-aar/1222 "2026-03-06T01:33:22Z")
(repost of Threat Model - Hackathon 26 - 3rd place as we made some major edits to the post.) TMC Hackathon ‘26 - Team 27 AAR (3rd place) Long post incoming. I just wanted to share a behind-the-scenes view of how our tea… --- ## [Submitting Open Source Projects for ThreatModCon, Vienna 2026](https://threatmodelingconnect.discourse.group/t/submitting-open-source-projects-for-threatmodcon-vienna-2026/1220)
**Author:** [@Vikram\_N](https://threatmodelingconnect.discourse.group/u/Vikram_N)\ **Replies:** 2\ **Last updated:** [March 4, 2026, 3:24pm UTC](https://threatmodelingconnect.discourse.group/t/submitting-open-source-projects-for-threatmodcon-vienna-2026/1220 "2026-03-04T15:24:17Z")
Hello Folks, I’m wondering if any of you folks building open source tooling are submitting for the upcoming Vienna ThreatModCon … and if you have answers to the following situation: In Sessionize, the following is ment… --- ## [Vibe threat modeling](https://threatmodelingconnect.discourse.group/t/vibe-threat-modeling/1219)
**Author:** [@mik0w](https://threatmodelingconnect.discourse.group/u/mik0w)\ **Replies:** 0\ **Last updated:** [February 12, 2026, 2:31pm UTC](https://threatmodelingconnect.discourse.group/t/vibe-threat-modeling/1219 "2026-02-12T14:31:25Z")
Hey everyone, I’ve been experimenting with something I call Threat Modeling Driven Development (TMDD). The core idea is treating the threat model as a living development artifact (YAMLs) rather than a one-off exercise t… --- ## ["So what?! Why is that sensitive?"](https://threatmodelingconnect.discourse.group/t/so-what-why-is-that-sensitive/1217)
**Author:** [@hewerlin](https://threatmodelingconnect.discourse.group/u/hewerlin)\ **Replies:** 1\ **Last updated:** [February 7, 2026, 7:32am UTC](https://threatmodelingconnect.discourse.group/t/so-what-why-is-that-sensitive/1217 "2026-02-07T07:32:40Z")
:gb: Read next post… :de: Am 03.02.2026 trafen sich Bedrohungsmodellierungsbegeisterte von TMC DACH zu einem weiteren Threat Modeling Feierabend. Das Thema: “Na und?! Warum ist das sensibel?” Hier gibt es die Foli… --- ## [State of Security Champions Survey](https://threatmodelingconnect.discourse.group/t/state-of-security-champions-survey/1216)
**Author:** [@ClaireAA](https://threatmodelingconnect.discourse.group/u/ClaireAA)\ **Replies:** 0\ **Last updated:** [February 6, 2026, 4:09pm UTC](https://threatmodelingconnect.discourse.group/t/state-of-security-champions-survey/1216 "2026-02-06T16:09:26Z")
Are you an AppSec program owner, or security leader? Do you own, operate, or lead a Security Champion program within your organisation? Then check out this \<15 minute survey and have your say, for the 2nd year runnin… --- ## [Meet ThreatPad!](https://threatmodelingconnect.discourse.group/t/meet-threatpad/741)
**Author:** [@hewerlin](https://threatmodelingconnect.discourse.group/u/hewerlin)\ **Replies:** 27\ **Last updated:** [January 26, 2026, 12:33pm UTC](https://threatmodelingconnect.discourse.group/t/meet-threatpad/741 "2026-01-26T12:33:28Z")
Meet ThreatPad - the new kid on the block: It’s a threat model editor I’ve been using for my own stuff and now want to launch for the Community! :gift: It has a focus on simplicity and quick start + sharing. Some of… --- ## [Milestone alert! Issue #50 of Threat Modeling Insider is here! Why TM ≠ SDR](https://threatmodelingconnect.discourse.group/t/milestone-alert-issue-50-of-threat-modeling-insider-is-here-why-tm-sdr/1211)
**Author:** [@SebaDele](https://threatmodelingconnect.discourse.group/u/SebaDele)\ **Replies:** 0\ **Last updated:** [January 23, 2026, 3:33pm UTC](https://threatmodelingconnect.discourse.group/t/milestone-alert-issue-50-of-threat-modeling-insider-is-here-why-tm-sdr/1211 "2026-01-23T15:33:39Z")
Milestone alert! Issue #50 of Threat Modeling Insider is here! This month’s edition features: Why Threat Modeling ≠ Security Design Reviews: Sandesh breaks down when to use which approach The Defender’s Advantage: Why… --- ## [Threat Modeling Connect Bangalore Chapter Inaugral Event \[Virtual\]](https://threatmodelingconnect.discourse.group/t/threat-modeling-connect-bangalore-chapter-inaugral-event-virtual/1209)
**Author:** [@Vikram\_N](https://threatmodelingconnect.discourse.group/u/Vikram_N)\ **Replies:** 2\ **Last updated:** [January 23, 2026, 6:51am UTC](https://threatmodelingconnect.discourse.group/t/threat-modeling-connect-bangalore-chapter-inaugral-event-virtual/1209 "2026-01-23T06:51:17Z")
Threat Modeling Connect Bangalore is kicking off with a session focused on practical takeaways you can use at work. Why attend? Learn how experienced practitioners actually apply threat modeling, not just how it looks… --- ## [GPS Advisory/The changing threat landscape](https://threatmodelingconnect.discourse.group/t/gps-advisory-the-changing-threat-landscape/1210)
**Author:** [@adamshostack](https://threatmodelingconnect.discourse.group/u/adamshostack)\ **Replies:** 0\ **Last updated:** [January 22, 2026, 3:33pm UTC](https://threatmodelingconnect.discourse.group/t/gps-advisory-the-changing-threat-landscape/1210 "2026-01-22T15:33:22Z")
One of the questions we get regularly is ‘when should I update my TMs?’ Our answers are: When you know you’re adding new components or connections Regularly (from quarterly to annually, depending on how much the pr… --- ## [⏩ GIVEN WHEN THEN Threat Modeling](https://threatmodelingconnect.discourse.group/t/given-when-then-threat-modeling/867)
**Author:** [@hewerlin](https://threatmodelingconnect.discourse.group/u/hewerlin)\ **Replies:** 9\ **Last updated:** [January 20, 2026, 7:16pm UTC](https://threatmodelingconnect.discourse.group/t/given-when-then-threat-modeling/867 "2026-01-20T19:16:59Z")
Ever wondered how to not get water bombed by children in summer?? :sweat\_droplets: :sweat\_droplets: :sweat\_droplets: :wink: I’ve had a fun time exploring the capabilities of :fast\_reverse\_button: :play\_button: … --- ## [Introduce yourself! 👋](https://threatmodelingconnect.discourse.group/t/introduce-yourself/111)
**Author:** [@shuning](https://threatmodelingconnect.discourse.group/u/shuning)\ **Replies:** 22\ **Last updated:** [January 6, 2026, 11:35am UTC](https://threatmodelingconnect.discourse.group/t/introduce-yourself/111 "2026-01-06T11:35:06Z")
Welcome to the TMC forum! We want to get to know you. Threat modeling, like any craft, is a journey. We all started somewhere, and no two paths look the same. Use this thread to introduce yourself and share your story: … --- ## [How threat modeling is practiced in modern organizations?](https://threatmodelingconnect.discourse.group/t/how-threat-modeling-is-practiced-in-modern-organizations/1207)
**Author:** [@mik0w](https://threatmodelingconnect.discourse.group/u/mik0w)\ **Replies:** 0\ **Last updated:** [January 2, 2026, 4:51pm UTC](https://threatmodelingconnect.discourse.group/t/how-threat-modeling-is-practiced-in-modern-organizations/1207 "2026-01-02T16:51:42Z")
Hi everyone, I am reposting from Reddit after zeroXten suggested I might search for help here :slight\_smile: I’m conducting a short academic survey as part of my diploma thesis in a Cybersecurity Management program. Th… --- ## [Threat Modeling and Cyber Resilience Act! 🔥 TMC DACH Meetup](https://threatmodelingconnect.discourse.group/t/threat-modeling-and-cyber-resilience-act-tmc-dach-meetup/1204)
**Author:** [@Laxarella](https://threatmodelingconnect.discourse.group/u/Laxarella)\ **Replies:** 1\ **Last updated:** [December 30, 2025, 5:20pm UTC](https://threatmodelingconnect.discourse.group/t/threat-modeling-and-cyber-resilience-act-tmc-dach-meetup/1204 "2025-12-30T17:20:35Z")
\[lang:en\] :gb: \[lang:de\]? See next post. On 3 December 2025, we held our last TMC DACH campfire (Lagerfeuer) of 2025. @RonMK began by introducing the 13 participants to the topic of the Cyber Resilience Act and the ass… --- ## [🎮 Threat Modeling Playground?](https://threatmodelingconnect.discourse.group/t/threat-modeling-playground/1203)
**Author:** [@hewerlin](https://threatmodelingconnect.discourse.group/u/hewerlin)\ **Replies:** 0\ **Last updated:** [December 28, 2025, 1:21pm UTC](https://threatmodelingconnect.discourse.group/t/threat-modeling-playground/1203 "2025-12-28T13:21:03Z")
Yesterday, we have brainstormed playgrounds: What is a good toy project/system when we practice threat modeling? Any favorites? --- ## [🌟 Most awesome risk assessment style?](https://threatmodelingconnect.discourse.group/t/most-awesome-risk-assessment-style/889)
**Author:** [@hewerlin](https://threatmodelingconnect.discourse.group/u/hewerlin)\ **Replies:** 9\ **Last updated:** [December 20, 2025, 3:08pm UTC](https://threatmodelingconnect.discourse.group/t/most-awesome-risk-assessment-style/889 "2025-12-20T15:08:05Z")
This post Meet ThreatPad! - Techniques & Tooling - Threat Modeling Connect Forum (Post #13 - Post #20) started an interesting discussion about what is the best risk assessment style. @steve\_gibbons and @agota.daniel … --- ## [The final Threat Modeling Insider of 2025 is officially here! AI automation, Tool Directory, EMB3D,](https://threatmodelingconnect.discourse.group/t/the-final-threat-modeling-insider-of-2025-is-officially-here-ai-automation-tool-directory-emb3d/1202)
**Author:** [@SebaDele](https://threatmodelingconnect.discourse.group/u/SebaDele)\ **Replies:** 0\ **Last updated:** [December 19, 2025, 10:53am UTC](https://threatmodelingconnect.discourse.group/t/the-final-threat-modeling-insider-of-2025-is-officially-here-ai-automation-tool-directory-emb3d/1202 "2025-12-19T10:53:47Z")
Can we truly automate threat modeling with AI, or is it just an “Automation Illusion”? Check out the article, the session recording, and the slides in the newsletter. Other highlights from this issue: EMB3D for Embed… --- ## [OWASP London Training Days 2026](https://threatmodelingconnect.discourse.group/t/owasp-london-training-days-2026/1201)
**Author:** [@Shruti\_Kulkarni](https://threatmodelingconnect.discourse.group/u/Shruti_Kulkarni)\ **Replies:** 0\ **Last updated:** [December 11, 2025, 11:01pm UTC](https://threatmodelingconnect.discourse.group/t/owasp-london-training-days-2026/1201 "2025-12-11T23:01:16Z")
Kick off the New Year with engaging OWASP Training Courses and level up on your education. Choose from a variety of training courses aimed at your particular area of interest, we have something for everyone! Join top no… --- ## [Threat Modeling by Design](https://threatmodelingconnect.discourse.group/t/threat-modeling-by-design/1198)
**Author:** [@TMC\_Toronto\_Chapter](https://threatmodelingconnect.discourse.group/u/TMC_Toronto_Chapter)\ **Replies:** 0\ **Last updated:** [November 25, 2025, 6:07pm UTC](https://threatmodelingconnect.discourse.group/t/threat-modeling-by-design/1198 "2025-11-25T18:07:05Z")
Threat Modeling by Design As the year drew to a close, the TMC Toronto Chapter organized one of its most valuable knowledge-sharing events to mark the final gathering of the year. Held on November 19, 2025, the event … --- ## [TMC Wales & Midlands Next Event!](https://threatmodelingconnect.discourse.group/t/tmc-wales-midlands-next-event/1197)
**Author:** [@PaulSpruce](https://threatmodelingconnect.discourse.group/u/PaulSpruce)\ **Replies:** 0\ **Last updated:** [November 21, 2025, 6:51pm UTC](https://threatmodelingconnect.discourse.group/t/tmc-wales-midlands-next-event/1197 "2025-11-21T18:51:01Z")
Wales and Mids are back NEXT WEEK - register here Threat modelling doesn’t end once a system is designed it evolves with it. Whose it for? Anyone and Everyone! Please pass this on so that we can build up this commun… --- ## [State of Threat Modeling Survey 2025 is LIVE!](https://threatmodelingconnect.discourse.group/t/state-of-threat-modeling-survey-2025-is-live/1196)
**Author:** [@Dave](https://threatmodelingconnect.discourse.group/u/Dave)\ **Replies:** 0\ **Last updated:** [November 21, 2025, 6:00pm UTC](https://threatmodelingconnect.discourse.group/t/state-of-threat-modeling-survey-2025-is-live/1196 "2025-11-21T18:00:08Z")
I’m delighted to announce that the State of Threat Modeling Survey 2025-26 is now live! You can complete the survey here! But why would you do this?!? I mean have you read the State of Threat Modeling Report 2024-25? … --- ## [Global Threat Model Together Day 2025: What we modeled, what we learned](https://threatmodelingconnect.discourse.group/t/global-threat-model-together-day-2025-what-we-modeled-what-we-learned/1195)
**Author:** [@hewerlin](https://threatmodelingconnect.discourse.group/u/hewerlin)\ **Replies:** 0\ **Last updated:** [November 19, 2025, 7:54pm UTC](https://threatmodelingconnect.discourse.group/t/global-threat-model-together-day-2025-what-we-modeled-what-we-learned/1195 "2025-11-19T19:54:36Z")
:globe\_showing\_asia\_australia: :globe\_showing\_europe\_africa: :globe\_showing\_americas: Report available TMC blog now has the report about Global Threat Model Together Day 2025: Among other thing, it features beautifu… --- ## [Threat model of a Mobile app](https://threatmodelingconnect.discourse.group/t/threat-model-of-a-mobile-app/1192)
**Author:** [@jlpverwoest](https://threatmodelingconnect.discourse.group/u/jlpverwoest)\ **Replies:** 5\ **Last updated:** [November 14, 2025, 2:31pm UTC](https://threatmodelingconnect.discourse.group/t/threat-model-of-a-mobile-app/1192 "2025-11-14T14:31:41Z")
There is some pushback from mobile app developers that the creation of a threat model in IRIUS RISK does not work. My question: Doe anybody have any experience and or guidance which could help us? --- ## [Per Element coverage & "completeness" (+ PoC)](https://threatmodelingconnect.discourse.group/t/per-element-coverage-completeness-poc/1193)
**Author:** [@hewerlin](https://threatmodelingconnect.discourse.group/u/hewerlin)\ **Replies:** 0\ **Last updated:** [November 7, 2025, 11:15am UTC](https://threatmodelingconnect.discourse.group/t/per-element-coverage-completeness-poc/1193 "2025-11-07T11:15:36Z")
I experimented how to show coverage in a per element approach. Here’s a vibe coded PoC. Example data suggested by AI. “Completeness” remains controversial, but the optical impression and density may provide a hint. Wh… --- ## [What Is Your Ideal Threat Modeling Lifecycle?](https://threatmodelingconnect.discourse.group/t/what-is-your-ideal-threat-modeling-lifecycle/1191)
**Author:** [@Vikram\_N](https://threatmodelingconnect.discourse.group/u/Vikram_N)\ **Replies:** 1\ **Last updated:** [October 31, 2025, 12:46pm UTC](https://threatmodelingconnect.discourse.group/t/what-is-your-ideal-threat-modeling-lifecycle/1191 "2025-10-31T12:46:31Z")
So when I started learning about Threat Modeling, the threat modeling process seemed pretty straight-forward to me with Adam Shostack’s 4 question framework. But the deeper I get into threat modeling, the more I realize… --- ## [Publish your threat models!](https://threatmodelingconnect.discourse.group/t/publish-your-threat-models/1190)
**Author:** [@hewerlin](https://threatmodelingconnect.discourse.group/u/hewerlin)\ **Replies:** 0\ **Last updated:** [October 28, 2025, 9:18am UTC](https://threatmodelingconnect.discourse.group/t/publish-your-threat-models/1190 "2025-10-28T09:18:12Z")
@adamshostack ’s “Publish your threat models” talk is now online. Really enjoyed to listen. I don’t know where the slides are published… (Do you?) I wonder about the postprocessing steps and Adam has som… --- ## [How do you tackle these top 3 challenges in threat modeling?](https://threatmodelingconnect.discourse.group/t/how-do-you-tackle-these-top-3-challenges-in-threat-modeling/1165)
**Author:** [@shuning](https://threatmodelingconnect.discourse.group/u/shuning)\ **Replies:** 0\ **Last updated:** [October 12, 2025, 7:00pm UTC](https://threatmodelingconnect.discourse.group/t/how-do-you-tackle-these-top-3-challenges-in-threat-modeling/1165 "2025-10-12T19:00:14Z")
Hello friends, last week we discussed one of the toughest roadblocks in our field, reporting. This week, let’s zoom out to challenges overall. On average, companies in the SOTM survey reported a minimum of 10 recurri… --- ## [Are AI Agents the Ultimate Confused Deputy? How AI Agents' Capabilities Are Being Abused](https://threatmodelingconnect.discourse.group/t/are-ai-agents-the-ultimate-confused-deputy-how-ai-agents-capabilities-are-being-abused/1186)
**Author:** [@Mohamed\_AboElKheir](https://threatmodelingconnect.discourse.group/u/Mohamed_AboElKheir)\ **Replies:** 1\ **Last updated:** [October 12, 2025, 2:17pm UTC](https://threatmodelingconnect.discourse.group/t/are-ai-agents-the-ultimate-confused-deputy-how-ai-agents-capabilities-are-being-abused/1186 "2025-10-12T14:17:58Z")
:man\_technologist:t2: Hi all, I’ve added a new post to my blog “AppSec Untangled”. This post discusses how AI agents’ :robot: capabilities are being abused (aka the “Confused Deputy” :thinking: problem) by showing some r… --- ## [Reporting is hard, it really is. Any ideas?](https://threatmodelingconnect.discourse.group/t/reporting-is-hard-it-really-is-any-ideas/1164)
**Author:** [@shuning](https://threatmodelingconnect.discourse.group/u/shuning)\ **Replies:** 2\ **Last updated:** [October 6, 2025, 11:04pm UTC](https://threatmodelingconnect.discourse.group/t/reporting-is-hard-it-really-is-any-ideas/1164 "2025-10-06T23:04:00Z")
Hey friends, this week’s topic is a tricky one - reporting. The SOTM Report 2024-2025 found that 52% of companies don’t produce regular reports, and for many, reporting remains the least clear part of the process. A… [Previous page](https://threatmodelingconnect.discourse.group/latest.md) [Next page](https://threatmodelingconnect.discourse.group/latest.md?page=2)