LLM Threat Modeling Is Fun
Exploring the fun in LLM threat modeling, and how it’s both an interface choice and a possibly ‘dark pattern’
Shostack + Friends Blog
Posts in category “ai”
Lessons from Threat Modeling Intensive With AI
Actionable lessons from delivering Threat Modeling with AI, and using AI more generally.
Appsec roundup - March 2026
This month kicks off with Donald Knuth being shocked by LLMs, then goes into the threat modeling impact of right to repair, and how to TM MCP, and a whole lot more!
Appsec roundup - Feb 2026
This month's roundup starts with losing oneself, continues with cool new threat modeling tools and applications, and continues into appsec, AI and regulation.
Secure By Design roundup - Dec/Jan 2026
The normalization of deviance, exciting threat modeling news, and a question of do regulatory threats change ‘the threat model’ as much as GPS attacks? Not yet.
Threat Modeling in the Age of AI
Adam will be the featured speaker at the ISC2 Seattle Chapter meeting in February.
October Adam's New Thing!
Read up on Adam's New Thing from October
Prompt Engineering Requires Evaluation
Understanding ‘prompt engineering’
Mansplaining your threat model, as a service
Everyone wants robots to help with threat models. How’s that working out?
Strategy for threat modeling AI
Clarifying how to threat model AI
Threat Modeling and GenAI with Venkat Ramakrishnan
Podcast episode with Venkat Ramakrishnan discussing the intersection of GenAI and threat modeling
Adventures in LLM Coding
Exploring LLM-driven coding as I get ready for Archimedes
Solving Hallucinations
Solving hallucinations in legal briefs is playing on easy mode —— and still too hard
Layoffs in Responsible AI Teams
Some inferences from layoffs in responsible AI teams
Five Threat Model Diagrams for Machine Learning
Some diagrams to help clarify machine learning threats
When will Adam be replaced by ChatGPT?
When will Adam Shostack be replaced by ChatGPT
Bing’s ChatGPT
ChatGPT in the headlines again
Threat Model Thursday: BIML Machine Learning Risk Framework
Risk Framework and Machine Learning
Threat Modeling Thursday: Machine Learning
For my first blog post of 2020, I want to look at threat modeling machine learning systems.