Tutamantic Security Blog
GhostA blog that teaches threat modelling with the STRIDE framework, often through whimsical analogies such as Santa's sleigh or the First Thanksgiving. Its posts also cover why threat modelling should be a continual practice within the software lifecycle.