While at OWASP Global AppSec EU 2026 in Vienna a couple of months ago, I picked up a copy of Izar Tarandach’s and Matthew J. Coles’ book “Threat Modeling: A Practical Guide for Development Teams”. I had dabbled into the topic from time to time but only very shallowly, and now I wanted to learn more. The book is roughly split into these six sections: General introduction into data flow diagrams, etc., for system modelling How threat modelling works in general Introduction to various methodologies like STRIDE Automated threat modelling Continuous threat modelling Your role as a champion for threat...