[THREAT] Identified threat: LLM was fine-tuned on a dataset that included production access tokens [RESPONSE] Dev/management: It's open source. Many eyes will catch issues. #threatmodeling #infosec

[THREAT] Identified threat: Password hashing uses an in-house function written in 2018, never reviewed [RESPONSE] Dev/management: the DBA already addressed this in another PR somewhere. #threatmodeling #infosec

[THREAT] Identified threat: Login error message reveals whether the email address has an account [RESPONSE] Dev/management: Users would notice if their account was compromised. #threatmodeling #infosec

[THREAT] Identified threat: Open redirect on the login page that respects any return_to URL [RESPONSE] Dev/management: There's no CVE for it yet, so we don't have to act. #threatmodeling #infosec

[THREAT] Identified threat: Build pulls FROM ubuntu:latest with no digest pinning [RESPONSE] Dev/management: The vendor said this is best practice. #threatmodeling #infosec

[THREAT] Identified threat: Finance pays invoices on emailed PDFs without out-of-band confirmation [RESPONSE] Dev/management: CVSS is only 6.8. We focus on 9+. #threatmodeling #infosec

[THREAT] Identified threat: Session ID is not rotated after login, enabling fixation attacks [RESPONSE] Dev/management: If something breaks, we'll do a blameless post-mortem. #threatmodeling #infosec

[THREAT] Identified threat: Backups have not been test-restored since the runbook was written [RESPONSE] Dev/management: If something breaks, we'll do a blameless post-mortem. #threatmodeling #infosec

[THREAT] Identified threat: Multifunction printer stores scanned documents on an open SMB share [RESPONSE] Dev/management: We have a PR firm on retainer for that scenario. #threatmodeling #infosec

[THREAT] Identified threat: MQTT broker accepts anonymous connections to all device topics [RESPONSE] Dev/management: We've discussed it with leadership and accepted the risk. #threatmodeling #infosec

[THREAT] Identified threat: Bastion allows SSH password auth as root from anywhere on the internet [RESPONSE] Dev/management: Traffic is low enough that no one will notice. #threatmodeling #infosec

[THREAT] Identified threat: TLS 1.0 still enabled on the customer login endpoint [RESPONSE] Dev/management: Works on my machine. #threatmodeling #infosec

[THREAT] Identified threat: Backups have not been test-restored since the runbook was written [RESPONSE] Dev/management: We're not interesting enough for nation-state attackers. #threatmodeling #infosec