More appsec people should start performing threat models, I would definitely recommend the newsletter.

You can read old editions on mailchimp: https://us11.campaign-archive.com/home/?u=b3d749f15634df3ec1...