We released our Toreon threat modeling insider newsletter #53 this week, covering:
- Amir Kavousian: Why threat modelers need to focus less on static documents and more on code.
- I wrote an article on the proposed ENISA draft for a Security-by-Design playbook, with our OWASP community input.
- Curated content: a core threat modeling lesson from BIML and the story behind a $10,000 iPhone heist.
- And a practical tip for better targeting your threat models.