Adam Shostack | Dark Reading

Photo of Adam Shostack

Adam Shostack

Leading expert in threat modeling

Adam Shostack is a leading expert on threat modeling. He's a member of the BlackHat Review Board, and helped create the CVE and many other things. He currently helps many organizations improve their security via Shostack & Associates, and helps startups become great businesses as an advisor and mentor. While at Microsoft, he drove the Autorun fix into Windows Update, was the lead designer of the SDL Threat Modeling Tool v3 and created the "Elevation of Privilege" game. Adam is the author of Threat Modeling: Designing for Security, and the co-author of The New School of Information Security. His personal home page can be found here.

Latest from Adam Shostack

The word "ransomware" in red, amid binary code

Vulnerabilities & Threats

Microsoft Can Fix Ransomware Tomorrow Microsoft Can Fix Ransomware Tomorrow

byAdam Shostack

Jul 5, 2023

3 Min Read

heads on a digital background

Cybersecurity Operations

Threat Modeling in the Age of OpenAI's Chatbot Threat Modeling in the Age of OpenAI's Chatbot

byAdam Shostack

Dec 22, 2022

4 Min Read

All from Adam Shostack

Vulnerabilities & Threats

What Star Wars Teaches Us About Threats

What Star Wars Teaches Us About Threats

byAdam Shostack, Leading expert in threat modeling

Threat Intelligence

NIST Brings Threat Modeling into the Spotlight

NIST Brings Threat Modeling into the Spotlight

byAdam Shostack, Leading expert in threat modeling

Cyberattacks & Data Breaches

Ransomware Is Not the Problem

Ransomware Is Not the Problem

byAdam Shostack, Leading expert in threat modeling

Threat Intelligence

Solving the Problem With Security Standards

Solving the Problem With Security Standards

byAdam Shostack, Leading expert in threat modeling

Threat Intelligence

When Security Goes Off the Rails

When Security Goes Off the Rails

byAdam Shostack, Leading expert in threat modeling

20 Years of STRIDE: Looking Back, Looking Forward

20 Years of STRIDE: Looking Back, Looking Forward

byAdam Shostack, Leading expert in threat modeling

Сloud Security

Making the Case for a Cybersecurity Moon Shot

Making the Case for a Cybersecurity Moon Shot

byAdam Shostack, Leading expert in threat modeling

Vulnerabilities & Threats

'EFAIL' Is Why We Can’t Have Golden Keys

'EFAIL' Is Why We Can’t Have Golden Keys

byAdam Shostack, Leading expert in threat modeling

Endpoint Security

Risky Business: Deconstructing Ray Ozzie's Encryption Backdoor

Risky Business: Deconstructing Ray Ozzie's Encryption Backdoor

byAdam Shostack, Leading expert in threat modeling

The Critical Difference Between Vulnerabilities Equities & Threat Equities

The Critical Difference Between Vulnerabilities Equities & Threat Equities

byAdam Shostack, Leading expert in threat modeling

Сloud Security

CISO Security ‘Portfolios’ Vs. Reporting Structures

CISO Security ‘Portfolios’ Vs. Reporting Structures

byAdam Shostack, Leading expert in threat modeling

Cybersecurity Analytics

Security Portfolios: A Different Approach To Leadership

Security Portfolios: A Different Approach To Leadership

byAdam Shostack, Leading expert in threat modeling

Cybersecurity Operations

Security Lessons from My Financial Planner

Security Lessons from My Financial Planner

byAdam Shostack, Leading expert in threat modeling

Vulnerabilities & Threats

Revealing Lessons About Vulnerability Research

Revealing Lessons About Vulnerability Research

byAdam Shostack, Leading expert in threat modeling

Endpoint Security

Security Lessons from C-3PO, Former CSO of the Millennium Falcon

Security Lessons from C-3PO, Former CSO of the Millennium Falcon

byAdam Shostack, Leading expert in threat modeling

Vulnerabilities & Threats

CAs Need To Force Rules Around Trust

CAs Need To Force Rules Around Trust

byAdam Shostack, Leading expert in threat modeling

Cybersecurity Operations

Security Lessons From My Stock Broker

Security Lessons From My Stock Broker

byAdam Shostack, Leading expert in threat modeling

Cybersecurity Operations

Security Lessons From “The Gluten Lie”

Security Lessons From “The Gluten Lie”

byAdam Shostack, Leading expert in threat modeling

Cybersecurity Careers

Security Lessons From My Doctor

Security Lessons From My Doctor

byAdam Shostack, Leading expert in threat modeling

Endpoint Security

Security Lessons From My Car Mechanic

Security Lessons From My Car Mechanic

byAdam Shostack, Leading expert in threat modeling

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.