World Congress 2026 North America • Sep 25, 2026 • Session details

Your Threat Model Is Lying to You: Why Modeling the Design Isn’t Enough in 2026

Your fifteen declared dependencies just ballooned into hundreds of hidden vulnerabilities. Discover why design-phase threat modeling fails today and how continuous feedback loops expose your true production risks.

Your Threat Model Is Lying to You: Why Modeling the Design Isn’t Enough in 2026 thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

1:27 min

Automating threat modeling directly within developer pull requests

Rasmus Klärck

Rasmus Klärck · World Congress 2026 Europe

1:10 min

Adopting an iterative threat modeling workflow

Ali Yazdani

Ali Yazdani · World Congress 2024

3:07 min

Introducing collaborative threat modeling workshops in engineering teams

Bruno Amaro Almeida · World Congress 2022

2:35 min

Integrating security across the application development lifecycle

Niels Tanis

Niels Tanis · World Congress 2022

1:00 min

Recommended resources for continuous threat modeling education

Ali Yazdani

Ali Yazdani · World Congress 2024

1:54 min

Defining threat modeling in secure design

Ali Yazdani

Ali Yazdani · World Congress 2024

More from World Congress 2026 North America

2026 in LLMs (so far) thumbnail

2026 in LLMs (so far)

Simon Willison

Running Operations Without Humans in the Loop thumbnail

Running Operations Without Humans in the Loop

Edward Aryee, Ryan Ries, Yaron Schneider, Chris Hallenbeck, Floriane Gramlich

Beyond the Code: Human-AI Synergies in Product Development thumbnail

Beyond the Code: Human-AI Synergies in Product Development

Ajita Kanchivakam Ananth

Honey, look! I vibe-coded an OS! thumbnail

Honey, look! I vibe-coded an OS!

Ian Smith

The Productivity Illusion: What AI Really Changed for Developers thumbnail

The Productivity Illusion: What AI Really Changed for Developers

Fatih Kadir Akın

Your Evals Passed. Your Agent Just Emptied a Database. thumbnail

Your Evals Passed. Your Agent Just Emptied a Database.

Tejas Pravinbhai Patel

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Multi-Cloud Isn't a Project. It's a Side Effect.

Antonio Mendoza Pérez

Temporal Technologies

Staff Developer Success Engineer
Gaurav Thadani

Temporal

Staff Developer Success Engineer

Autopsy of an Autonomous Incident: When the Agent Made It Worse

Navin Pai

StackGen

Director of Engineering

How is SWE & EM roles are changing in the age of AI

Amol Sharma

Stripe

Engineering Manager

What I Got Wrong Shipping an MCP Server for Live Infrastructure

Pritesh Kiri

Harness

Developer Relations Engineer

Related videos

Real-world Threat Modeling thumbnail

World Congress 2024 • about 2 years ago

Real-world Threat Modeling

Ali Yazdani

Walking into the era of Supply Chain Risks thumbnail

LIVE • over 4 years ago

Walking into the era of Supply Chain Risks

Vandana Verma

You can’t hack what you can’t see thumbnail

LIVE • about 6 years ago

You can’t hack what you can’t see

Reto Kaeser

Your AI Ships Code Faster Than Anyone Can Review It thumbnail

World Congress 2026 Europe • 3 months ago

Your AI Ships Code Faster Than Anyone Can Review It

Rasmus Klärck

Climate vs. Weather: How Do We Sustainably Make Software More Secure? thumbnail

LIVE • over 4 years ago

Climate vs. Weather: How Do We Sustainably Make Software More Secure?

Simple Steps to Kill DevSec without Giving Up on Security thumbnail

World Congress 2025 • about 1 year ago

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

about 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.

Everyone thinks CISOs make the final call on security tools. But in modern software organisations, adoption starts long before the boardroom, inside CI/CD pipelines, developer workflows, and pull r...

8 months ago

A room full of people at a tech conference

AB

Andre Braun, GitLab

Now is the time for industrialized software development

Now is the time for industrialized software development Recently, I received a letter from my car’s manufacturer alerting me to a recall. They had discovered a defective part and wanted to replace ...

over 1 year ago

A person developint HTML on a laptop with the sun shining on it.

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

From learning to earning

Jobs that call for the skills explored in this talk.

about 1 month ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture

Staff Developer Advocate, GitHub Security Lab

Experienced $121k–323k Remote Git Github Databases

about 2 months ago • Verified

Model Implementation Engineer

San Francisco, United States

Expert $165k–220k Python

Senior Threat Intelligence Analyst

Expert Profiling Cybercrime Mitre Att&ck

Principal Solutions Architect, Professional Services

€119k–170k Okta Docker OpenID

about 2 months ago • Verified

Senior Principal Software Engineer, Docker and Ecosystem

Seattle, United States

Expert Remote Cloud (AWS/Google/Azure)