ThreatModCon Barcelona was one of CyberSec Games’ first conference appearances. Alongside a retail booth showcasing our extensive collection of threat modelling games, we ran a full-day, drop-in Elevation of Privilege challenge for delegates.

Participants joined the table, examined a sample system architecture and drew three random cards from a specially made card shoe. Their challenge was to identify relevant threats, explain the potential impact and show where each threat could occur within the system. Every valid threat was recorded on a threat card and earned the participant a point.

The open format allowed delegates to take part throughout the day, turning threat modelling into an accessible, practical and competitive experience. Scores were tracked, and the highest-scoring participant was awarded a prize at the end of a successful and highly engaging day.