threat-modeling The mediocre hacker and your unremarkable business Why you don't need to worry about Russian APT groups and very much should worry about the 14-year-old with a phishing kit he bought on Discord.
