Zero trust and threat modeling: Is it time for AppSec to get on board?

This article explores how zero-trust architecture changes threat modeling for application security by eliminating fixed trust boundaries and requiring continual verification of users, devices, and components. Experts highlight benefits such as least privilege, microsegmentation, and continuous monitoring to mitigate risks across software supply chains, while also noting challenges including complexity, deep system understanding needs, and organizational buy-in. Recommendations include validating assumptions, defining granular boundaries, assessing risks, and adopting zero-trust-aligned architectures like SDP and SASE.