Threat Modeling a Legacy System: How Fixing One Choke Point Eliminated Entire Attack Vectors

Part 1 —What are we working on and What can go wrong?