# Stuart McClure: full text

> Stuart McClure has spent his career on one idea: prevention. In 1989 he survived United Airlines Flight 811, when an electrical short told the cargo door to open over the Pacific and a faulty latch allowed it; nine passengers were lost. He co-wrote Hacking Exposed, co-founded Foundstone and Cylance (which used AI to stop malware before it ran, and was acquired by BlackBerry for $1.5 billion in 2019), led Qwiet AI, and today is co-founder and CEO of WethosAI and founder of NumberOne AI.


========================================================================
## Stuart McClure — Find the faulty latch. Before it fails. (index.html)
========================================================================

## Find the faulty latch. Before it fails.
At nineteen, Stuart McClure survived a plane accident that never had to happen: a short told the cargo door to open, and a faulty latch allowed it. For thirty-five years he has worked to find the next failure first: in software, in the companies he built, and now in how people make decisions alongside AI.
Planning an event? Invite Stuart to speak
One Mission: Prevention
Prologue
“People often ask me what drives me.
They see the companies, the books, the talks, and they try to connect the dots from a LinkedIn profile.
They see a career. But I don’t see a career.
I see a single, unbroken thread that runs from a childhood spent on the move for survival to a moment of sheer terror suspended 22,000 feet above the Pacific Ocean.
Everything I am, everything I’ve built and pursued, it all started there.
The truth is, all the dots connect back to a single, faulty latch.
But to understand the latch, you have to understand the kid who was conditioned to see it in the first place.”
Stuart McClure · The Gift of a Second Chance
Stuart McClure

### The Faulty Latch
A life spent preventing the next disaster
- IThe Observer
- IIThe Fall
- IIIThe Playbook
- IVThe Prediction
- VThe Human System
- VIYour Turn
Chapter one

### The Observer
Guam · Hawaii · Colorado1970s–1985
> “When you’re the new kid, over and over, you learn to do one thing really well: you watch.” The Gift of a Second Chance
He grew up on Guam as a “haole” kid, a white outsider in a world that was Chamorro and Filipino. Being the new kid again and again, he learned to read every schoolyard before he stepped into it.
> “I didn’t just see them playing; I saw the invisible architecture of their world.” The Gift of a Second Chance
The start of a Guam Bicycle Club race in the mid-1980s, from a Pacific Daily News clipping.
Figure: Guam in 1984: the places and club rides named in the Pacific Daily News of 18 April 1984, and his hill-climb win at Tarague that year
A drawn map of the island of Guam, running north to south and narrowing at its waist near Agana (Hagåtña). It marks the places named in a Pacific Daily News article of Wednesday, 18 April 1984, about the Guam Bike Club: Tarague Beach in the north, Dededo, Agana (Hagåtña), Barrigada Hill, Nimitz Hill, GabGab Beach and the Naval Station on the harbor, Yona and Ipan on the east side, and the villages of Inarajan, Merizo and Umatac in the south. Two of that month's club rides are drawn as routes: the Merizo Fiesta Ride on 29 April, by way of Agana (Hagåtña), Sinajana, Yona, Ipan and Inarajan to Merizo, and the Hilly-Dilly Ride over Barrigada Hill, Government House and Nimitz Hill. Two places are marked as wins: the NAS track, where the same page reports that fifteen-year-old Stuart McClure won the club's 10-mile time trial at more than 20 miles per hour, and Tarague, where a 1984 results clipping lists him first in the junior class of the Tarague Challenge Hill Climb. The coastline and road shapes are simplified.
The article lists where the club’s rides went: out to the beaches, the Naval Station and the villages of the south.
On the same page: at fifteen, he won the club’s 10-mile time trial at the NAS track, averaging more than 20 miles per hour.
At the Tarague Challenge Hill Climb in 1984 he was first among the juniors, ages 15 to 17, in 6:21.62.
In April 1984 the Guam Bike Club rode almost every weekend, and its riders saw the island up close, from Tarague Beach in the north to Merizo in the south. Stuart, fifteen, was one of the local teens on the club’s newly formed racing team. These are the places named in the Pacific Daily News of Wednesday, 18 April 1984 (page 39, “Cyclists do it for fun, fitness” and “McClure grabs bike race”). The 1984 hill-climb result comes from a clipping on the Endurance Cycling page. Coastline and roads are simplified.
Pacific Daily News, 22 August 1985: “Local biker beats odds.”
The first thing he learned to prevent
At thirteen he had asthma. At sixteen he was training at the U.S. Olympic Training Center.
1982
His father, Mike, introduces him to cycling. At first he can “barely ride two or three miles without problems.”
1985
He wins the Hawaii state road-race championship. Then he goes to Colorado Springs to train every day, aiming for the 1988 Olympic Games in Seoul.
From the Pacific Daily News, 22 August 1985.
> “I had no idea what the rules were. But I watched for an hour.… The next day, I walked up, and without saying a word, I played. And I fit in.” The Gift of a Second Chance · on a game of marbles in Guam
Chapter two

### The Fall
24 February 1989United Airlines Flight 811 · Honolulu to Sydney, via Auckland
What the record shows
- 01:52:49 HSTFlight 811 is cleared for takeoff from runway 8R at Honolulu.Aboard are 3 flight crew, 15 cabin crew and 337 passengers.
- 02:09:09 HSTThere is a loud bang as the forward cargo door separates from the airplane.It is still climbing, between 22,000 and 23,000 feet.
- 02:34 HSTThe airplane has landed back at Honolulu and stopped on the runway. The evacuation begins.
National Transportation Safety Board, Aircraft Accident Report NTSB/AAR-92/02.
> “For twenty minutes, as the pilots wrestled with a crippled giant, trying to get us back to Honolulu, I was absolutely, fundamentally certain that I was going to die.” The Gift of a Second Chance
Out from Honolulu, and back
Figure: The flight path of United Airlines Flight 811 on 24 February 1989: out from Honolulu, and back
A schematic map. A small inset shows the planned route across the Pacific: from Honolulu to Auckland, New Zealand, and on to Sydney, Australia. The main map shows the island of Oahu and the ocean around it. Flight 811 was cleared for takeoff from Honolulu on runway 8R at 01:52 Honolulu time, with 355 people aboard. At 02:09, about sixteen minutes later, while the airplane was climbing between 22,000 and 23,000 feet, the forward cargo door separated. That point is marked in violet. The captain turned 180 degrees to the left and headed back to Honolulu; the way home is drawn in brass. By 02:34, about twenty-five minutes after the door separated, the airplane had landed, stopped on runway 8L at Honolulu, and the evacuation had begun. Nine passengers were lost. A time bar along the bottom shows the same three times to scale. The path over the water is schematic: the NTSB report records times and altitudes, not the track.
Where the door was
Figure: Where the forward cargo door is on a Boeing 747, seen from the right side and from above
Two outline views of a Boeing 747 like the 747-122 that flew as Flight 811, drawn to approximate proportions. In the side view, seen from the right, the forward cargo door is outlined in violet low on the fuselage, ahead of the wing. It opened outward, and the door opening measured about 110 inches wide by 99 inches high along the fuselage. The aft cargo door, behind the wing on the same side, is drawn in neutral gray. The view from above shows the forward cargo door again on the right side of the fuselage and numbers the four engines: No. 1 and No. 2 under the left wing, No. 3 and No. 4 under the right wing. After the door separated, the crew shut down engines No. 3 and No. 4 and flew the final approach on No. 1 and No. 2, which are marked in brass.
Flight 811 was bound for Auckland and Sydney with 355 people aboard. About sixteen minutes after it was cleared for takeoff from Honolulu, while the airplane was still climbing, the forward cargo door on the lower right side of the fuselage separated. The captain turned back. Two engines on the right wing were shut down, and the crew brought the airplane home to Honolulu on the two on the left. Nine souls were lost. The track over the water is drawn schematically, because the report records times and altitudes rather than the path; the airplane is drawn to approximate proportions. Times are local Honolulu time (HST), as the report gives them. Source: National Transportation Safety Board, Aircraft Accident Report NTSB/AAR-92/02, §1.1 (history of the flight), §1.3 (damage to the airplane), §1.6.1 and §1.6.2 (the airplane and its cargo doors), §1.11 (flight recorders, for 02:09).
> “It wasn’t like in the movies. There’s no dramatic music, no slow motion. It was a physical assault.” The Gift of a Second Chance
> “…he extended his hand to shake mine and said ‘It’s been nice knowing you.’” Why Cylance? · 4 December 2012 · on the stranger across the aisle
> “When we finally, miraculously, landed back in Honolulu, the silence was as shocking as the noise had been. The wind was gone.” The Gift of a Second Chance

#### In memory of the nine
> “One moment they were there, people with lives and families and plans, and the next, just a gaping hole and the deafening, soul-stealing roar of the wind.” The Gift of a Second Chance
Nine passengers were lost. 346 of the 355 people aboard survived.
A latch failed.A door blew off.This didn’t have to happen.
Stuart McClure · The Gift of a Second Chance
There was time.
717days: first warning to Flight 811

#### There was time: 717 days passed between the first warning and Flight 811.
Almost two years earlier, a Pan Am 747 had landed with its cargo door open. A fix was ordered, but on this airplane it was not scheduled until April 1989.
- 10 March 1987 · Day 0A Pan Am 747 returns to London with pressurization problems. On the ground, its forward cargo door is found open about 1½ inches. The latch cams are unlatched, yet the cockpit warning light is off.NTSB AAR-92/02, §1.17.1
- 8 April 1987Boeing issues Alert Service Bulletin 52A2206 on the cargo doors’ latch locking system.NTSB AAR-92/02
- 27 August 1987Boeing issues a second bulletin, 52A2209, on the same latch locking system.NTSB AAR-92/02
- 13 May 1988The FAA makes the fix mandatory in Airworthiness Directive 88-12-04, giving airlines 18 or 24 months to complete it.NTSB AAR-92/02, §1.6 (the analysis cites 1 July 1988)
- 24 February 1989 · Day 717United Airlines Flight 811.NTSB AAR-92/02
- April 1989The fix on this airplane was scheduled to be finished this month. The legal deadline was not until January 1990.NTSB AAR-92/02, §1.6.8
> “The B-747 cargo door has eight (8) view ports located beneath the latch cams for direct viewing of the position of the cams by means of alignment stripes. Procedures for using these view ports for verifying the position of the cams were not in place or required by Boeing, the FAA, or UAL.” National Transportation Safety Board · AAR-92/02
Prevention is rarely dramatic. It is someone checking in time.
The lesson in the evidence

#### The light measured the handle. Not the latch.
On the 1987 Pan Am flight, the cockpit told the crew the cargo door was secure. But the warning light was wired to the door’s handle and its relief doors, not to the latch cams that hold the door shut. Everything the crew could check from the cockpit said “closed,” while the latches themselves were open.
> “Don’t trust us! Please, please, please, just trust yourself. Test for yourself.” Stuart McClure · Know the Truth · 2016
Figure: What the cockpit checked
The 747 cargo door with its lock handle stowed and both pressure relief doors closed. A wire runs from the relief doors to a cockpit warning light, which is off, so the cockpit reads the door as secure. Along the sill, all eight latch cams are open.
Drawn after the NTSB report AAR-92/02, §1.17.1. On the 1987 Pan Am door, the handle was stowed and the relief doors were closed, so the warning light went out, even though the latch cams were still open.
What no one had to check

##### Eight small windows. One under each latch.
The door had a small window beneath every latch. Look through it and a painted stripe on the latch cam either points at an arrow, or it doesn’t. If it doesn’t, that latch is open. There is no wiring and no warning light to trust: you are looking at the latch itself.
In 1970 the FAA approved a simpler check, which was to look at the relief doors instead. After that, looking through the windows was no longer part of the procedure.
> “Procedures for using these view ports for verifying the position of the cams were not in place or required by Boeing, the FAA, or UAL.” National Transportation Safety Board · AAR-92/02, §1.6.2
On 31 March 1989, five weeks after Flight 811, an FAA emergency directive put the eight windows back into the procedure (§1.17.3). The circle with a level stripe that you see across this site is drawn from that check. When the stripe is in line, it means someone looked for themselves instead of assuming.
Figure: Looking through a view port
Two magnified view ports. On the left the painted stripe on the latch cam points straight at the arrow on the fitting: the latch is closed. On the right the stripe is turned away from the arrow: the latch is open.
Captain David Cronin, United Airlines Flight 811.
Months later, Stuart spoke with the captain, David Cronin, by phone, and asked how he got them home.
> “I don’t know, Stuart.”
> “…with well over 200 simulations modeled, they all crashed in the water or on land. So no, I truly don’t know how we all made it back.” Captain David Cronin, as Stuart recalled him · Why Cylance? · 2012
In the captain’s telling, every one of those simulations ended in a crash. On the real flight, it was people, the crew in the cockpit, who brought everyone home.
Tragedy = Passion.
> “I was given a present beyond words that day: a life’s passion. To find and fix the problems introduced by technology to prevent bad stuff from happening to innocent people.” Why Cylance? · 4 December 2012
The full account of Flight 811, in his words
Chapter three

### The Playbook
1996–2004InfoWorld · Hacking Exposed · Foundstone
> “We had to get this knowledge out there, to democratize it, to arm the people on the front lines.” The Gift of a Second Chance
Hacking Exposed, 1999–2012
> “We weren’t giving away secrets; we were arming our own side.”The Gift of a Second Chance
Stuart wrote the book with Joel Scambray and George Kurtz. It laid out, step by step, how attackers break into computer systems, so that the people defending those systems could see what was coming and stop it.
> “Every copy we sold felt like installing a stronger latch somewhere in the world.” The Gift of a Second Chance
The shelf

#### The playbook kept growing.
Figure: Stuart McClure’s books and forewords, in year order
A bookshelf that fills in year order, from 1999 to 2026. The books Stuart McClure wrote or co-wrote: Hacking Exposed, 1st edition (1999); the 2nd edition (2000); the 3rd edition (2001); Hacking Exposed Windows 2000 (2001); Hacking Exposed, 4th edition (2003); Web Hacking: Attacks and Defense, with Saumil Shah and Shreeraj Shah (2002); Hacking Exposed, 5th edition (2005); Hacking Exposed Windows Server 2003 (2006); Hacking Exposed Windows, 3rd edition (2007); Hacking Exposed, 6th edition (2009); Hacking Exposed, 7th edition (2012); and Guardians of the Machine Age: Security in the Digital Era, a multi-author volume he contributed to (2026). The Hacking Exposed spines share one look, black with brass bands, and the Windows volumes add a blue band. Set apart at the end of the shelf, in slimmer spines, are the forewords he wrote for other authors’ books: Special Ops: Host and Network Security for Microsoft, Unix, and Oracle by Erik Pace Birkholz (2003); Hacking for Dummies by Kevin Beaver (2004); Sockets, Shellcode, Porting & Coding (2005); How to Measure Anything in Cybersecurity Risk by Douglas Hubbard and Richard Seiersen (2016); Introduction to Artificial Intelligence for Security Professionals by the Cylance team (2018); and The Language of Deception by Justin Hutchens (2024).
Figure: How a Hacking Exposed chapter teaches
A simplified open book, not a real page. The left page shows an attack laid out step by step. An arrow crosses the gutter to the right page, which holds the countermeasures that address it, marked with a level brass stripe, the site’s sign for checked and secure.
Every attack chapter of Hacking Exposed follows the same pattern. First it shows how an attack works, in enough detail to repeat it. Then it gives the countermeasures that address it.
> “…we painstakingly enumerate the ways the hacker gains access to systems, networks, applications and databases… And we went to great lengths to discuss the fixes, changes, products, education and mitigating countermeasures that would reduce and eliminate the risks found in the book.”Why Cylance? (Part 2) · 13 February 2013
Titles and years come from the Library on this site; Web Hacking’s co-authors are from its book page. The spines are drawn for this page and are not the real cover designs. The chapter pattern is described on the old site’s pages for the fifth and sixth editions, and by Stuart in Why Cylance? (Part 2), 2013.
From his Security Watch column in InfoWorld

#### He said it in 1999.
> “…we hope IT organizations won’t try to use Active Security or similar technologies to displace human insight.” InfoWorld · 19 April 1999 · Stuart McClure & Joel Scambray
> “…customers realize that prevention, and not simply detection, is key to thwarting attackers.” InfoWorld · 27 Dec 1999 / 3 Jan 2000 · Stuart McClure & Joel Scambray
Stuart McClure and Joel Scambray in 1999. Together they wrote ninety-two Security Watch columns for InfoWorld between 1998 and 2002.
Chapter four

### The Prediction
2012–2019Cylance
> “I didn’t want to detect attacks faster; I wanted to prevent them from ever executing in the first place.” The Gift of a Second Chance
Cylance headquarters, Irvine, California.
Figure: A latch the way it is meant to be: the cam closed around its pin and the lock sector locked over it
A close-up of one cargo-door latch, drawn after Figure 5 of the NTSB report AAR-92/02. The latch cam is closed around its pin, and its painted alignment stripe points straight at the arrow on the fitting below, which is how someone looking through the view port could see that it was latched. Above it, the brass lock sector has rotated down into its locked position over the cam.
A latch cam closed around its pin, with the lock sector locked over it: the way the latch is meant to be. Drawn after the NTSB report AAR-92/02, Figure 5.
The latch, again
> “It was the digital equivalent of an engineer inspecting the cargo door latch and knowing, just by its metallurgical properties and design, that it was going to fail under pressure, without ever having to see it fail first.” The Gift of a Second Chance · on Cylance’s AI
Two ways to meet a new file
Figure: Two ways to meet a new file: signature antivirus and prediction
Two timelines side by side, with time running down the page. On the left is signature antivirus. A new file arrives and no signature matches it, because it is new, so it runs and someone is hit first. Only then is a sample caught and analyzed, a signature made, and an update shipped out to millions of machines. You are protected after the fact. On the right is prediction, the approach Stuart McClure built at Cylance. The same new file arrives, a machine learning model reads it on the device and scores it in milliseconds, and the file is stopped before it can run, so you are protected and nothing ran. A dashed line across both timelines marks the moment the file would run.
Nine US patents, by the year each was granted
Figure: Stuart McClure’s nine US patents, grouped by family and placed by the year each was granted
A time axis from 2006 to 2024 with three branches. First, network vulnerability detection and reporting, from Foundstone and later assigned to McAfee: five grants, US 7,152,105 in December 2006, US 8,135,830 in March 2012, and US 8,615,582, US 8,621,060 and US 8,621,073 in December 2013. Second, network-based asset operational dependence scoring, a McAfee patent: one grant, US 8,997,234 in March 2015. Third, machine learning at Cylance: application execution control utilizing ensemble machine learning, US 10,235,518 in March 2019 and its continuation US 10,817,599 in October 2020, and automated generative multimodel multiclass classification using machine learning, US 11,657,317 in May 2023.
Signature antivirus looks for threats it already knows. For every new threat, Stuart wrote, a security company had to capture it, analyze it, create a signature, and push that update out to millions of machines. Cylance’s model did not wait: It made its decision pre-execution, in milliseconds, right on the endpoint. The Gift of a Second Chance; headings after Why Cylance? (Part 2), 2013 His nine US patents, from the Library: five on network vulnerability detection and reporting (Foundstone, later McAfee, 2006 to 2013), one on asset dependence scoring (McAfee, 2015), and three on machine learning that judges whether a file is safe to run (Cylance, 2019 to 2023). Each dot sits at the date the patent was granted. Library, U.S. patent records
His guiding question
“How do we stop the problem before it starts?”
The Gift of a Second Chance
Cylance used artificial intelligence to judge whether a file was safe before it was allowed to run, right on the computer itself, instead of waiting for someone to be hit first.
> “The significance of the cutting edge preventative technology offered by Cylance in responding to the OPM data breach cannot be overstated.”
The deal was announced in November 2018 and closed in February 2019.
Chapter five

### The Human System
2020–nowQwiet AI · NumberOne AI · WethosAI
> “The most complex, volatile, and critical system of all is not made of code or silicon. It’s us. It’s the human system.” The Gift of a Second Chance
From his InfoWorld column of 19 April 1999, written with Joel Scambray.
> “Data doesn’t make decisions. People do.” (un)Lonely at the Top · 17 August 2026
The companies, in their own words

#### The Human Context Platform
“Bring human alignment into the decisions that matter.”
CEO & co-founder · wethos.ai

#### A venture studio for applied AI
“…a venture studio and incubator creating intelligent systems that bridge research and reality.”
Founder · numberone.ai

#### Application security, built in
An AI-powered platform for application security, which helps teams keep the software they build safe from attack. Harness acquired Qwiet AI in 2025.
Former CEO
> “This isn’t about replacing us; it’s about amplifying us.” Human+AI Alignment · (un)Lonely at the Top · 17 September 2026
> “WethosAI supports judgment. It does not replace it.” Stuart McClure · founder’s letter, wethos.ai
Figure: A real decision
A card holds a real question a leader might face: should we launch the new product in March, or wait until we fix onboarding? Below it are the two options, A: launch in March, and B: fix onboarding first. Option A is the one taken into rehearsal first.
Figure: Rehearsing the decision with the people it affects
Four people sit around a round table, each with the way they tend to decide: an engineering lead decides on the details, a sales lead on momentum, a support lead for the customer, and a finance lead on the risk. Option A, launch in March, travels once around the table and is tried against each of them. Engineering, sales and finance are in line with it. Support sees friction, because onboarding is not fixed yet, and that shows up before anything is decided. The four people are an illustration, not a real team.
Figure: The leader decides
The leader makes the call, now with the people it affects in view. The leader's portrait ring and the decision card settle in brass, marking the call as made. Beneath it: Human plus AI is greater than AI. The AI helps rehearse the decision; the person keeps the authority and the accountability for it.
The idea behind WethosAI, the company Stuart co-founded and leads as CEO: model how the people around a decision think and decide, so a leader can rehearse a consequential choice with human context before it becomes irreversible. Friction can surface before it becomes expensive, and authority and accountability stay with people. The example decision and the four people are illustrations, not a customer story or a product screen. Sources: Stuart’s founder letter on wethos.ai/company, his speaker bio, the WethosAI Manifesto, and his essay Human + AI is Greater Than AI.
Try it

#### One decision, human first.
Use AI the way Stuart builds it: to widen what you can see, not to make the call for you.
Everything here was written in advance; none of it is generated live. This page runs no AI model, and nothing you type leaves this page.
- Write down one real decision Leave out private details, because you’ll paste this into another tool.

##### Write down one real decision
- Take this prompt to the AI tool you already use Copy prompt

##### Take this prompt to the AI tool you already use
- Check what the AI can’t know Who isn’t in the room, and what would they say? What does the other person see that I don’t? What does it cost if I’m wrong, and who pays?

##### Check what the AI can’t know
- Make the call I’ve decided “Data doesn’t make decisions. People do.” Stuart McClure · (un)Lonely at the Top · 17 August 2026 Your call. That’s the point.

##### Make the call
Chapter six

### Your turn.
The photo above shows Stuart at a UC Irvine commencement ceremony.
Your checks

#### Six small checks. No score.
Each of these takes only a few minutes. Open the ones you’ll actually do, and you can print them on a small card to keep in your wallet. Nothing you choose here is scored, saved or sent anywhere.
- A family code wordFor calls that fake a loved one’s voice Agree on one word that only your family knows. If someone who sounds like a loved one calls in a panic asking for money, ask them for the word. AI can copy a person’s voice, but it can’t know what was said around your kitchen table.
- Check one sourceBefore you forward an AI summary Before you share something an AI told you, open at least one of its original sources and check that it really says that. As Stuart wrote in 2016: Test for yourself.
- A backup you’ve restoredNot just one you made A backup only counts once you know you can get a file back from it. This week, try restoring one file from yours.
- A passkey on your emailOr at least two-factor sign-in Whoever controls your email can reset the passwords on almost every other account you have. Protect it first, with a passkey or at least two-factor sign-in.
- A pause before “urgent”Sixty seconds is enough Scammers rely on urgency, because people in a hurry skip their usual checks. When a message says it’s urgent, wait a minute, then confirm it with the sender some other way, such as a phone number you already have.
- A 15-minute pre-mortemBefore a big team decision Before the team commits, ask the room: “It’s next month and this failed. Why?” Then take the first answer seriously and fix it before you go ahead.

### My checks
Find the faulty latch. Before it fails. · stuartmcclure.ai
Where to go next

#### Try Stu’s Twin
An AI model of how Stuart thinks, built and run by WethosAI, the company he leads. Ask it a hard question and see how it answers.

#### Invite Stuart to speak
He gives keynotes on preventing failures before they happen, on AI, and on human judgment.

#### (un)Lonely at the Top
His weekly newsletter on Substack about how leaders make decisions under pressure.

#### The Library
A searchable archive of more than 400 pieces of his work, from books and articles to talks and interviews.
In 2016 he wrote Test for yourself. In 2026, writing about his AI Twin, he made the same point another way: Put it to the test.
The film

### The whole story, in sixty-eight seconds.
The record

### The Faulty Latch

#### Founded
- Computerese1992
- Foundstone co-founder1999
- Cylance co-founder & CEO2012
- NumberOne AI2021/22
- WethosAI co-founder & CEO2024

#### Led
- McAfee Worldwide CTOto 2012
- Qwiet AI CEOto 2025

#### Written
- Hacking Exposed with Joel Scambray & George Kurtz1999–2012
- Hacking Exposed Windows with Joel Scambray2001–2007
- Web Hacking: Attacks and Defense with Saumil Shah & Shreeraj Shah2002
- Guardians of the Machine Age contributing author2026
- Forewords 6 books by other authors2003–2024
- InfoWorld 40 articles · 92 Security Watch columns1996–2002

#### The numbers
- Patents9
- Board seats16
- Exits, as founder, leader, board member or investor9
- Years working in technology35+

#### Giving
- Clavis Foundation “clavis” is Latin for key2020–
- Omada Foundation community initiatives in Orange County
Every dated piece of work in the Library, year by year, from 1989 to 2026.
Figure: The Library, year by year, 1989 to 2026
A river chart of the 424 dated pieces of work in Stuart McClure’s Library, stacked by kind for each year from 1989 to 2026. It starts in 1989 with Flight 811. From 1996 to 2000 the river is almost all writing for InfoWorld and is widest in 2000, with 45 pieces. It runs thin from 2001 to 2011, widens again from 2012 with talks and press, and swells to 34 pieces in 2024, with talks the largest part. By kind: writing (169); talks (99); press (78); recognition (26); books and forewords (19); companies, boards and investments (24); about Flight 811 (14). Bands alongside the timeline show the companies he founded or co-founded: Computerese, 1992 to 1994; Foundstone, 1999 to 2004; Cylance, 2012 to 2019; NumberOne AI, 2022 to now; WethosAI, 2024 to now. Other bands show the ones he led: McAfee, 2004 to 2012; Qwiet AI, 2020 to 2025. A shelf of book spines holds one for each book he wrote, co-wrote or contributed to (published in 1999, 2000, 2001, 2002, 2003, 2005, 2006, 2007, 2009, 2012, 2026), including the first Hacking Exposed in 1999 and Web Hacking: Attacks and Defense, and a smaller, outlined spine for each foreword he wrote (2003, 2004, 2005, 2016, 2018, 2024).
Figure: Hacking Exposed - 1st Edition (1999)
Figure: Hacking Exposed - 2nd Edition (2000)
Figure: Hacking Exposed - 3rd Edition (2001)
Figure: Hacking Exposed Windows - 2000 Edition (2001)
Figure: Web Hacking: Attacks and Defense (2002)
Figure: Hacking Exposed - 4th Edition (2003)
Figure: Special Ops: Host and Network Security for Microsoft, Unix, and Oracle (2003), foreword
Figure: Hacking for Dummies (2004), foreword
Figure: Hacking Exposed - 5th Edition (2005)
Figure: Sockets, Shellcode, Porting & Coding (2005), foreword
Figure: Hacking Exposed Windows - Server 2003 Edition (2006)
Figure: Hacking Exposed Windows - 3rd Edition (2007)
Figure: Hacking Exposed - 6th Edition (2009)
Figure: Hacking Exposed - 7th Edition (2012)
Figure: How to Measure Anything in Cybersecurity Risk (2016), foreword
Figure: Introduction to Artificial Intelligence for Security Professionals (2018), foreword
Figure: The Language of Deception (2024), foreword
Figure: Guardians of the Machine Age: Security in the Digital Era (2026)
Figure: Computerese, 1992 to 1994
Figure: Foundstone, 1999 to 2004
Figure: McAfee, 2004 to 2012
Figure: Cylance, 2012 to 2019
Figure: Qwiet AI, 2020 to 2025
Figure: NumberOne AI, 2022 to now
Figure: WethosAI, 2024 to now
Figure: 1989: 2 pieces (2 about Flight 811)
Figure: 1990: no dated pieces
Figure: 1991: no dated pieces
Figure: 1992: 2 pieces (1 company, board or investment, 1 about Flight 811)
Figure: 1993: no dated pieces
Figure: 1994: no dated pieces
Figure: 1995: no dated pieces
Figure: 1996: 6 pieces (6 writing)
Figure: 1997: 16 pieces (16 writing)
Figure: 1998: 37 pieces (37 writing)
Figure: 1999: 36 pieces (33 writing, 1 press, 1 book or foreword, 1 company, board or investment)
Figure: 2000: 45 pieces (37 writing, 3 talks, 4 press, 1 book or foreword)
Figure: 2001: 6 pieces (2 writing, 2 talks, 2 books or forewords)
Figure: 2002: 3 pieces (1 writing, 1 press, 1 book or foreword)
Figure: 2003: 4 pieces (1 talk, 1 press, 2 books or forewords)
Figure: 2004: 5 pieces (1 talk, 2 press, 1 book or foreword, 1 company, board or investment)
Figure: 2005: 4 pieces (2 press, 2 books or forewords)
Figure: 2006: 3 pieces (1 press, 1 recognition, 1 book or foreword)
Figure: 2007: 1 piece (1 book or foreword)
Figure: 2008: no dated pieces
Figure: 2009: 3 pieces (1 press, 1 book or foreword, 1 about Flight 811)
Figure: 2010: no dated pieces
Figure: 2011: 5 pieces (1 talk, 4 press)
Figure: 2012: 13 pieces (1 writing, 2 talks, 4 press, 3 recognition, 1 book or foreword, 2 companies, boards or investments)
Figure: 2013: 15 pieces (2 writing, 4 talks, 6 press, 3 recognition)
Figure: 2014: 14 pieces (6 writing, 4 talks, 3 press, 1 company, board or investment)
Figure: 2015: 16 pieces (6 writing, 4 talks, 3 press, 1 recognition, 2 companies, boards or investments)
Figure: 2016: 26 pieces (4 writing, 9 talks, 8 press, 3 recognition, 1 book or foreword, 1 about Flight 811)
Figure: 2017: 18 pieces (1 writing, 9 talks, 2 press, 3 recognition, 2 companies, boards or investments, 1 about Flight 811)
Figure: 2018: 11 pieces (4 talks, 4 press, 1 recognition, 1 book or foreword, 1 about Flight 811)
Figure: 2019: 18 pieces (6 talks, 8 press, 2 recognition, 1 company, board or investment, 1 about Flight 811)
Figure: 2020: 6 pieces (1 talk, 1 press, 1 recognition, 3 companies, boards or investments)
Figure: 2021: 4 pieces (2 talks, 1 recognition, 1 company, board or investment)
Figure: 2022: 7 pieces (1 talk, 4 press, 2 companies, boards or investments)
Figure: 2023: 21 pieces (13 talks, 4 press, 1 recognition, 2 companies, boards or investments, 1 about Flight 811)
Figure: 2024: 34 pieces (5 writing, 14 talks, 7 press, 4 recognition, 1 book or foreword, 3 companies, boards or investments)
Figure: 2025: 25 pieces (10 writing, 8 talks, 3 press, 1 company, board or investment, 3 about Flight 811)
Figure: 2026: 18 pieces (2 writing, 10 talks, 1 press, 1 recognition, 1 book or foreword, 1 company, board or investment, 2 about Flight 811)
Figure: The Library, year by year, 1989 to 2026
A river chart of the 424 dated pieces of work in Stuart McClure’s Library, stacked by kind for each year from 1989 to 2026. It starts in 1989 with Flight 811. From 1996 to 2000 the river is almost all writing for InfoWorld and is widest in 2000, with 45 pieces. It runs thin from 2001 to 2011, widens again from 2012 with talks and press, and swells to 34 pieces in 2024, with talks the largest part. By kind: writing (169); talks (99); press (78); recognition (26); books and forewords (19); companies, boards and investments (24); about Flight 811 (14). Bands alongside the timeline show the companies he founded or co-founded: Computerese, 1992 to 1994; Foundstone, 1999 to 2004; Cylance, 2012 to 2019; NumberOne AI, 2022 to now; WethosAI, 2024 to now. Other bands show the ones he led: McAfee, 2004 to 2012; Qwiet AI, 2020 to 2025. A shelf of book spines holds one for each book he wrote, co-wrote or contributed to (published in 1999, 2000, 2001, 2002, 2003, 2005, 2006, 2007, 2009, 2012, 2026), including the first Hacking Exposed in 1999 and Web Hacking: Attacks and Defense, and a smaller, outlined spine for each foreword he wrote (2003, 2004, 2005, 2016, 2018, 2024).
Figure: Computerese, 1992 to 1994
Figure: Foundstone, 1999 to 2004
Figure: McAfee, 2004 to 2012
Figure: Cylance, 2012 to 2019
Figure: Qwiet AI, 2020 to 2025
Figure: NumberOne AI, 2022 to now
Figure: WethosAI, 2024 to now
- Writing 169
- Talks 99
- Press 78
- Recognition 26
- Books and forewords 19
- Companies, boards and investments 24
- About Flight 811 14
- Founded or co-founded
- Led
- Book he wrote, co-wrote or contributed to
- Foreword he wrote
This chart is drawn from the Library itself, so it grows whenever the Library does. The Library holds 429 pieces of work; the 424 that carry a year are shown here, and five undated pieces are counted in the totals but not in the river. The river is widest from 1998 to 2000, when the InfoWorld articles and Security Watch columns were coming out, and it swells again from 2023 with podcasts, webinars and keynotes. Among the book spines is Web Hacking: Attacks and Defense, alongside the Hacking Exposed books, and the outlined spines are the forewords he wrote for other authors’ books. Source: the Library on this site.
In memory of the nine passengers of United Airlines Flight 811 who did not come home.24 February 1989

========================================================================
## Flight 811 — Stuart McClure (flight-811.html)
========================================================================

Content note This page describes an accident in which nine people died.
United Airlines Flight 811 · Honolulu to Sydney, via Auckland

## Flight 811
24 February 1989
On 24 February 1989, soon after United Airlines Flight 811 took off from Honolulu, its forward cargo door opened in flight. Stuart was on board. This page sets out what the official record shows, what Stuart remembers of that night, and how it shaped the work he went on to do. It is told plainly, in memory of the nine passengers who did not come home.
What the record shows

### The night
- 01:52:49 HST Flight 811 is cleared for takeoff from Honolulu on runway 8R.NTSB AAR-92/02, §1.1
- 02:09:09 HST The cockpit voice recorder picks up a loud bang. The forward cargo door has separated from the airplane, and the cabin suddenly loses its pressure.The airplane was climbing between 22,000 and 23,000 feet. §1.1, §1.11
- 02:34 HST The airplane has turned back and landed at Honolulu, on runway 8L. The crew tells the tower the airplane has stopped and the evacuation has begun.§1.1
Times are Hawaii Standard Time, from the National Transportation Safety Board’s Aircraft Accident Report NTSB/AAR-92/02, adopted 18 March 1992.

#### Aboard
Flight crew
3
Cabin crew
15
Passengers
337
In all
355
Of everyone on board, 346 survived. Nine passengers were lost.
The airplane was a Boeing 747-122, registration N4713U. Source: NTSB AAR-92/02, Executive Summary and §1.1.
Stuart’s first public account · 4 December 2012

### In his words
Twenty-three years after the flight, Stuart wrote it down for the first time, in a letter explaining why he had started Cylance. The passages below are his own words from that letter, unedited except where a cut is marked.
- Settling in “I settled into my aisle seat … and took my shoes off, anticipating sleeping most of the long flight to New Zealand (the stopover on our way to Sydney). As the plane lifted off and made its climb out of Honolulu I tried to doze off. In the seats on my left were my mother and younger brother.” Why Cylance? · 4 December 2012
- The two children “As I looked out the window I saw two children traveling alone completely confused and scared beyond words. My helplessness made it more painful, I could not offer them any solace or hope.” Why Cylance? · 4 December 2012
- The handshake “I looked to the passenger across the aisle from me, a man I had never met and sitting next to the children traveling alone, as he extended his hand to shake mine and said ‘It’s been nice knowing you.’ After reluctantly shaking his hand my brain was instantly flooded with the concept everyone else was already thinking… I am going to die, aren’t I?” Why Cylance? · 4 December 2012
- The realization “I wish I could say that my life flashed before me but it didn’t. Sure I regretted many things I did or did not do but it wasn’t a flash, it was a revelation – of all the missed opportunities, the squandered challenges, and the missed loves.” Why Cylance? · 4 December 2012
- The landing “There were many stories of heroism and heroine-ism that I will share with you another time but when we landed safely … no one knew how we landed safely not even the pilot.” Why Cylance? · 4 December 2012
- The call “In the months following the flight, I was given the rare opportunity to talk to the Captain of our flight, Captain David Cronin, who was just two flights from mandatory retirement with United. As he spoke to me over the phone from his home in Lake Tahoe I had but one question I had to ask him ‘How did you get us back safely?’” Why Cylance? · 4 December 2012
Read the whole 2012 letter
National Transportation Safety Board · AAR-92/02

### The cause
§3.2 · Probable causeVerbatim
> “The National Transportation Safety Board determines that the probable cause of this accident was the sudden opening of the forward lower lobe cargo door in flight and the subsequent explosive decompression. The door opening was attributed to a faulty switch or wiring in the door control system which permitted electrical actuation of the door latches toward the unlatched position after initial door closure and before takeoff. Contributing to the cause of the accident was a deficiency in the design of the cargo door locking mechanisms, which made them susceptible to deformation, allowing the door to become unlatched after being properly latched and locked. Also contributing to the accident was a lack of timely corrective actions by Boeing and the FAA following a 1987 cargo door opening incident on a Pan Am B-747.”
This is the Safety Board’s finding on the cause, quoted in full from section 3.2 of its report NTSB/AAR-92/02. That report replaced the Board’s first report on the accident, AAR-90/01, which was written before the cargo door was recovered from the ocean floor in 1990.
The warning had come two years earlier, on another airline’s 747. Read in order, the record below is a chain of chances to find and fix this door problem in time: an earlier incident, a required fix, a repair date already set for this airplane, and a simple way to see the latches that no one was required to use.
- 10 March 1987 A Pan Am 747’s cargo door opens in flight Pan Am flight 125, from London to New York, has trouble keeping the cabin pressurized and returns to London. When the airplane is examined on the ground, the forward cargo door is found open about 1½ inches along the bottom. In plain terms, the latches were open, but the handle that locks them was closed and the cockpit’s cargo door warning light was off. The door was not secure, and the warning light did not show it. “…with the latch cams unlatched and the master latch lock handle closed. The cockpit cargo door warning light was off.” NTSB AAR-92/02, §1.17.1

#### A Pan Am 747’s cargo door opens in flight
- 13 May 1988 The FAA makes the fix mandatory: AD 88-12-04 After the Pan Am incident, in April and August 1987, Boeing sent airlines two notices about the cargo door, called alert service bulletins. The FAA then made their fixes a legal requirement with an Airworthiness Directive, AD 88-12-04. Airlines had to inspect the mechanisms that lock the door’s latches within 30 days. Within 18 or 24 months, depending on the 747 model, they also had to add steel plates, called doublers, to strengthen the lock sectors: the parts that lock the latches in place. The report gives two dates for the directive. Section 1.6.8 gives the issue date as 13 May 1988. The analysis in section 2.7 cites 1 July 1988: “nearly 16 months from the date of the Pan Am Incident.”

#### The FAA makes the fix mandatory: AD 88-12-04
- April 1989 The fix for this airplane was on the calendar “According to UAL, N4713U was scheduled for completion of the terminating action in April 1989, when the airplane was scheduled for other heavy maintenance.” “Terminating action” means the permanent fix the directive called for: the steel doublers on the lock sectors. That work had not yet been done on this airplane, and it was not yet required, because the legal deadline was January 1990. Flight 811 flew on 24 February 1989, weeks before the work was scheduled. NTSB AAR-92/02, §1.6.8

#### The fix for this airplane was on the calendar
- The door itself Eight small windows that no one was required to check “The B-747 cargo door has eight (8) view ports located beneath the latch cams for direct viewing of the position of the cams by means of alignment stripes. Procedures for using these view ports for verifying the position of the cams were not in place or required by Boeing, the FAA, or UAL.” NTSB AAR-92/02, §1.6.2

#### Eight small windows that no one was required to check
> “After years of investigation, we learned that the event wasn’t a random act of God. This wasn’t bad luck. This was a simple multi-system failure. A chain reaction of design flaws, preventable mistakes. An ignored warning. A faulty backup latching system.” Stuart McClure · The Gift of a Second Chance
Captain David Cronin

### The captain
Captain David Cronin of United Airlines.
Months later, Stuart reached the captain by phone and asked him how he had brought them home. This is the answer as Stuart recalled it in 2012.
> “I don’t know, Stuart.”
> “When we landed, the engineers on the ground took the flight data and punched it into our computer model simulations exactly as it was during that flight and with well over 200 simulations modeled, they all crashed in the water or on land. So no, I truly don’t know how we all made it back. I simply cannot explain it.” Captain David Cronin, as Stuart recalled him · Why Cylance? · 2012
In the captain’s telling, every computer simulation of that flight ended in a crash. Yet the crew found a way to bring the airplane back to Honolulu.
A life’s work

### What it became
> “Tragedy = Passion.”Stuart McClure · Why Cylance? · 4 December 2012
> “I was given a present beyond words that day: a life’s passion. To find and fix the problems introduced by technology to prevent bad stuff from happening to innocent people. That is my passion. That is our mission. That is what we will achieve.” Why Cylance? · 4 December 2012
Later, in his memoir
> “Surviving that day didn’t just give me a second chance. It burned a mission into my soul. It wasn’t a choice anymore. It wasn’t a career path. It was a moral imperative. My purpose was to find the faulty latches of the world, the weak points, the hidden flaws, the ignored warnings, and fix them before they could tear another hole in someone’s life.” Stuart McClure · The Gift of a Second Chance
Read the memoir

### Remembering
Nine passengers were lost.
> “One moment they were there, people with lives and families and plans, and the next, just a gaping hole and the deafening, soul-stealing roar of the wind.” Stuart McClure · The Gift of a Second Chance
Their names are not published on this site. They belong to their families, and it is for the families to decide whether to share them.

### Sources
- National Transportation Safety Board, Aircraft Accident Report NTSB/AAR-92/02: Explosive Decompression, Loss of Cargo Door in Flight, United Airlines Flight 811 Adopted 18 March 1992. The link opens a PDF copy of the full report, hosted by Tailstrike.
- Stuart McClure, “Why Cylance?” Published 4 December 2012. Stuart’s first public account of the flight, and the source of most of his words on this page.
- Stuart McClure, The Gift of a Second Chance Stuart’s memoir. Several of the quotations on this page come from it.
Continue

========================================================================
## The Gift of a Second Chance — Stuart McClure (letters/the-gift-of-a-second-chance.html)
========================================================================

MemoirMarch 2026

## The Gift of a Second Chance
“The Faulty Latch”: A Life Spent Preventing the Next Disaster
Stuart McClure
About 15 minutes 3,457 words In his own words
Stuart’s life’s work has been forged by a single, unwavering mission of prevention, a principle seared into his soul at age 19 as a survivor of the catastrophic United Flight 811 disaster. That moment, where he struggled to process the preventable system failure of a “faulty latch” even as he faced sure death, became the throughline for his entire career. It drove him to co-found Foundstone and write Hacking Exposed, shifting the security paradigm from reaction to proactive defense by teaching the world to think like an attacker. Later, recognizing the inherent flaws in reactive antivirus, he founded Cylance, pioneering the use of AI to predict and prevent malware before it could ever execute. Now, his preventative focus extends to the most complex system of all, the human mind and collaboration, with WethosAI, continuing a lifelong quest to find and fix the faulty latches in our world, whether they are in our technology or in ourselves.

### Part 0: To Understand the Latch…
People often ask me what drives me. They see the companies, the books, the talks, and they try to connect the dots from a LinkedIn profile. They see a career. But I don’t see a career. I see a single, unbroken thread that runs from a childhood spent on the move for survival to a moment of sheer terror suspended 22,000 feet above the Pacific Ocean. Everything I am, everything I’ve built and pursued, it all started there.
The truth is, all the dots connect back to a single, faulty latch. But to understand the latch, you have to understand the kid who was conditioned to see it in the first place.

### Part I: The Observer
My story doesn’t have a hometown; it has a series of backdrops, each one a lesson in adaptation. I was born in the sprawling, smogged out, riotted, sun-baked suburbs of Los Angeles, but my memory begins in a place that couldn’t be more different: Guam. We moved there when I was two years old. My new world wasn’t asphalt and freeways; it was the crushing humidity that hit you like a wet towel the moment you stepped outside, the constant, rhythmic crash of waves on the reef, and the sweet, heavy scent of plumeria flowers (my favorite flower) mixed with salt and damp earth.
Being a “haole” kid (a white outsider) in a ubiquitous Chamorro and Filipino culture was my first, and most profound, education. I was different, very different. My skin, my hair and eye color, even the food my mom packed for my lunch. When you’re the new kid, over and over, you learn to do one thing really well: you watch. You become a master observer, not by choice, but by necessity. I’d stand at the edge of the schoolyard, watching the other kids. I didn’t just see them playing; I saw the invisible architecture of their world. I saw the unspoken rules of their games, the subtle hierarchies determined by who could climb the highest in the banyan tree, the way one person’s actions rippled through the group. I learned to deconstruct social systems on the fly just to figure out where I fit, or how to avoid trouble.
I remember one time, watching a group of kids play a game with marbles. I had no idea what the rules were. But I watched for an hour. I saw how they drew the circle in the dirt, how they held the shooter marble, the specific flick of the thumb that sent it spinning with deadly accuracy. I saw which marbles were valuable, which shots were risky, and which player was the unspoken leader. The next day, I walked up, and without saying a word, I played. And I fit in. That constant adaptation, that need to understand the underlying mechanics of a new place before engaging, became a part of my DNA. It was pattern recognition, born from social survival.
After almost eight years on Guam, I moved again, this time to Hawaii for a year, then to Colorado Springs for my final years of high school. Each move was another system to deconstruct, another set of rules to learn. By the time I got to the University of Colorado Boulder, I was hardwired to look beneath the surface. I couldn’t just pick a standard major; it felt too superficial. I was obsessed with the why behind everything. Why do people make the choices they do? Why do they build things in a certain way, and why do those things so often break?
So I cobbled together my own curriculum, a strange brew of psychology, philosophy, and computer science. It seemed like the only way to get at the root of it all. Psychology gave me insight into the flawed, brilliant, unpredictable human mind including its biases, its motivations, its capacity for both genius and catastrophic error. Philosophy gave me the frameworks to think about logic, ethics, intent and the meaning of life. And computer science gave me the keys to a new kingdom: a world built on pure, cold, unforgiving logic.
I was fascinated by the intersection of these worlds. The space where human intent, with all its messiness, met the rigid structure of a machine. I didn’t know it then, but I was building the perfect toolkit to one day get inside the mind of a hacker—to understand not just what they did, but why they did it.

### Part II: The Fall
February 24, 1989. I was 19 years old, a week shy of my 20th birthday. I was on United Flight 811, flying from Honolulu to New Zealand to accompany my mother who invited me to travel to Australia to visit my stepfather who was visiting Sydney for work. I was a college kid on an adventure so despite my misgivings, I jumped at the chance. Through some stroke of luck, we managed to get an upgrade to the business class section of the 747. For my mother and younger brother sitting in Row 44 at the time, it felt like we had won the lottery. But in the moments after the offer to upgrade I had a bad feeling about what it meant, and decided to suggest to my mother that we should stay in our current seats, as we were comfortable having the entire middle 5 seats for us. So we passed.
The takeoff was smooth. We climbed through the clouds. The flight attendants started their service. Given it was 2am local time (5am LA time) I was tired and fell asleep quickly.
Then, an explosive sound produced the most violent chaos one could ever experience. An explosive decompression. The forward cargo door had ripped off and nine human beings buckled comfortably in their seats were torn from their bolts and sucked out into the blackness of the night sky. One moment they were there, people with lives and families and plans, and the next, just a gaping hole and the deafening, soul-stealing roar of the wind.
It wasn’t like in the movies. There’s no dramatic music, no slow motion. It was a physical assault. The air became a solid force, a hurricane tearing through the cabin, ripping at your clothes, your skin, sucking the breath from your lungs. Debris became shrapnel. The oxygen masks dropped in some sections but not others and panic ensued. The primal scream of the passengers and the wind was overwhelming. It was a cacophony of sound that erased all other thoughts.
For twenty minutes, as the pilots wrestled with a crippled giant, trying to get us back to Honolulu, I was absolutely, fundamentally certain that I was going to die. In fact, I believe that my mind actually died in that moment, or at least what I thought I had as a mind then. Time warped. Seconds felt like hours. I remember looking at the horrified passengers next to me and the flight attendants racing through the cabin trying to prepare us all for a crash landing and thinking, “So this is it. This is how it ends.”
A latch failed. A door blew off. This didn’t have to happen.
When we finally, miraculously, landed back in Honolulu, the silence was as shocking as the noise had been. The wind was gone. All you could hear was the sobbing of the survivors and the whine of the emergency vehicles racing toward us. Walking off that plane, past the twisted metal and the gaping hole, was like being born again, but into a different world. A world where I understood, on a cellular level, the fragility of the systems we rely on every single day.
After years of investigation, we learned that the event wasn’t a random act of God. This wasn’t bad luck. This was a simple multi-system failure. A chain reaction of design flaws, preventable mistakes. An ignored warning. A faulty backup latching system.
Surviving that day didn’t just give me a second chance. It burned a mission into my soul. It wasn’t a choice anymore. It wasn’t a career path. It was a moral imperative. My purpose was to find the faulty latches of the world, the weak points, the hidden flaws, the ignored warnings, and fix them before they could tear another hole in someone’s life.

### Part III: The Playbook
After Flight 811, I couldn’t see the world the same way. Every system, every process, every piece of technology had a potential point of failure. When I started my career at Ernst & Young, tasked with building their first cybersecurity practice, I saw the same pattern everywhere, this time in the digital world. It was the early 90s, the dawn of the commercial internet, and companies were rushing online with a kind of gold-rush naivete. Their approach to security was terrifyingly familiar. They were waiting for the breach to happen, for the “cargo door” to blow off their network, before they even thought about security. They saw it as an expense, a nuisance. Security was the cleanup crew you called after your customer data was splattered all over the internet. This reactive posture felt viscerally wrong to me. It was the same flawed thinking that had put me in the sky that night.
I knew I had to do something different. I couldn’t just be part of the cleanup crew. In 1999, I left the comfort of a big firm and, with my co-founders, took the entrepreneurial leap. We started Foundstone. Our mission was simple, but revolutionary for its time: to stop a hacker, you have to become one. We would be the “ethical hackers,” the ones who would show you exactly how the door would fail before the real storm hit. We pioneered the field of penetration testing, not as a theoretical exercise, but as a full-contact sport. We’d break into a company’s network—with their permission, of course—and then walk into their boardroom and show them, step by step, how we did it.
The reactions were always the same. First, disbelief. Then, anger. Finally, a dawning understanding. We weren’t just showing them vulnerabilities; we were changing their entire mindset.
But showing a few dozen companies wasn’t enough. The problem was systemic. We had to get this knowledge out there, to democratize it, to arm the people on the front lines. That’s why I wrote Hacking Exposed. I made a conscious decision to do something that was considered almost heretical and decided to publish the attacker’s playbook.
People thought we were crazy. The publisher was nervous. Other security professionals accused us of being irresponsible, of writing a manual for the bad guys. They didn’t get it. The bad guys already knew this stuff; they were inventing it. It was the defenders, the sysadmins in the server rooms, the everyday IT folks, who were in the dark. They were fighting a war without knowing the enemy’s tactics. We weren’t giving away secrets; we were arming our own side. The book was a sensation because it was real. It was a direct manifestation of my core belief: to stop a threat, you must first understand it completely. Every copy we sold felt like installing a stronger latch somewhere in the world.
When McAfee acquired Foundstone in 2004, I transitioned from scrappy startup founder to the Worldwide Chief Technology Officer of a global security giant. From that perch, I had a panoramic view of the entire threat landscape. I could see the data streams from millions of endpoints around the world. I could see the cyber arms race in real-time. And what I saw scared me more than anything since Flight 811.
The reactive model we were all using, the signature-based antivirus model that McAfee itself championed, was fundamentally, mathematically, doomed to fail. The volume of new malware was exploding, growing at an exponential rate. For every new threat, a security company had to capture it, analyze it, create a signature, and push that update out to millions of machines. But the attackers could generate new, unknown malware, “zero-day” threats, infinitely faster. I was sitting in meetings where we were pouring hundreds of millions of dollars into a system that was, by its very design, always one step behind. We were building a bigger, more expensive version of the same reactive mousetrap, while the attackers were breeding new mice faster than we could ever hope to catch them. I saw another catastrophic system failure on the horizon. The industry’s fundamental approach to security was the new faulty cargo door latch. It was only a matter of time before it blew wide open.

### Part IV: The Prediction
The weight of that realization was immense. I felt like a fraud, sitting at the top of a security company, knowing that our core strategy was a losing game. I couldn’t shake the feeling that we were all complicit in a failing system, selling a false sense of security. I tried to change things from the inside, but the corporate immune system is a powerful thing. The company was a massive ship, and turning it was like trying to turn a glacier. I knew I had to do something, and it had to be completely different. I had to jump off the ship and build a new one.
I left McAfee with a singular, audacious goal that most people in the industry considered insane: I was going to solve the problem of malware. Not chase it, not clean it up after the fact. Solve it. Prevent it from ever running.
In 2012, I founded Cylance. The name itself was a portmanteau of “cyberspace” and “silence,” representing the goal of silencing the noise of cyberattacks. The vision was to move beyond reaction entirely. I didn’t want to detect attacks faster; I wanted to prevent them from ever executing in the first place. The key, I believed, was artificial intelligence.
At the time, using AI and machine learning for cybersecurity was a fringe concept, often dismissed as marketing fluff or pure science fiction. But my team and I were convinced it was the only path forward. The idea was to stop looking for the fingerprints of known criminals and instead teach a machine to spot criminal intent just by looking at an object before it ran or was opened into memory.
We embarked on a massive undertaking. We gathered hundreds of millions of files—both good and bad—from every corner of the internet. We fed these files into a machine learning model and trained it to discern the “DNA” of a malicious file. We weren’t looking for signatures, which are brittle and easy to change. We were looking for features, the thousands of subtle attributes and characteristics that, when analyzed together, could predict with mathematical certainty whether a file was a threat. Does it try to access the network? Does it have packed or obfuscated code? Does it call certain APIs in a specific order?
By analyzing these features in concert, our AI could make a predictive judgment on any file, even one it had never seen before. It was the ultimate expression of my preventative philosophy. Cylance’s AI didn’t need cloud lookups, daily updates, or prior knowledge of an attack. It made its decision pre-execution, in milliseconds, right on the endpoint. It was the digital equivalent of an engineer inspecting the cargo door latch and knowing, just by its metallurgical properties and design, that it was going to fail under pressure, without ever having to see it fail first.
Bringing Cylance to market was a brutal, uphill battle. We were challenging the multi-billion-dollar antivirus industry and its decades-long dogma. We were heretics. In meeting after meeting, we were telling customers that the security blankets they had been sold for years were full of holes. We had to prove it, over and over. We did live demonstrations, what we called “The Unbelievable Tour,” pitting our AI against the latest zero-day threats in real-time. We’d download hundreds of brand-new pieces of malware that had just appeared online, drop it on a machine protected by our competitors, and watch it detonate. Then we’d do the same on a machine protected by Cylance, and... nothing. The file would be quarantined before it could even twitch.
Slowly but surely, the tide began to turn. The company’s success was meteoric because the proof was undeniable. We were redefining endpoint security, proving that a preventative approach was not only possible but vastly superior. The journey culminated in 2019 when BlackBerry acquired Cylance for $1.5 billion. As President of BlackBerry Cylance, I worked to integrate this forward-thinking technology into a broader security ecosystem, bringing predictive security to a global scale.
Cylance was more than a company to me. It was the logical and emotional successor to the mission that started in the wreckage of Flight 811. It was proof that with the right approach and relentless innovation, you could build a system that prevents disaster by design.

### Part V: The Human System
But as they say, an innovator’s work is never truly done. After Cylance, my focus didn’t change, but instead it expanded. The core question that has driven my entire career—“How do we stop the problem before it starts?”—remained my guiding star. So I founded a new AI incubator, NumberOne AI, to tackle the next generation of challenges. This led to the creation of companies like WethosAI, and transforming the Appsec company Qwiet AI.
With Qwiet AI, we applied the prevention principle to the very beginning of the technology lifecycle: the software development process. Instead of waiting for vulnerabilities to be discovered in finished products—another form of reactive security—we used AI to find and fix security flaws in the code as it’s being written. It’s about shifting security “left,” making it an integral part of creation, not a final inspection. We are, in essence, helping developers build better, stronger cargo door latches from the very start, embedding security into the blueprint.
But my journey has also led me to a more profound, and perhaps more difficult, realization. The most complex, volatile, and critical system of all is not made of code or silicon. It’s us. It’s the human system. I’ve spent a lifetime analyzing how technical systems fail. But as I built and led multiple companies, I saw that the biggest vulnerabilities in any organization are often not in its firewalls, but in its communication, its collaboration, and its team dynamics. Misunderstandings, cognitive biases, conflicting work styles—these are the “zero-day threats” of human interaction. They can derail projects, destroy morale, and stifle innovation just as effectively as any piece of malware. A brilliant team can be brought to its knees not by a competitor, but by internal friction. It’s another kind of preventable disaster.
This insight is the driving force behind my latest venture, WethosAI. Here, the prevention mission turns inward. We are building an interpersonal productivity platform that uses AI to help individuals and teams understand their innate work styles and cognitive patterns. The goal is to proactively identify and address the friction points that lead to conflict and inefficiency. By making people aware of their own “human code”—how they’re wired to solve problems, communicate, and handle stress—and that of their colleagues, we can prevent misunderstandings before they arise. We can foster more effective collaboration and unlock a higher level of collective intelligence. It’s about preventing the “human error” that is so often the root cause of systemic failure.
When I look back at the arc of my life—from the nomadic kid learning to deconstruct new social systems, to the university student blending psychology with computer science, to the survivor of a catastrophic system failure—I see a single, unbroken thread. My life’s work has been a relentless, sometimes obsessive, quest for prevention.
The terror of Flight 811 was not its end, but its beginning. It taught me that the most devastating failures are not random acts of fate. They are the predictable outcomes of vulnerabilities we have the power to find and fix. My leadership and entrepreneurial spirit have always been a direct reflection of this belief. I don’t build companies just to create technology or generate revenue; I build them to solve problems at their source.
From authoring Hacking Exposed to arm defenders with knowledge, to building Cylance to predict and prevent attacks, to now developing WethosAI to harmonize human collaboration, my mission has evolved but its core has remained the same. It is a mission to move the world from a state of perpetual cleanup to one of intelligent foresight. It is a powerful reminder that sometimes, the most profound purpose can be found in the unwavering commitment to honoring the promise you made to yourself in the terrifying quiet after the wind stopped roaring.
It’s about making sure that what went wrong once, never, ever has to go wrong again. And that is a mission I will continue for the rest of my life.
End
Next on this path

### Keep going.
Three places to go from here, from the night itself to the work it led to.
- The record Flight 81124 February 1989, from the NTSB report and in his words.

#### Flight 811
- The story · Chapter V The Human SystemWhy the hardest system to secure is the people inside it.

#### The Human System
- The archive The LibraryMore than 400 pieces of work, searchable.

#### The Library

========================================================================
## The Library — Stuart McClure (library.html)
========================================================================

## The Library
Thirty years of Stuart’s writing, talks, books and press, in one place you can search.
Pieces
429
In his own words
42
With Joel Scambray
103
Talks & recordings
99
Search everything Start with a question

### Whose words are these? Every piece carries one label, so you know who is speaking.
- Stuart’s wordsStuart wrote it himself, and it ran under his name.
- Co-written with Joel ScambrayStuart wrote it together with Joel Scambray. This covers their Security Watch columns in InfoWorld and the Hacking Exposed books.
- Summary — not his wordsA page written about one of his talks or articles, rather than by him. It sums up what he said, so please don’t quote it as his words.
- PressA journalist or publication reporting on his work, often quoting him.
- ScanA scan of an original document, such as a printed page, a filing or a report.
- VideoAudioA recording of Stuart speaking, such as a talk, an interview or a podcast.
Start with a question

### Four questions people bring to him.
Each shelf below gathers a few pieces that answer one of these questions. Every piece is labeled, so you can tell whether you are reading Stuart’s own words, watching a recording of him, or reading someone else’s report.

#### Will AI take my job?
> “This isn’t about replacing us; it’s about amplifying us.” Human+AI Alignment · (un)Lonely at the Top · 17 September 2026

#### How do I protect my family?
> “Don’t trust us! Please, please, please, just trust yourself. Test for yourself.” Know the Truth · 2016

#### What happened on Flight 811?
> “I was given a present beyond words that day: a life’s passion.” Why Cylance? · 4 December 2012
Nine people died on Flight 811. Out of respect for them, this shelf leaves out emergency footage and sensational retellings.

#### What is prevention-first security?
> “I didn’t want to detect attacks faster; I wanted to prevent them from ever executing in the first place.” The Gift of a Second Chance
Reading paths

### However much time you have.
Pick a path that fits the time you have. Each one is a short list to read or watch in order, because each step builds on the one before it. The times are estimates.
5 minutes

#### Why he started Cylance, in his own words
30 minutes

#### From Flight 811 to prevention-first security
An evening

#### From the attacker’s playbook to people working alongside AI
Books and forewords

### The books he wrote, and the ones he introduced.
The first list holds the books Stuart wrote or co-wrote, starting with Hacking Exposed in 1999 and including its later editions, the Hacking Exposed Windows books and Web Hacking. The second holds the forewords he wrote for other authors’ books. Both lists run oldest first.

#### Books he wrote or co-wrote

#### Forewords he wrote
Everything

### The whole shelf.
Everything in the library, newest first. The search runs entirely in your browser, so nothing you type is sent anywhere.
427 pieces

#### By year

========================================================================
## Speaking — Stuart McClure (speaking.html)
========================================================================

## Keynotes on prevention, AI and human judgment
In 1989 Stuart McClure survived United Airlines Flight 811, when an electrical short told the cargo door to open over the Pacific and a faulty latch allowed it. His talks start there and end with a question your audience can take home: what can we stop before it starts?
On stage, 2026.

### Recent stages
- Secure Miami
- TIF
- The Conference Board
- PwC Modern Tech Leadership
- RSAC Conference
> “It felt like building faster fire trucks instead of trying to prevent fires.” Stuart McClure · About, stuartmcclure.ai (earlier site) · on the security industry he started in
> “Ultimately, it’s all about a fundamental shift in mindset: moving from a culture of reaction to a discipline of prevention.” Stuart McClure · About, stuartmcclure.ai (earlier site)
The program · 2025–2026

### Real talks, recently given.
Stuart gave each of the talks below in the last year or so. Watch any of them before you book to see how he speaks and what he covers; each link opens the recording on YouTube.
Keynote · Secure Miami · FIU, Miami · 5 May 2026

#### From Resilience to Prevention: Simulating Success in a Chaotic World
> “In a landscape defined by chaotic threats—from AI-driven attacks to operational fragility—the industry standard has settled on ‘resilience’: the ability to withstand a hit. But resilience is merely survival. To thrive, we must evolve back to the ultimate power in security and business: Prevention.” From the Secure Miami program
- Keynote TIF 2026 · April 2026 TIF 2026 Keynote Stuart traces a line from Flight 811 to using AI to prevent failures, then explains why people remain essential: AI can’t be held accountable for a bad decision, it doesn’t carry experience, and it can’t read the room. Watch the keynote (opens YouTube in a new tab)

#### TIF 2026 Keynote
- Conversation The Conference Board · with Rita Myerson · 2026 The Hidden Trillion-Dollar Tax on Your Balance Sheet: Fixing Organizational Friction A conversation about why meetings so often defer to the highest-paid person in the room, what “alignment theater” costs when a team only looks aligned, and how simulating a decision ahead of time brings that friction to the surface before it becomes expensive. Watch the conversation (opens YouTube in a new tab)

#### The Hidden Trillion-Dollar Tax on Your Balance Sheet: Fixing Organizational Friction
- Webinar series · Parts I–V WethosAI · 2025–2026 AI Exposed: The Hype Must Die A five-part webinar series from WethosAI that takes a straight look at what AI can and can’t do. In the series’ own words: “Not anti-AI. Anti-hype.” Watch Part I (opens YouTube in a new tab)

#### AI Exposed: The Hype Must Die
- Podcast PwC US · Modern Tech Leadership · Ep. 3 · 15 July 2026 AI and Security Stuart talks with host James Shira about “trust but verify,” attacks that now move faster than people can respond, what deepfakes mean for proving who someone is, and how AI can help a company capture the institutional knowledge its people carry. Watch the episode (opens YouTube in a new tab)

#### AI and Security
For your audience

### What audiences leave with
> “My entire career has been about one thing: prevention.” Stuart McClure · The Troxler Blind Spot · LinkedIn · 3 November 2025
- A prevention habit, not a faster responseHow to spot the hidden weak point in a system, a team or a plan, like the faulty latch on Flight 811, while there is still time to fix it.

#### A prevention habit, not a faster response
- A clear-eyed view of AIAn honest picture of what AI does well and where it fails, and why people stay accountable for the decisions it helps them make.

#### A clear-eyed view of AI
- A way to rehearse hard decisionsHow to simulate the options, and the people each one affects, so a team can test a hard choice before it becomes irreversible.

#### A way to rehearse hard decisions
- One check to run on MondayA small, concrete step that every person in the room can take in the week after the event, whatever their role.

#### One check to run on Monday
For organizers and bureaus

### The organizer kit
What you need to introduce and promote Stuart: an up-to-date bio in three lengths that you can copy straight into your program, and headshots you are free to use today.

#### Speaker bio
50 words
Stuart McClure builds technology that finds failure before it happens. He co-founded Cylance, which used artificial intelligence to stop malware before it could run, and co-authored Hacking Exposed. Today he is co-founder and CEO of WethosAI, which helps leaders rehearse consequential decisions with human context, and founder of NumberOne AI.
100 words
Stuart McClure has spent his career on one idea: prevention. He co-founded Foundstone, served as Worldwide CTO of McAfee, and co-founded Cylance, which used artificial intelligence to stop malware before it could run. Cylance was acquired by BlackBerry in 2019. He co-authored Hacking Exposed with Joel Scambray and George Kurtz, and later led Qwiet AI until its acquisition by Harness. Today he is co-founder and CEO of WethosAI, which models how people decide so leaders can rehearse consequential decisions before making them, and founder of the venture studio NumberOne AI. He also writes the weekly letter (un)Lonely at the Top.
200 words
Stuart McClure has spent his career on one idea: prevention. In 1989 he survived United Airlines Flight 811, when an electrical short told the cargo door to open over the Pacific and a faulty latch allowed it. He has said the experience gave him a life’s passion: finding and fixing the problems technology introduces before they hurt people.
He co-authored Hacking Exposed with Joel Scambray and George Kurtz, a book that published the attacker’s playbook for the people defending against it, and co-wrote the Security Watch column for InfoWorld with Joel Scambray. He co-founded Foundstone, which McAfee acquired, and later served as McAfee’s Worldwide CTO. In 2012 he co-founded Cylance, which used artificial intelligence to judge a file before it ran and stop malware without waiting for a first victim. BlackBerry acquired Cylance in 2019. He later led Qwiet AI, an AI-powered application security platform acquired by Harness in 2025.
Today he is co-founder and CEO of WethosAI, the human context platform, which models how people think and decide so leaders can rehearse consequential decisions before they become irreversible. He is also the founder of NumberOne AI, a venture studio for applied AI, and writes the weekly letter (un)Lonely at the Top. Through the Clavis Foundation he supports children’s health and wellness in Orange County.

#### Headshots
You are welcome to use these photos to promote your event. If you crop them, please don’t cut through his face.
Portrait · 4:5 · 1200×1500
Square · 1400×1400
Check availability

### Bring Stuart to your stage.
Tell us a little about your event. A person reads every inquiry and replies, usually within a few working days. It helps most to know these three things:
- Your date, even if it’s still tentative
- Who will be in the room, and roughly how many people
- What you’d like them to leave with
A tentative date is fine.
Tell us about the event, who the audience is, and what you hope they’ll take away.
All fields are required unless marked optional. We use your details only to reply to you. The form is delivered by Web3Forms, an outside service that passes your message on to us. Privacy

========================================================================
## Now — Stuart McClure (now.html)
========================================================================

Stuart McClure

## Now.
This page gathers what Stuart is building, writing and saying right now. It is kept up to date, so you don’t have to piece it together from a dozen different profiles.
- iWethosAI
- iiWriting
- iiiTalks
- ivNumberOne AI
- 24 Sep 2026 WethosAI Stu’s Twin is open to the public. WethosAI, the company Stuart co-founded and leads as CEO, has opened Stu’s Twin to anyone who wants to try it. The Twin is an AI model of how Stuart thinks. You can bring it a hard decision, push back on its answer, and see how it works through the problem. Launched 24 September 2026 · wethos.ai “Put it to the test. Ask my Twin something tough, then ask me the exact same thing, and let us know where it hits the mark and where it falls short!” Stuart McClure · LinkedIn · 24 September 2026 Its answers come from the model, not from Stuart, and he hasn’t reviewed them in advance. Try Stu’s Twin ↗(opens wethos.ai, a third-party site) WethosAI sums up its purpose in its own words: Bring human alignment into the decisions that matter.

### Stu’s Twin is open to the public.
- Weekly Substack (un)Lonely at the Top Stuart writes this weekly letter on Substack about how leaders make decisions under pressure. Here is how the letter describes itself: A multi-exit founder on how great teams decide under pressure, and how to carry the burden a little less alone. 17 Sep 2026 Human+AI AlignmentNot just a massive gap, the only gap (that matters). Read ↗(opens Substack) 12 Sep 2026 Can Target Find its Path?New Target CEO, Michael Fiddelke is winning... so far. Read ↗(opens Substack) 1 Sep 2026 How Apple Engineered Its Next CEOAnd the Hidden Gamble Behind the Design Read ↗(opens Substack) Read every issue, or subscribe, on Substack (opens Substack)

### (un)Lonely at the Top
- 2026 Speaking Latest talks 15 Jul 2026 AI and SecurityPwC US · Modern Tech Leadership, Episode 3 Watch ↗(opens YouTube) 5 May 2026 From Resilience to Prevention: Simulating Success in a Chaotic WorldKeynote · Secure Miami, FIU Watch ↗(opens YouTube) Apr 2026 TIF 2026 KeynoteKeynote · TIF 2026 Watch ↗(opens YouTube) See all his recent talks, plus bios and headshots for event organizers

### Latest talks
- Founder Venture studio NumberOne AI “…a venture studio and incubator creating intelligent systems that bridge research and reality.” NumberOne AI, in its own words · numberone.ai ↗(opens in a new tab)

### NumberOne AI
Where to go next

#### Book Stuart
Ask whether he is available to speak at your event.

#### The story
Told in his own words: from the faulty cargo-door latch on United Flight 811, a flight he survived, to why he now sees people, the human system, as the most critical system of all.

#### The Library
His books, columns, talks and letters, collected in one place and going back to 1996.

========================================================================
## Worried about AI and your work? · Stuart McClure (start/ai-and-my-work.html)
========================================================================

## I’m worried about AI and my work.
You don’t have to out-run the machines to keep your place at work. What matters is that you stay the person who checks the work and makes the final call.
- Two-minute read
- One check this week
- Nothing you do here is saved or sent
Your check: not done yetYour check: done
What’s true

### The tools are fast. The judgment is still yours.
AI tools are good at drafting, summarizing and spotting patterns in what already exists. What they don’t know is your customers, your colleagues, or what it will cost if an answer is wrong. That knowledge is yours, and it’s why your judgment still matters.
Stuart has argued for that balance since long before today’s AI tools. In 1999, in an InfoWorld column he wrote with Joel Scambray about automated security tools, he warned IT teams not to use that automation to displace human insight.
One check this week

### Do one task twice.
- Pick a task you already do well, such as writing a summary, answering an email or putting together a first draft.
- Give the same task to the AI tool you already use. Leave out private details, such as names, client information or anything confidential.
- Read its answer slowly, line by line. Write down one thing it got right, and one thing it missed or got wrong that only you would have caught, because you know the people and the situation.
That second note points to the part of your work that a tool can’t do for you. Get clear on what it is, and talk about it with your manager or your team, so the people you work with can see it too.

### In Stuart’s words
> “The future isn’t about humans versus AI, it’s about humans with AI.” Stuart McClure · The Creative Generalist: Thriving in the AI Era · ATD blog · 25 August 2025

### Next step
The story · Chapter V

#### The Human System
The chapter of Stuart’s story that explains why his newest work is about people and how they make decisions, not only about code.
Library shelf

#### “Will AI take my job?”
Stuart’s talks and writing about how to use AI well in your work, gathered on one shelf of the Library.
On wethos.ai

#### Try Stu’s Twin
An AI model of how Stuart thinks, built and run by WethosAI, the company he co-founded and leads. You can ask it what worries you about AI and your work; its answers come from the model, not from Stuart himself.

========================================================================
## Leading a team through AI · Stuart McClure (start/lead-a-team.html)
========================================================================

## I lead a team. Now AI is in the room.
The tools are new, but the job hasn’t changed. You still help your people see the situation clearly, and then you decide together.
- A two-minute read
- One thing to try this week
- Nothing here is saved or sent
Your check: not done yetYour check: done
What’s true

### More information. The same responsibility.
AI can put more information in front of your team, and faster, than any tool before it. What it can’t tell you is who in the room disagrees but isn’t saying so, or what a decision will cost the people who have to carry it out. Finding that out is still your job, and so is the decision.
That gap, between what the information shows and what your people actually think, is where Stuart works now. WethosAI, the company he co-founded and leads as CEO, describes its aim as helping teams bring human alignment into the decisions that matter.
One check this week

### A 15-minute pre-mortem.
- Before your team commits to its next big decision, set aside fifteen minutes for a pre-mortem. Instead of asking whether the plan will work, you imagine it has already failed and ask why.
- Ask the group: “It’s three months from now and this failed. Why?” Have everyone write down their own answer before anyone speaks, so the first voice in the room doesn’t shape what everyone else says.
- Read the answers out loud. If the same reason comes up more than once, fix it before you commit to the decision.
It works because it gives the quieter people on your team a safe way to say what they’re seeing, while there’s still time to do something about it.

### In Stuart’s words
> “Data doesn’t make decisions. People do.” Stuart McClure · (un)Lonely at the Top · 17 August 2026

### Next step
The story · Chapter V

#### One decision, human first
A four-step exercise on the home page. You write down one real decision, ask the AI tool you already use for options and people you might have missed, check what it can’t know, and then make the call yourself.
Weekly letter

#### (un)Lonely at the Top
Stuart’s weekly letter on Substack about how leaders make decisions under pressure.
On wethos.ai

#### Try Stu’s Twin
An AI model of how Stuart thinks, built and run by WethosAI. Bring it a hard decision you’re weighing. Its answers come from the model, not from Stuart himself.

========================================================================
## Protecting your family online · Stuart McClure (start/protect-my-family.html)
========================================================================

## I want to protect my family.
You don’t need to be an expert to keep your family safer online. A few small habits, agreed on together at home, go a long way.
- Two-minute read
- One small thing to do this week
- Nothing you do here is saved or sent
Your check: not done yetYour check: done
What’s true

### Scams rarely break in. They talk their way in.
Many of the scams that reach families don’t hack into anything. They work by rushing you, and by borrowing a name or a voice you already trust: a call, a text or an email that says something has gone wrong and you need to act now.
AI tools make it easier for a scammer to fake a convincing voice or write a believable message. The way to protect yourself hasn’t changed, though: slow down, and check that it’s really them some other way, such as calling them back on a number you already know.
One check this week

### A family code word.
- At dinner this week, agree on one word only your family knows. Don’t write it anywhere online.
- If someone who sounds like a loved one calls in a panic asking for money, ask them for the word.
- If they can’t give you the word, hang up. Then call your family member back on the number you already have for them.
Why it works: AI can clone the sound of a voice, but it can’t know a word your family chose privately, around your own kitchen table.

### In Stuart’s words
> “The greatest gift you can give yourself is that of education. What you don’t know may not kill you, but it may seriously impact you or someone you care about.” Stuart McClure · Foreword, Hacking For Dummies by Kevin Beaver

### Next step
The story · Chapter VI

#### Six small checks
Each one takes a few minutes. Pick the ones you’ll actually do and print them as a card for your wallet.
Library shelf

#### “How do I protect my family?”
A short shelf of plain-language pieces from Stuart’s books and columns, chosen for families.
The story · Chapter II

#### Why this matters to him
In 1989 Stuart survived United Airlines Flight 811, when the plane’s cargo door failed in flight. That night made prevention his life’s work.

========================================================================
## Building technology that fails safely · Stuart McClure (start/build-technology.html)
========================================================================

## I build technology. I want it to hold.
If you design or build systems, you’re already standing in the cheapest place to prevent a failure: the design, before anything ships.
- Two-minute read
- One check this week
- Nothing you do here is saved or sent
Your check: not done yetYour check: done
What’s true

### The light measured the handle. Not the latch.
Before United Flight 811, the flight Stuart survived, a Pan Am 747 had already landed in 1987 with its cargo door open. Its cockpit warning light was off, which told the crew the door was secure. That light was wired to the door’s handle and its relief doors, not to the latch cams that actually held the door shut, so it could say “secure” while the door was unlatched.
The systems you build have signals like that too: tests that pass, health checks that report OK, dashboards that stay green. Each one is only as trustworthy as the thing it is wired to. The work is finding out what each signal actually measures and, when it isn’t measuring the thing that matters, designing the real check into the system from the start.
One check this week

### Trace one green light.
- Pick one signal your team relies on to tell you things are fine: a health check, an alert, a passing test.
- Follow it back to its source and ask what it actually measures. Is it watching something nearby, like the handle on that cargo door, or the thing that matters, like the latch?
- If it’s watching the handle, add one check that looks directly at the latch, the condition you actually care about, and ship it this week.
Failures rarely announce themselves. More often they hide behind a signal that looked fine because it was measuring something next to the problem, not the problem itself.

### In Stuart’s words
> “If security is not readily available within a product — indeed, if it is not heavily automated, conveniently packaged, and endemic to the architecture — it will not be used.” Stuart McClure & Joel Scambray · Effective code auditing can ease your worries… · InfoWorld · 1 January 2001

### Next step
The story · Chapter II

#### The light and the latch
How the National Transportation Safety Board explained a cargo door that read “closed” in the cockpit while its latches were open.
The story · Chapter IV

#### The Prediction
How Stuart built Cylance around stopping an attack before it runs, instead of cleaning up after it.
Library shelf

#### “What is prevention-first security?”
Stuart’s columns, books and talks on preventing failures instead of reacting to them, from 1996 to today.

========================================================================
## How this site uses AI — Stuart McClure (how-we-use-ai.html)
========================================================================

Trust · In plain language

## How this site uses AI.
Stuart builds AI to support human judgment, not to replace it. This page holds the site to the same standard: where AI is used, where it isn’t, and how to tell his words from everything else.
Last reviewed 21 October 2026
- No AI runs hereThere’s no chatbot here, and nothing on these pages writes answers for you.
- Exercises stay in your browserWhat you type into the exercises never leaves your browser. The booking form is the only thing that sends what you enter.
- His words are markedEvery quote from Stuart shows where it comes from, so you can check it yourself.
- AI-made media is labeledAnything made with an AI tool says so, and names the tool that made it.

### On this site
No AI model runs on this site. When you type into one of the exercises in the story, or into the Library search, what you write stays in your own browser. The only thing on the site that sends anything is the booking form, and it sends only what you enter there, so that we can reply to you.
The “One decision, human first” exercise in the story only builds a prompt from what you write, inside your browser. You can copy it into whichever AI tool you already use, or not. The page doesn’t send it, save it or read it.
The same is true of the six small checks near the end of the story, and the wallet card you can print from them. Whatever you open or choose there is not stored or sent.
This site was designed and built with help from AI tools, including first drafts of some copy. A person checks every line, and Stuart approves it before it’s published.

### Voice badges
The Library is the searchable record of Stuart’s columns, talks, books, companies and press since 1996. Every item in it carries a small badge that tells you whose words you’re reading, whether they are his own, a co-author’s, a journalist’s, or a summary written for this site.
Stuart’s words
Written by Stuart, under his byline. Quotes from it on this site are checked word for word against the original and show their source.
Co-written
Written with a co-author, such as Joel Scambray on the InfoWorld Security Watch columns. Both names are shown.
Press
Written about Stuart by a journalist or publication. The words are theirs, not his.
Summary, not his words
A short description written for this site to help you find things. It is never quoted as something Stuart said.
Scan
An image of the original page as it was printed, so you can read it exactly as it first appeared.
AI-generated
Made with an AI tool, and the tool is named. It is never presented as Stuart’s voice or as his words.

### Transcriptions
Stuart’s InfoWorld work from 1996 to 2002 (product reviews, and the Security Watch column he co-wrote with Joel Scambray) is here as scans of the printed pages.
We plan to add readable, searchable text alongside each scan. An AI-assisted text-recognition tool, which reads the words off the scanned image, will make the first draft. A person will then check that draft line by line against the scan before it’s published, and the scan will stay next to the text so you can check it too.

### The earlier “Watch My Story” and “Hear My Story”
The earlier version of this site had a video called “Watch My Story” and an audio piece called “Hear My Story.” Both were overviews generated by AI, using Google’s NotebookLM. The voices you hear in them are not Stuart’s, so we label both as AI-generated, as shown below.
- “Watch My Story” (6:27) is a video overview made in NotebookLM. The narrator is an AI voice, and the illustrations were made by AI.
- “Hear My Story” (22:24) is an audio overview made in NotebookLM. It is a conversation between two AI-generated hosts.
Watch My Story
AI-generated overview
For the story in Stuart’s own words, read his memoir, The Gift of a Second Chance, or watch the Founder Film. The film has no narration, so no other voice, AI or human, speaks in his place.

### Stu’s Twin
Stu’s Twin is an AI model of how Stuart thinks. It lives on wethos.ai and is built and run by WethosAI, the company Stuart co-founded and leads as CEO.
- In WethosAI’s words: You’re interacting with Stu’s AI Twin, not Stu live.
- Its answers come from the model, not from Stuart, and he hasn’t reviewed them in advance.
- WethosAI’s own privacy terms apply there, not this site’s.
- We never embed it, and we link to it through a notice, so you always know when you’re leaving. We don’t pass anything to it about your visit.

#### Try Stu’s Twin
It’s on wethos.ai and run by WethosAI. A notice will tell you before you leave this site.
> “Put it to the test. Ask my Twin something tough, then ask me the exact same thing, and let us know where it hits the mark and where it falls short!” Stuart McClure · LinkedIn · 24 September 2026

### Ask the archive
We plan to add a search box that answers your questions only with Stuart’s real, published words. Every passage it shows will link to the place it came from.
- It will find passages Stuart has already written. It won’t write new ones or put words in his mouth.
- If nothing matches your question, it will say so plainly and suggest where else you could look.
- It will run in your browser. Your question won’t be sent anywhere.

### Corrections
If something here is wrong, a quote is missing its source, or a badge looks mislabeled, please tell us. We fix errors and note what changed.
> “Don’t trust us! Please, please, please, just trust yourself. Test for yourself.” Stuart McClure · Know the Truth · 2016
Back to the story

========================================================================
## The Library: all 429 pieces, newest first, by kind
========================================================================

### Talks (99)
- 2026-07-15: PWC US - Modern Tech Leadership Episode 3: AI and Security (YouTube · Video) https://youtu.be/4jHWv0CxXtA
  Stuart joins PwC's Modern Tech Leadership series to discuss AI and security.
- 2026-06-29: Secure Miami 2026: From Resilience to Prevention (YouTube · Video) https://www.youtube.com/watch?v=eq4FjpvnQ48
  Stuart's Secure Miami 2026 keynote on moving from resilience to prevention with Human+AI collaboration at WethosAI.
- 2026-06-25: The Token Economy Is About to Collapse (YouTube · Video) https://www.youtube.com/watch?v=22NfbV3JHsI
  Stuart makes the case that the token-based economics underpinning today's AI industry are unsustainable — and what WethosAI is building for what comes next.
- 2026-05-05: Secure Miami 2026 Promo (YouTube · Video) https://youtu.be/HO2ze15Oozo
  Stuart McClure talks to the cyber crowd to inspire Human+AI collaboration.
- 2026-04-23: TIF 2026 (YouTube · Video) https://youtu.be/UVuxxig9p1A
  Stuart takes the audience on his journey from airplane disaster to AI prevention.
- 2026-04-15: The Hidden Trillion-Dollar Tax: Fixing Organizational Friction — The Conference Board (YouTube · Video) https://www.youtube.com/watch?v=pA7d_VJafmk
  Stuart joins Rita Myerson on The Conference Board to unpack what he calls the hidden trillion-dollar tax of organizational friction — and how AI can fix it.
- 2026-04-03: Why Your Most Expensive Room Is Your Meeting Room — And How WethosAI Changes That (YouTube · Video) https://www.youtube.com/watch?v=OkyxIOWWgbk
  Stuart breaks down the cognitive biases, cultural rituals, and systemic failures behind unproductive meetings — and how WethosAI prevents them.
- 2026-03-15: What False Consensus is Doing to Your Giving Strategy — Distilling Philanthropy (YouTube · Video) https://www.youtube.com/watch?v=8d4HbKbCBqs
  Stuart discusses how false consensus bias undermines philanthropy, applying prevention thinking from cybersecurity to charitable giving strategy.
- 2026-03-11: Why Your Phone is NEVER Truly Off — Cyber Confessions with Caitlin Sarian (YouTube · Video) https://www.youtube.com/watch?v=EK67eGoZwsM
  Stuart joins Cybersecurity Girl to explain why powered-down phones aren't truly off, medical device hacking risks, and practical privacy strategies.
- 2026-03-11: Why Your Phone is NEVER Truly Off — Cyber Confessions with Caitlin Sarian (Apple Podcasts · Audio) https://podcasts.apple.com/gm/podcast/why-your-phone-is-never-truly-off-ft-stuart-mcclure/id1869315554?i=1000754621830
  Stuart joins Cybersecurity Girl to discuss how smartphones remain active when powered down, medical device hacking risks, and practical privacy and home network security strategies.
- 2025-12-18: AI Exposed: The Hype Must Die! — Part IV: The Inconvenient Truth (YouTube · Video) https://www.youtube.com/watch?v=nm858I_IjuM
  The final part of Stuart's 4-part AI Exposed series confronting hard realities about artificial intelligence.
- 2025-10-23: ATD: Wethos AI Solution Session (YouTube · Video) https://youtu.be/OLycRD8pZt8
  Stuart presents WethosAI's solution session for the Association for Talent Development, showing how Human+AI transforms how teams work and grow.
- 2025-10-17: Is AI Finally Delivering on Its Promise in Cybersecurity? — The CyberVault (YouTube · Video) https://www.youtube.com/watch?v=H38wrIrCC4g
  Stuart joins The CyberVault podcast to assess whether AI has lived up to its security promises.
- 2025-08-29: Coach at Scale: Know and Grow Every Employee with Artificial Individual Intelligence (YouTube · Video) https://www.youtube.com/watch?v=AmbeM_PA-i4
  How AI can provide personalized coaching to every employee at enterprise scale.
- 2025-06-13: Human + AI > AI: Reimagining Talent, Work and Hypergrowth (YouTube · Video) https://www.youtube.com/watch?v=9OcbPttlHIg
  Stuart's thesis that human-AI collaboration beats pure AI.
- 2025-05-12: AI Exposed: The Hype Must Die! — Part III: The Hardest Truth (YouTube · Video) https://www.youtube.com/watch?v=ul6crXUlLYg
  Part III of the AI Exposed series pushing further into uncomfortable truths about AI's limitations.
- 2025-03-14: AI Exposed: The Hype Must Die! — Part II: The Hard Truth (YouTube · Video) https://www.youtube.com/watch?v=8BXsQUSp-Jw
  Stuart continues his AI Hype Must Die series with deeper analysis of AI's real-world limitations.
- 2025-01-23: AI Exposed: The Hype Must Die! — Part I: The Simple Truth (YouTube · Video) https://www.youtube.com/watch?v=v-7wIojGi7k
  The opening salvo of Stuart's viral AI Exposed manifesto series.
- 2024-10-25: Lead the Future: How AI is Revolutionizing Team Dynamics and Success (YouTube · Video) https://www.youtube.com/watch?v=u3E5nCHfVaE
  Leadership insights on building AI-augmented teams.
- 2024-10-16: FCON: Intersection of AI & Cybersecurity (YouTube · Video) https://www.youtube.com/watch?v=g3PF0ibLETc
  Stuart's keynote exploring where artificial intelligence and cybersecurity converge.
- 2024-10-10: Wethos AI Presentation (YouTube · Video) https://www.youtube.com/watch?v=LwhzU-KxZYs
  Stuart presents the Wethos AI vision for understanding and optimizing human potential and team dynamics through AI.
- 2024-10-01: GoSec 2024 Keynote (YouTube · Video) https://youtu.be/wqM5dpNEfnI
  Stuart's keynote at GoSec 2024 on scaling cybersecurity success and the role of AI-driven prevention.
- 2024-09-23: Bare Knuckles and Brass Tacks — How to Scale Success in Cyber (GoSec 2024) (Spotify · Audio) https://open.spotify.com/episode/7IFm275nSC9QphA9Yoyc2X
  Stuart shares lessons from scaling Cylance and building serial cybersecurity ventures at GoSec 2024.
- 2024-08-18: AI, Take My Job. Please. (YouTube · Video) https://www.youtube.com/watch?v=xgnAgzC-uE8
  Stuart's counterintuitive argument for embracing AI automation of human work.
- 2024-07-16: Application Security Weekly ASW #291 — Producing Secure Code with AI (YouTube · Video) https://www.youtube.com/watch?v=s7NtTqWCe24
  Stuart explains how combining LLMs, agents, and RAGs makes AI tools effective for writing secure code.
- 2024-07-11: Wethos AI CEO on Predictable Hiring: How to Quantify Traits and Biases for Success (YouTube · Video) https://www.youtube.com/watch?v=rMGZGrMTXac
  Stuart explores how Wethos AI quantifies cognitive traits and biases to make hiring more predictable and successful.
- 2024-07-11: Wethos AI CEO on Cognitive Biases and the Future of Work (YouTube · Video) https://www.youtube.com/watch?v=aRzNnQB35rI
  Stuart discusses cognitive biases, the future of work, and how Wethos AI is using artificial intelligence to understand and optimize human potential.
- 2024-04-09: VICE: Cyberwar — Are Hackers the Biggest Threat to American Infrastructure? (YouTube · Video) https://www.youtube.com/watch?v=0pOlAaLU7Xc
  Stuart appears in VICE's Cyberwar documentary exploring whether hackers are the biggest threat to American infrastructure.
- 2024-03-11: AI User Conference — Qwiet AI (YouTube · Video) https://www.youtube.com/watch?v=vMRpNaavElg
  Stuart presents at the AI User Conference on Qwiet AI's approach to AI-powered application security.
- 2024-03-06: Qwiet AI: The Intersection of AI and Application Security (EM360 · Audio) https://em360tech.com/podcasts/qwiet-ai-intersection-ai-and-application-security
  Stuart discusses how Qwiet AI applies artificial intelligence to transform application security testing and vulnerability detection.
- 2024-01-25: Product Leaders Journey S1E5 — AI for High Performing Teams (YouTube · Video) https://www.youtube.com/watch?v=9McoNCSji6U
  Stuart on using AI to build high-performing teams and the 'Ethos of We.'
- 2024-01-19: Two Things That Make a Compelling Demo (YouTube · Video) https://www.youtube.com/watch?v=CDSNIl7lfn0
  Stuart shares the two essential elements that make product demonstrations truly compelling.
- 2023-12-04: Incubating the Future: Solving Global Challenges with Predictive AI (YouTube · Video) https://www.youtube.com/watch?v=LPiYMX80FwE
  Stuart presents NumberOne AI's vision for using predictive AI to solve global challenges.
- 2023-12-03: IMPACT 23 Keynote: What Matters Most To Me? Prevention (YouTube · Video) https://www.youtube.com/watch?v=aG1NmVfc0gk
  Stuart delivers his IMPACT 23 keynote on why prevention — not detection — is the only viable philosophy in modern cybersecurity.
- 2023-12-01: Hacking Exposed, Qwiet Edition — Episode 8: Sam Altman/OpenAI Analysis (Qwiet AI · Audio) https://qwiet.ai/podcast/hacking-exposed-qwiet-edition-episode-8/
  Stuart analyzes the Sam Altman/OpenAI leadership crisis and its implications for AI governance.
- 2023-11-03: Hacking Exposed, Qwiet Edition — Episode 7: Predator Spyware Deep Dive (Qwiet AI · Audio) https://qwiet.ai/podcast/episode-7/
  Stuart hosts a deep dive into the Predator spyware threat and its implications for mobile security.
- 2023-10-28: Hacking Exposed, Qwiet Edition — Episode 6 (Qwiet AI · Audio) https://qwiet.ai/podcast/episode-6/
  Episode 6 of the Hacking Exposed Qwiet Edition podcast series.
- 2023-10-18: Hacking Exposed, Qwiet Edition — Episode 5 (Qwiet AI · Audio) https://qwiet.ai/podcast/episode-5/
  Episode 5 of the Hacking Exposed Qwiet Edition podcast series.
- 2023-09-09: Hacking Exposed, Qwiet Edition — Episode 4 (Qwiet AI · Audio) https://qwiet.ai/podcast/episode-4/
  Episode 4 of the Hacking Exposed Qwiet Edition podcast series.
- 2023-08-11: Hacking Exposed, Qwiet Edition — Episode 3 (Qwiet AI · Audio) https://qwiet.ai/podcast/episode-3/
  Episode 3 of the Hacking Exposed Qwiet Edition podcast series.
- 2023-07-23: Hacking Exposed, Qwiet Edition — Episode 2 (Qwiet AI · Audio) https://qwiet.ai/podcast/episode-2/
  Stuart hosts the second episode of the Hacking Exposed Qwiet Edition podcast series.
- 2023-07-06: Hacking Exposed, Qwiet Edition — Episode 1, Part 2 (Qwiet AI · Audio) https://qwiet.ai/podcast/episode-1-part-2/
  Continuation of the MOVEit vulnerability deep dive with technical analysis and remediation strategies.
- 2023-06-07: RSA 2023: Hacking Sec into DevOps (YouTube · Video) https://www.youtube.com/watch?v=SnpjI-qz7kk
  Stuart presents at RSA Conference 2023 on integrating security into DevOps workflows to shift left and prevent vulnerabilities before they ship.
- 2023-06-01: Hacking Exposed Podcast, Qwiet Edition — Episode 1: MOVEit Vulnerability Analysis (Qwiet AI · Audio) https://qwiet.ai/podcast/episode-1-part-1/
  Stuart hosts the premiere episode analyzing the MOVEit vulnerability and its implications for application security.
- 2023-02-15: Business of Cyber Podcast — Preventing the Unpreventable (Spotify · Audio) https://open.spotify.com/episode/0sTUZ1PdAagN6s5rfcnI5C
  Stuart with Joe Vinck on founding companies and stopping cyber threats.
- 2022-09-23: LSEC & ECSO at RSA 2022 — Cybersecurity Innovations Fireside Chat (YouTube · Video) https://www.youtube.com/watch?v=4vJADL-J0W8
  Stuart participates in a fireside chat on cybersecurity innovations at RSA Conference 2022 with LSEC and ECSO.
- 2021-01-19: Supply Chain Hacking Breaks Cyber Trust — The Trust Revolution (Spotify · Audio) https://open.spotify.com/episode/4aukcn6eQoGDR6IGpwMVVo
  Stuart explains how SolarWinds-style supply chain attacks exploit misplaced trust, and why AI-based prevention beats signature-based detection.
- 2021: ZeroToExit 2021: Masterclass on Security and Company Building (YouTube · Video) https://www.youtube.com/watch?v=lEC5c1JNQYI
  An extended masterclass-format interview covering security strategy and startup lessons.
- 2020-05-10: UCI Merage School of Business Commencement Address (YouTube · Video) https://www.youtube.com/watch?v=lRNrb7a2AKc&t=28s
  Stuart delivers the commencement address to the graduating class of the UCI Paul Merage School of Business.
- 2019-08-05: Hacking Exposed: Live (YouTube · Video) https://www.youtube.com/watch?v=4wDuNPJz_Xk&t=212s
  Stuart delivers a live Hacking Exposed demonstration showcasing real-world attack techniques and defenses.
- 2019-04-15: InnovationAus Podcast — Founder & CEO, Cylance (InnovationAus · Audio) https://innovationaus.podbean.com/e/stuart-mcclure-founder-ceo-cylance/
  Stuart discusses selling Foundstone to McAfee, building Cylance, and its sale to BlackBerry.
- 2019: Adversarial AI & Cybersecurity — CXOTalk (YouTube · Video) https://www.youtube.com/watch?v=u0_4p0fSu8s
  Stuart discusses adversarial AI, machine learning attacks, and how Cylance defends against them.
- 2019: Contrast Security — Stuart McClure Talks Company Culture (SoundCloud · Video) https://soundcloud.com/contrast-security/the-security-influencers-channel-episode-27-stuart-mcclure
  In-depth interview as Cylance CEO on AI-driven prevention and the future of endpoint security.
- 2019: Matt Stephenson Interview: Stuart McClure on Suffering, Cycling and Wild Dogs (YouTube · Video) https://www.youtube.com/watch?v=S5QWFc-B7wE
  A personal profile exploring the human side of Stuart: his love of cycling, resilience, and life philosophy.
- 2019: Stuart McClure Talks Company Culture (YouTube · Video) https://www.youtube.com/watch?v=9ZsVSMFbVnQ
  Stuart discusses building great company culture and what it takes to lead high-performing teams.
- 2018-10-12: Is Prevention Possible? (YouTube · Video) https://www.youtube.com/watch?app=desktop&v=xHArgAkxvt8
  Stuart makes the case that prevention — not detection — is the only viable path forward in cybersecurity.
- 2018-07-06: RSA 2018: Hacking Exposed NextGen & AI Defense Strategies (YouTube · Video) https://www.youtube.com/watch?v=833OPUUQeL4
  Stuart presents next-generation hacking strategies and AI-based defenses at RSAC 2018.
- 2018-01-10: Artificial Intelligence, A.K.A. The Future of Everything (YouTube · Video) https://www.youtube.com/watch?v=cjuTDguXWvY
  A sweeping keynote on how AI will reshape every industry, not just security.
- 2018: Road Trip Nation Interview: Cylance (Roadtrip Nation · Video) https://roadtripnation.com/leader/stuart-mcclure
  The Road Trip Nation interview exploring Stuart's career path and advice for young professionals.
- 2017-12-15: NTH Symposium 2017 Keynote (YouTube · Video) https://www.youtube.com/watch?v=-YXBTdMNwsA
  Stuart keynotes the NTH security symposium on AI-driven cybersecurity strategies.
- 2017-05-17: Risky Business #455 — What a Mess: WannaCry (Risky Business · Audio) https://risky.biz/RB455/
  Stuart joins Patrick Gray on Risky Business to discuss the WannaCry ransomware outbreak and its implications for cybersecurity.
- 2017-03-29: CeBIT 2017: Cylance on AI in Cybersecurity (YouTube · Video) https://www.youtube.com/watch?v=CkBVn6P35IY&t=6s
  Stuart presents Cylance's AI approach at Europe's largest tech conference.
- 2017-02-21: RSA 2017: Captain Unhook: How to Bypass Everything... Literally (YouTube · Video) https://www.youtube.com/watch?v=7hP9HcaZtyA
  Stuart demonstrates how to bypass virtually every security control in a live RSA Conference presentation.
- 2017-02-21: RSA 2017: Next Generation Embedded and Voting Machine Hacking (YouTube · Video) https://www.youtube.com/watch?v=QZ6mEq6DQOo
  Stuart demonstrates live next-generation embedded system and voting machine hacking techniques at RSA Conference 2017.
- 2017-02-07: RSA 2017: Next Generation — Quick Look (YouTube · Video) https://www.youtube.com/watch?v=KLo7df2osvI
  Stuart offers a rapid-fire look at next-generation attack techniques and defenses at RSA Conference 2017.
- 2017: Davos 2017: How AI Can Prevent Attacks (YouTube · Video) https://www.youtube.com/watch?v=DcL_TyNLhCI
  Stuart's early argument that AI is the only viable path to truly stopping cyberattacks.
- 2017: Cybersecurity and Machine Learning — CXOTalk (YouTube · Video) https://www.youtube.com/watch?v=HfGcHkNSvU8
  Stuart explains how AI and ML transformed threat detection at Cylance.
- 2017: PAGO Networks (Cylance Interview) — CEO Stuart McClure (YouTube · Video) https://www.youtube.com/watch?v=ZVzuXx8xEtc
  Korean interview with Stuart McClure on Cylance's AI-driven cybersecurity approach.
- 2016-12-13: NetEvents — Keynote Highlights: Kathryn Hume, Stuart McClure and Paul Jackson (YouTube · Video) https://www.youtube.com/watch?v=akA8wyKzwH0
  Keynote highlights from NetEvents featuring Stuart McClure alongside Kathryn Hume and Paul Jackson.
- 2016-10-16: FBI Investigating Cyberattacks That Disrupted Twitter, PayPal and Spotify (CBS News · Video) https://www.cbsnews.com/video/fbi-investigating-cyberattacks-that-disrupted-twitter-paypal-and-spotify/
  Stuart provides expert analysis on CBS News about the massive DDoS attack that took down major internet services.
- 2016-09-28: Converge! Network Digest — Cylance: AI and Cybersecurity (YouTube · Video) https://www.youtube.com/watch?v=27yUlW0lskg
  Stuart discusses Cylance's AI-driven approach to cybersecurity at the Converge! Network Digest event.
- 2016-09-15: Risky Business #427 — Stuart McClure on the OPM Hack (Risky Business · Audio) https://risky.biz/RB427/
  Stuart joins Patrick Gray on Risky Business to discuss Cylance's role in the OPM breach investigation and the House Oversight Committee report.
- 2016-08-25: 2016 Edison Awards: AI — The Future of Security (YouTube · Video) https://www.youtube.com/watch?v=5pX6QsZQ40M
  Stuart presents on how AI will transform the security industry at the Edison Awards ceremony.
- 2016-06-28: World Economic Forum — Davos: Technology Pioneer 2016 (YouTube · Video) https://www.youtube.com/watch?v=fMSgPRkwhAk
  Stuart speaks at the World Economic Forum in Davos as a Technology Pioneer representing Cylance.
- 2016-03-30: RSA 2016: Attacking in the Shadows (YouTube · Video) https://www.youtube.com/watch?v=okgSJTO0gj8
  Stuart explores sophisticated attack techniques that operate in the shadows of enterprise networks at RSA Conference 2016.
- 2016-02-10: CyberScoop Radio: Cyberthreats to Critical Infrastructure (CyberScoop · Audio) https://cyberscoop.com/radio/cylances-stuart-mcclure-on-cyberthreats-to-critical-infrastructure/
  Stuart discusses Cylance's perspective on cyberthreats facing critical infrastructure on CyberScoop Radio.
- 2016: Cylance CEO on the Growth of Cyber Warfare — Disruption Magazine (YouTube · Video) https://www.youtube.com/watch?v=fpwWdCETspc
  Stuart discusses how state-sponsored cyber warfare is escalating and what it means for enterprises.
- 2015-02-16: Hackers Steal $1 Billion from Up to 100 Banks — CBS News (CBS News · Video) https://www.cbsnews.com/video/hackers-steal-1-billion-from-up-to-100-banks/
  Stuart provides expert analysis on CBS News about the massive Carbanak cyberattack that stole over $1 billion from banks worldwide.
- 2015: Cylance's Stuart McClure Talks with Richard Stiennon (Vimeo · Video) https://vimeo.com/103086120
  Security analyst Richard Stiennon interviews Stuart on Cylance's technology and market approach.
- 2015: Gen15: Are We Complacent About Network Security? (YouTube · Video) https://www.youtube.com/watch?v=13W3GdlvtJI
  Stuart challenges the security industry's complacency at the Gen15 event.
- 2015: RSA 2015: Next Generation Attacks (YouTube · Video) https://www.youtube.com/watch?v=4TjPwadYsc8
  Stuart presents on the evolution of next-generation attack techniques at RSA Conference 2015.
- 2014-12-16: Operation Cleaver — Webinar Presentation (YouTube · Video) https://www.youtube.com/watch?v=kl1jWsYQ34k
  Stuart presents Cylance's Operation Cleaver findings, exposing Iranian state-sponsored hackers infiltrating critical infrastructure worldwide.
- 2014: Entrepreneur Interview — Stuart McClure, Cylance (YouTube · Video) https://www.youtube.com/watch?v=q4B6vv7NUwQ
  Stuart discusses Cylance's AI-driven approach to cybersecurity and his entrepreneurial journey building the company.
- 2014: 2014 AT&T Cybersecurity Conference Keynote (YouTube · Video) https://www.youtube.com/watch?v=Qf-hHiefp2w
  Stuart keynotes AT&T's major cybersecurity conference on AI-based threat prevention.
- 2014: CEO Panel: The Entrepreneur Journey to Scale (YouTube · Video) https://www.youtube.com/watch?v=ad-OEipL0YE
  Stuart joins a CEO panel discussion on the entrepreneurial journey, scaling companies, and lessons learned building from startup to enterprise.
- 2013-05-29: Hacking Exposed: LIVE — #035 — Why Current Security Solutions Fail (YouTube · Video) https://www.youtube.com/watch?v=VG5Srk68FPA
  Stuart demonstrates why traditional signature-based security solutions are fundamentally broken and how AI-driven prevention is the future.
- 2013: 2013: Stuart McClure, Cyber Security Expert who is the CEO of Cylance, Inc (YouTube · Video) https://www.youtube.com/watch?v=sGE9DLs38Sg
  An interview with Stuart McClure as the newly appointed CEO of Cylance, discussing his cybersecurity expertise and vision for AI-driven threat prevention.
- 2013: RSA 2013: Embedded Hacking (YouTube · Video) https://www.youtube.com/watch?v=AgpS7tCs8ag
  Stuart demonstrates live embedded system hacking techniques at RSA Conference 2013.
- 2013: Hacking Exposed: The Art of Deterrence (YouTube · Video) https://www.youtube.com/watch?v=TMZpTII6x2c
  Stuart demonstrates advanced hacking techniques and introduces a new defense approach that stops 99% of endpoint-focused attacks.
- 2012-05-31: Hacking Exposed: Live — 2012 — GSM Hacking (YouTube · Video) https://www.youtube.com/watch?v=HuWFWPU_57s
  A live Hacking Exposed demonstration from 2012 showing GSM network vulnerabilities and real-world cellular attack techniques.
- 2012: RSA Conference 2012 Keynote: Securing the Unsecurable (YouTube · Video) https://www.youtube.com/watch?v=rS8xeeLSCpw
  Stuart's landmark RSA 2012 keynote arguing that traditional security is fundamentally broken.
- 2011: RSA 2011: Hacking Exposed — Exploiting the Cloud and Virtual Machines (YouTube · Video) https://www.youtube.com/watch?v=brOPp0zQzTs
  Stuart and fellow Hacking Exposed authors demonstrate real-world exploits targeting cloud infrastructure and virtual machine environments at RSA Conference 2011.
- 2004-10: Hacking Exposed — Canada (YouTube · Video) https://www.youtube.com/watch?v=rZ_zONdO720
  Stuart delivers a live Hacking Exposed presentation in Canada, demonstrating real-world attack techniques and security vulnerabilities.
- 2003-09: Hacking Exposed Lecture at Naval Postgraduate School (YouTube · Video) https://www.youtube.com/watch?v=_kmc9AZSDio
  Stuart delivers a Hacking Exposed lecture to U.S. Navy graduate students, bridging academic and real-world security knowledge.
- 2001-12-02: LISA 2001: Hacking Exposed: LIVE (USENIX · Press) https://www.usenix.org/legacy/publications/library/proceedings/lisa2001/LISA2001.pdf
  Stuart delivers a live Hacking Exposed tutorial at the USENIX LISA 2001 conference in San Diego.
- 2001-06-25: Hacking Exposed: LIVE (USENIX · Press) https://www.usenix.org/legacy/publications/library/proceedings/lisa2001/cfp/usenix01.brochure/tutorials/tutwed.html#w2
  Stuart delivers a live Hacking Exposed tutorial at the USENIX LISA 2001 conference.
- 2000-03: CNNfn Business Unusual — March 2000 (YouTube · Video) https://www.youtube.com/watch?v=uAdGGDZnFrM
  Stuart's appearance on CNNfn's Business Unusual discussing cybersecurity as a business issue.
- 2000-02: CNN Newsstand — February 2000 (YouTube · Video) https://www.youtube.com/watch?v=R2C_c_5oLcs
  Stuart's CNN Newsstand appearance in February 2000, one of his earliest major media spots on network television.
- 2000-02: CNN Morning News — February 2000 (YouTube · Video) https://www.youtube.com/watch?v=CI-lvrGG8fs
  Stuart on CNN Morning News discussing early internet security threats at the dawn of the web era.

### Writing (169)
- 2026-06: (un)Lonely at the Top (Substack · Stuart's words) https://unlonelyatthetop.substack.com/
  Stuart's Substack on leadership under pressure — how great teams decide, predicting bad decisions with AI, and carrying the burden a little less alone.
- 2026-03-11: The Gift of a Second Chance (Memoir · Stuart's words) letters/the-gift-of-a-second-chance.html
  Stuart's memoir tracing the unbroken thread from surviving United Flight 811 to founding Cylance and WethosAI — a lifelong quest to find and fix the faulty latches of the world.
- 2025-12: The Cost of the Head Nod: How False Consensus Effect Hurts Companies (LinkedIn · Stuart's words) https://www.linkedin.com/pulse/most-expensive-assumption-business-you-making-ai-stuart-mcclure-gixhc
  How groupthink damages organizations more than cyberattacks.
- 2025-11: The Troxler Blind Spot (LinkedIn · Stuart's words) https://www.linkedin.com/pulse/troxler-blind-spot-stuart-mcclure-gdshc
  Uses the Troxler fading optical illusion as a metaphor for organizational blind spots.
- 2025-10: System 3 Thinking: Beyond System 1 and System 2 (LinkedIn · Stuart's words) https://www.linkedin.com/pulse/system-3-thinking-beyond-1-2-stuart-mcclure-mtkjc
  Introduces a new cognitive framework beyond Kahneman's System 1 and 2 thinking.
- 2025-10: The Efficient Compute Frontier (LinkedIn · Stuart's words) https://www.linkedin.com/pulse/efficient-compute-frontier-when-bigger-ai-stops-being-stuart-mcclure-kt5sc
  Argues that scaling AI model size has diminishing returns and the future is efficient, targeted AI.
- 2025-10: The Human Brain in the Age of AI (LinkedIn · Stuart's words) https://www.linkedin.com/pulse/human-brain-age-ai-stuart-mcclure-ykadc
  Explores what makes human cognition irreplaceable even as AI advances.
- 2025-09: The Human-AI Reasoning Trifecta (LinkedIn · Stuart's words) https://www.linkedin.com/pulse/human-ai-reasoning-trifecta-stuart-mcclure-tbqgc
  Stuart's framework for combining human and AI reasoning capabilities.
- 2025-09: Is AI the New Phrenology? (LinkedIn · Stuart's words) https://www.linkedin.com/pulse/ai-new-phrenology-why-realism-must-guide-our-journey-stuart-mcclure-m1t4c
  A provocative comparison asking whether AI behavioral prediction is as flawed as 19th-century pseudoscience.
- 2025-08-25: The Creative Generalist: Thriving in the AI Era (ATD · Stuart's words) https://www.td.org/content/atd-blog/the-creative-generalist-thriving-in-the-ai-era
  Stuart argues the future belongs to "creative generalists" — those who combine breadth of knowledge with AI fluency to thrive in the new world of work.
- 2025-04-01: Modern AppSec at AI Speed (Medium · Stuart's words) https://medium.com/@stu_36006/modern-appsec-at-ai-speed-536908dc1313
  Stuart on how AI is transforming the pace and effectiveness of application security testing.
- 2025-01-02: The AI Hype Must Die (WethosAI blog · Stuart's words) https://blog.wethos.ai/wethos/new-year-more-me
  Stuart's original manifesto declaring that AI hype is dangerous and must be replaced with realistic expectations.
- 2024-03-22: Navigating Developer Fatigue in the Cybersecurity Battlefield (Fast Company · Stuart's words) https://www.fastcompany.com/91065964/navigating-developer-fatigue-in-the-cybersecurity-battlefield-the-risks-and-ai-powered-solutions
  Stuart discusses the risks of security tool overload on developers and AI-powered solutions.
- 2024-01-25: Safeguarding from Lurking Threats in Business Logic Flaws (Fast Company · Stuart's words) https://www.fastcompany.com/91013667/safeguarding-from-lurking-threats-in-business-logic-flaws
  Stuart's Fast Company article on the overlooked dangers of business logic flaws and how to defend against them.
- 2024: Utilizing AI to Improve Application Development (Fast Company · Stuart's words) https://www.fastcompany.com/91124397/utilizing-ai-to-improve-application-development
  Stuart's Fast Company article on how AI is transforming the application development lifecycle.
- 2024: Moving Beyond Detect & Respond: How GenAI Is Revolutionizing Cybersecurity (Fast Company · Stuart's words) https://www.fastcompany.com/91151798/moving-beyond-detect-and-respond-how-generative-ai-is-revolutionizing-the-cybersecurity-industry
  Stuart argues the industry must shift from reactive detection to proactive AI prevention.
- 2024: WethosAI Manifesto: Hacking Human Potential (Summary page · Summary — not his words) letters/wethosai-manifesto-hacking-human-potential.html
  The founding manifesto for Wethos AI and its vision for AI-augmented human performance.
- 2017-01-13: A.I. for Good (LinkedIn · Stuart's words) https://www.linkedin.com/pulse/ai-good-stuart-mcclure
  Stuart explores the positive social applications of artificial intelligence beyond security.
- 2016-06-08: Four Years, Four Rounds, One Mission (Blog · Stuart's words) letters/four-years-four-rounds-one-mission.html
- 2016-05-09: Know the Truth: Signatures and Multi-AV Scanners (Blog · Stuart's words) letters/know-the-truth-signatures-and-multi-av-scanners.html
- 2016-02-03: AI vs. AV - Gorillas and Germans and Gartner, oh my… (Blog · Stuart's words) letters/ai-vs.-av---gorillas-and-germans-and-gartner-oh-my%E2%80%A6.html
- 2016: How A.I. Could Be Our Most Intelligent Defense (Summary page · Summary — not his words) letters/how-a.i.-could-be-our-most-intelligent-defense.html
  A page written about this, not by Stuart.
- 2015-11-19: Addressing Everything but the Problem — Part 2 (Blog · Stuart's words) letters/addressing-everything-but-the-problem---part-2.html
  Continuing the case for addressing root causes rather than symptoms in security.
- 2015-11-18: Addressing Everything but the Problem — Part 1 (Blog · Stuart's words) letters/addressing-everything-but-the-problem---part-1.html
  Why companies consistently solve the wrong problems in cybersecurity.
- 2015-11-17: Look Who "Checked Our Math"! (Blog · Stuart's words) letters/look-who-checked-our-math.html
- 2015-07-18: 42: The Answer to the Ultimate Question (Blog · Stuart's words) letters/42-the-answer-to-the-ultimate-question-of-life-the-universe-and-everything.html
  Stuart's philosophical reflection connecting Douglas Adams' famous answer to the pursuit of meaning in technology.
- 2015-02-18: CylancePROTECT vs. the Real World: Equation Group (Blog · Stuart's words) letters/cylanceprotect%E2%84%A2-vs.-the-real-world-equation-group.html
  Live demonstration of CylancePROTECT defending against the NSA-linked Equation Group malware.
- 2015-02-16: CylancePROTECT vs. the World: Carbanak Banking Malware (Blog · Stuart's words) letters/cylanceprotect%E2%84%A2-vs.-the-world-carbanak-banking-malware.html
  Live demonstration of CylancePROTECT stopping the Carbanak banking trojan that stole over $1 billion.
- 2014-12: Operation Cleaver: Prevention Is Everything (Cylance report (hosted by ACLU) · Scan) https://www.aclu.org/sites/default/files/field_document/Cylance-Operation-Cleaver-Report-1748-1833.pdf
  Stuart's Cylance-led campaign exposing Iranian state-sponsored hackers infiltrating critical infrastructure worldwide.
- 2014-11-17: The Allegory of the Cave (Blog · Stuart's words) letters/the-allegory-of-the-cave.html
  Stuart draws parallels between Plato's cave and the cybersecurity industry's blind faith in signature-based detection.
- 2014-08-09: Spam, meet spam-killer. Math. (Blog · Stuart's words) letters/spam-meet-spam-killer.-math..html
- 2014-04-03: Infinity vs. the Real World: MS Word Vulnerability (CVE-2014-1761) (Blog · Stuart's words) letters/infinity-vs.-the-real-world-ms-word-vulnerability-%28cve-2014-1761%29.html
- 2014-01-07: Yahoo Serving Ads with a Side of Malware (Blog · Stuart's words) letters/yahoo-serving-ads-with-a-side-of-malware.html
- 2014-01-03: Infinity vs. The Real World: Round 2 (Blog · Stuart's words) letters/infinity-vs.-the-real-world-round-2.html
- 2013-02-13: What's in a Name? (Blog · Stuart's words) letters/what-s-in-a-name.html
  On the power of naming and branding in the technology industry.
- 2013-02-13: Why Cylance? (Part 2) (Blog · Stuart's words) letters/why-cylance-part-2.html
  Part two of Stuart's account of why he started Cylance.
- 2012-12-04: Why Cylance? (Blog · Stuart's words) letters/why-cylance.html
  Stuart's memoir on United Flight 811 and the life-defining passion that led to founding Cylance.
- 2002-01-17: Personal firewall, user packet filtering share this year's Golden Guardian award (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/personal-firewall-user-packet-filtering-share-this-year-s-golden-guardian-award.html
- 2001-01-08: Security cannot rest on one element: You also need full disclosure and varied technologies (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/security-cannot-rest-on-one-element-you-also-need-full-disclosure-and-varied-technologies.html
- 2001-01-01: Effective code auditing can ease your worries and boost your application security (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/effective-code-auditing-can-ease-your-worries-and-boost-your-application-security.html
- 2000-12-11: Once-promising intrusion detection systems stumble over switched networks (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/once-promising-intrusion-detection-systems-stumble-over-switched-networks.html
- 2000-12-04: Here's a little advice to help you defeat the Internet's leading Trojan horse viruses (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/here-s-a-little-advice-to-help-you-defeat-the-internet-s-leading-trojan-horse-viruses.html
- 2000-11-27: Honeynet Project's 'honey pot' a sweet success in trapping hacker attacks (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/honeynet-project-s-honey-pot-a-sweet-success-in-trapping-hacker-attacks.html
- 2000-11-20: Mass manipulation isn't reserved just for presidential elections: IT world be warned (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/mass-manipulation-isn-t-reserved-just-for-presidential-elections-it-world-be-warned.html
- 2000-11-13: Microsoft break-in teaches us the lesson of securing remote users systems (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/microsoft-break-in-teaches-us-the-lesson-of-securing-remote-users-systems.html
- 2000-11-06: Plethora of security advisories concerning IIS makes it hard to spot the serious ones (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/plethora-of-security-advisories-concerning-iis-makes-it-hard-to-spot-the-serious-ones.html
- 2000-10-23: Visa sets guidelines for safe transaction, forces security on (willing?) merchants (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/visa-sets-guidelines-for-safe-transaction-forces-security-on-%28willing-%29-merchants.html
- 2000-10-16: Survey points out that lack of training is first barrier to improved network security (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/survey-points-out-that-lack-of-training-is-first-barrier-to-improved-network-security.html
- 2000-10-09: Etrade makes the 'hit' parade: Client-side hacking captures a big-time victim (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/etrade-makes-the-hit-parade-client-side-hacking-captures-a-big-time-victim.html
- 2000-10-02: Managed security or Web censorship? ISP's intrusion-detection system freezes usage (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/managed-security-or-web-censorship-isp-s-intrusion-detection-system-freezes-usage.html
- 2000-09-18: Do you think that updating your anti-virus software is good enough? Think again (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/do-you-think-that-updating-your-anti-virus-software-is-good-enough-think-again.html
- 2000-09-04: The question of client-side Internet security problems: To block or not to block (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/the-question-of-client-side-internet-security-problems-to-block-or-not-to-block.html
- 2000-08-18: FBI's Carnivore highlights the need for public-source review, strong encryption (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/fbi-s-carnivore-highlights-the-need-for-public-source-review-strong-encryption.html
- 2000-08-14: Anti-hacking method of full disclosure under attack from a part of the security industry (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/anti-hacking-method-of-full-disclosure-under-attack-from-a-part-of-the-security-industry.html
- 2000-08-07: 'Honey pot' network can gather evidence for catching and prosecuting hackers (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/honey-pot-network-can-gather-evidence-for-catching-and-prosecuting-hackers.html
- 2000-07-31: Most dangerous programming error threatens Outlook, Express clients (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/most-dangerous-programming-error-threatens-outlook-express-clients.html
- 2000-07-24: An arsenal of attack tools is an essential part of any strong security defense (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/an-arsenal-of-attack-tools-is-an-essential-part-of-any-strong-security-defense.html
- 2000-07-10: Scrap file worm highlights another obscure yet unsecured feature of Windows (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/scrap-file-worm-highlights-another-obscure-yet-unsecured-feature-of-windows.html
- 2000-07-03: Forget the firewall; guard your garbage against 'Dumpster diving' hackers (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/forget-the-firewall-guard-your-garbage-against-dumpster-diving-hackers.html
- 2000-06-26: Tracking an attack often provides little benefit; top deterrent is secure systems everywhere (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/tracking-an-attack-often-provides-little-benefit-top-deterrent-is-secure-systems-everywhere.html
- 2000-06-05: 'Invitation' to read files in Microsoft's IIS obscured by news of various vulnerabilities (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/invitation-to-read-files-in-microsofts-iis-obscured-by-news-of-various-vulnerabilities.html
- 2000-05-08: Internet security conference catches industry in transition with few new products (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/internet-security-conference-catches-industry-in-transition-with-few-new-products.html
- 2000-05-01: Security industry continues to argue over the sacred cow of full disclosure (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/security-industry-continues-to-argue-over-the-sacred-cow-of-full-disclosure.html
- 2000-04-24: Growing vulnerabilities in e-commerce apps present the latest challenge to security (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/growing-vulnerabilities-in-e-commerce-apps-present-the-latest-challenge-to-security.html
- 2000-04-17: Microsoft wants to be the one company to secure the Internet, but is it right for you? (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/microsoft-wants-to-be-the-one-company-to-secure-the-internet-but-is-it-right-for-you.html
- 2000-04-10: Will this be the year of public key security? Past and present join to suggest what's next (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/will-this-be-the-year-of-public-key-security-past-and-present-join-to-suggest-what-s-next.html
- 2000-03-27: Boost your Windows NT security with tips and tricks from a dedicated vulnerabilities hunter (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/boost-your-windows-nt-security-with-tips-and-tricks-from-a-dedicated-vulnerabilities-hunter.html
- 2000-03-16: Hack your network and management will come (InfoWorld · Scan) letters/hack-your-network-and-management-will-come.html
- 2000-03-13: Denial of service attacks make news, but application hacks continue to grow (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/denial-of-service-attacks-make-news-but-application-hacks-continue-to-grow.html
- 2000-03-06: Are the recent denial of service attacks the security industry's 15 minutes of fame? (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/are-the-recent-denial-of-service-attacks-the-security-industry-s-15-minutes-of-fame.html
- 2000-02-21: Predictable denial of service attacks come as a big surprise to media, government (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/predictable-denial-of-service-attacks-come-as-a-big-surprise-to-media-government.html
- 2000-02-17: Golden Guardian award runners-up present some encouraging news in security field (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/golden-guardian-award-runners-up-present-some-encouraging-news-in-security-field.html
- 2000-02-07: Windows 2000 looks like its learned several important lessons regarding security (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/windows-2000-looks-like-its-learned-several-important-lessons-regarding-security.html
- 2000-01-31: RSA conference leaves us wondering what the next thing in security will be (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/rsa-conference-leaves-us-wondering-what-the-next-thing-in-security-will-be.html
- 2000-01-24: Hacking frenzy shows network security breaches are not about to go out of fashion (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/hacking-frenzy-shows-network-security-breaches-are-not-about-to-go-out-of-fashion.html
- 2000-01-10: Searching the mailbag reveals reader rants and snappy comebacks from our authorities (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/searching-the-mailbag-reveals-reader-rants-and-snappy-comebacks-from-our-authorities.html
- 2000-01-03: New Year's is a time for reflection on the past, prediction for the future of the security business (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/new-year-s-is-a-time-for-reflection-on-the-past-prediction-for-the-future-of-the-security-business.html
- 1999-12-20: After Y2K will security garner attention it deserves, or will it be just another task? (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/after-y2k-will-security-garner-attention-it-deserves-or-will-it-be-just-another-task.html
- 1999-12-13: 'Personal' marketing appeals to sellers and some consumers, but your privacy will suffer (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/personal-marketing-appeals-to-sellers-and-some-consumers-but-your-privacy-will-suffer.html
- 1999-12-06: Firewalls are essential, but protecting the file system is what really keeps the snoops away (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/firewalls-are-essential-but-protecting-the-file-system-is-what-really-keeps-the-snoops-away.html
- 1999-11-29: Scanned your Web applications lately for security holes? Try these free audit tools (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/scanned-your-web-applications-lately-for-security-holes-try-these-free-audit-tools.html
- 1999-11-22: Confused yet about NT passwords? Try the 7-14 rule; those numbers work better than most (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/confused-yet-about-nt-passwords-try-the-7-14-rule-those-numbers-work-better-than-most.html
- 1999-11-15: Microsoft and Novell compete in creating single Internet sign-on for your e-shopping (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/microsoft-and-novell-compete-in-creating-single-internet-sign-on-for-your-e-shopping.html
- 1999-11-08: OpenBSD comes close to security nirvana with a system that is 'secure by default' (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/openbsd-comes-close-to-security-nirvana-with-a-system-that-is-secure-by-default.html
- 1999-11-01: Hacking contest throws spotlight on the numerous methods for attacking Web sites (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/hacking-contest-throws-spotlight-on-the-numerous-methods-for-attacking-web-sites.html
- 1999-09-27: NetWorld+Interop keeps security in focus as scores of vendors announce products (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/networld-interop-keeps-security-in-focus-as-scores-of-vendors-announce-products.html
- 1999-09-20: Internet Explorer holes show off poor coding in Java implementation and ActiveX controls (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/internet-explorer-holes-show-off-poor-coding-in-java-implementation-and-activex-controls.html
- 1999-09-13: Are you beefing up your incident response teams for year 2000? (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/are-you-beefing-up-your-incident-response-teams-for-year-2000.html
- 1999-08-30: Personal burglar alarms can ease your mind when taking NT into hostile environs (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/personal-burglar-alarms-can-ease-your-mind-when-taking-nt-into-hostile-environs.html
- 1999-08-23: Old IIS hack reborn: MDAC proves to be Windows NT's latest skeleton in the closet (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/old-iis-hack-reborn-mdac-proves-to-be-windows-nt-s-latest-skeleton-in-the-closet.html
- 1999-08-16: Future criminals will not need to steal from you – they will simply 'become you' (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/future-criminals-will-not-need-to-steal-from-you-they-will-simply-become-you.html
- 1999-08-09: Bane of e-commerce: 'We're secure, we only allow Web traffic through our firewall' (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/bane-of-e-commerce-we-re-secure-we-only-allow-web-traffic-through-our-firewall.html
- 1999-07-26: Columnists debate: Does Back Orifice 2000 help or hinder your security efforts (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/columnists-debate-does-back-orifice-2000-help-or-hinder-your-security-efforts.html
- 1999-07-19: Black Hat conference survives a denial-of-service attack, but will it outlast attrition? (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/black-hat-conference-survives-a-denial-of-service-attack-but-will-it-outlast-attrition.html
- 1999-07-05: Windows NT remote buffer overflows now a real threat thanks to eEye security system (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/windows-nt-remote-buffer-overflows-now-a-real-threat-thanks-to-eeye-security-system.html
- 1999-04-26: Novell's Remote encrypted password falls victim to weak security measures (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/novell-s-remote-encrypted-password-falls-victim-to-weak-security-measures.html
- 1999-04-19: Network Associates' Active Security model shows potential of automated security (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/network-associates-active-security-model-shows-potential-of-automated-security.html
- 1999-04-12: White-hat hacking: Separating the hype from the reality is an ongoing challenge (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/white-hat-hacking-separating-the-hype-from-the-reality-is-an-ongoing-challenge.html
- 1999-04-05: Privacy issues: When it comes down to it, Intel and Microsoft could follow your every move (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/privacy-issues-when-it-comes-down-to-it-intel-and-microsoft-could-follow-your-every-move.html
- 1999-03-22: Despite security steps, popular remote-control programs can still give up the network farm (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/despite-security-steps-popular-remote-control-programs-can-still-give-up-the-network-farm.html
- 1999-03-08: Remotely controlling end users can provide bliss or nightmares to system administrators (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/remotely-controlling-end-users-can-provide-bliss-or-nightmares-to-system-administrators.html
- 1999-03-01: Kill-the-hacker stories make the progressives among us shudder at the thought... right? (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/kill-the-hacker-stories-make-the-progressives-among-us-shudder-at-the-thought-right.html
- 1999-02-15: WSA offers solid security, great GUI (InfoWorld · Scan) letters/wsa-offers-solid-security-great-gui.html
- 1999-02-15: The more the merrier: 1998's Golden Guardian Award given to three top security solutions (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/the-more-the-merrier-1998-s-golden-guardian-award-given-to-three-top-security-solutions.html
- 1999-02-08: DNS due diligence is an important step in preventing crackers from accessing data (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/dns-due-diligence-is-an-important-step-in-preventing-crackers-from-accessing-data.html
- 1999-02-01: Beware of the obvious: Ubiquitous SNMP provides a backdoor to your network secrets (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/beware-of-the-obvious-ubiquitous-snmp-provides-a-backdoor-to-your-network-secrets.html
- 1999-01-25: New high-speed Net access services give unwanted snoopers a real opportunity (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/new-high-speed-net-access-services-give-unwanted-snoopers-a-real-opportunity.html
- 1999-01-11: Kane demonstrates its mettle as the final line of defense (InfoWorld · Scan) letters/kane-demonstrates-its-mettle-as-the-final-line-of-defense.html
- 1999-01-11: Don't forget those unguarded modem lines when assessing your security risks (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/don-t-forget-those-unguarded-modem-lines-when-assessing-your-security-risks.html
- 1999-01-04: Looking back at 1998 sheds light on security gains and areas to fix in the next decade (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/looking-back-at-1998-sheds-light-on-security-gains-and-areas-to-fix-in-the-next-decade.html
- 1998-12-21: VirusNet packs key scanning tools (InfoWorld · Scan) letters/virusnet-packs-key-scanning-tools.html
- 1998-12-21: 'Tis the season for holiday-related hoaxes and hostile-content hacker mischief (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/tis-the-season-for-holiday-related-hoaxes-and-hostile-content-hacker-mischief.html
- 1998-12-14: SDTI improves solid security tool (InfoWorld · Scan) letters/sdti-improves-solid-security-tool.html
- 1998-12-14: Netbus hacker tool presents a greater threat to Windows shops than BackOrifice (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/netbus-hacker-tool-presents-a-greater-threat-to-windows-shops-than-backorifice.html
- 1998-12-07: Help us pick our Golden Guardian: this year's best security product (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/help-us-pick-our-golden-guardian-this-year-s-best-security-product.html
- 1998-11-30: Limited scope snags Netect tool (InfoWorld · Scan) letters/limited-scope-snags-netect-tool.html
- 1998-11-30: Windows NT leaks: Two denial-of-service attacks work their way past Service Pack 4 (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/windows-nt-leaks-two-denial-of-service-attacks-work-their-way-past-service-pack-4.html
- 1998-11-23: Jaws L5 delivers zippy security (InfoWorld · Scan) letters/jaws-l5-delivers-zippy-security.html
- 1998-11-23: NT Service Pack 4's Security Configuration Manager lightens the load of securing NT servers (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/nt-service-pack-4-s-security-configuration-manager-lightens-the-load-of-securing-nt-servers.html
- 1998-11-16: NT Service Pack 4 improves but raises inevitable questions (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/nt-service-pack-4-improves-but-raises-inevitable-questions.html
- 1998-11-09: Recent Rootshell hack reveals that ISPs may be the weakest link (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/recent-rootshell-hack-reveals-that-isps-may-be-the-weakest-link.html
- 1998-11-02: Is adaptive security the next step in the evolution of a secure computing platform? (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/is-adaptive-security-the-next-step-in-the-evolution-of-a-secure-computing-platform.html
- 1998-10-19: Cute name belies gravity of latest NT attack (InfoWorld · Co-written with Joel Scambray) letters/cute-name-belies-gravity-of-latest-nt-attack.html
- 1998-10-12: AS/400 security is still top notch, but diligent steps can help fortify it (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/as-400-security-is-still-top-notch-but-diligent-steps-can-help-fortify-it.html
- 1998-10-05: PGP Brings Security to Masses (InfoWorld · Summary — not his words) letters/pgp-brings-security-to-masses.html
  A page written about this, not by Stuart.
- 1998-10-05: New York Times Web site hacker group unearths an important role for the media (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/new-york-times-web-site-hacker-group-unearths-an-important-role-for-the-media.html
- 1998-09-28: CyberGuard offers hyper defense, lacks refinement (InfoWorld · Scan) letters/cyberguard-offers-hyper-defense-lacks-refinement.html
- 1998-09-28: Microsoft's Virtual Private Networking: Is it safe to go back into the water with PPTP? (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/microsoft-s-virtual-private-networking-is-it-safe-to-go-back-into-the-water-with-pptp.html
- 1998-09-21: The haze surrounding legal issues in the computer industry taints security as well (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/the-haze-surrounding-legal-issues-in-the-computer-industry-taints-security-as-well.html
- 1998-09-14: Forget BackOrifice: Inventory Windows' shares and enforce password policies (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/forget-backorifice-inventory-windows-shares-and-enforce-password-policies.html
- 1998-08-31: Security bug chinks armor of Eudora e-mail, reinforces need to keep Web, OS separate (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/security-bug-chinks-armor-of-eudora-e-mail-reinforces-need-to-keep-web-os-separate.html
- 1998-08-24: BackOrifice proves what we already knew: Win95/98 isn't secure (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/backorifice-proves-what-we-already-knew-win95-98-isn-t-secure.html
- 1998-08-10: Harry & Louise, SSL slips, and 56-bit DES cracks bring crypto into the spotlight (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/harry-louise-ssl-slips-and-56-bit-des-cracks-bring-crypto-into-the-spotlight.html
- 1998-08-03: Do you want some proof that NetWare is alive and well? People are still hacking it (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/do-you-want-some-proof-that-netware-is-alive-and-well-people-are-still-hacking-it.html
- 1998-07-27: E&Y teaches the fine art of hacking at your site (InfoWorld · Scan) letters/e-y-teaches-the-fine-art-of-hacking-at-your-site.html
- 1998-07-27: Unfortunately, you haven't heard the last about security issues with NTFS streams (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/unfortunately-you-haven-t-heard-the-last-about-security-issues-with-ntfs-streams.html
- 1998-07-20: ICSA hacker insurance adds market muscle and peace of mind, but is it really worth it? (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/icsa-hacker-insurance-adds-market-muscle-and-peace-of-mind-but-is-it-really-worth-it.html
- 1998-07-13: Lucent Bridges security gaps (InfoWorld · Scan) letters/lucent-bridges-security-gaps.html
- 1998-07-13: Could well-meaning legislation wipe out your right to hack? (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/could-well-meaning-legislation-wipe-out-your-right-to-hack.html
- 1998-07-12: Virus threats of the past and present reveal current state of the digital immune system (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/virus-threats-of-the-past-and-present-reveal-current-state-of-the-digital-immune-system.html
- 1998-07-06: Free Windows-based scanners are plentiful, but only Asmodeus shows promise (InfoWorld · Security Watch · Co-written with Joel Scambray) letters/free-windows-based-scanners-are-plentiful-but-only-asmodeus-shows-promise.html
- 1998-04-20: Ballista 2.3 fortifies networks (InfoWorld · Scan) letters/ballista-2-3-fortifies-networks.html
- 1998-03-16: How secure are your IBM legacy systems (InfoWorld · Scan) letters/how-secure-are-your-ibm-legacy-systems.html
- 1998-02-23: Hidden assets boost Digital server (InfoWorld · Scan) letters/hidden-assets-boost-digital-server.html
- 1998-02-23: RealSecure is fast but needs polish (InfoWorld · Scan) letters/realsecure-is-fast-but-needs-polish.html
- 1998-01-26: Internet Scanner fills the holes (InfoWorld · Scan) letters/internet-scanner-fills-the-holes.html
- 1998-01-19: Enterprise Platforms Manager (InfoWorld · Scan) letters/enterprise-platforms-manager.html
- 1997-11-03: Siteminder upgrade shows solid progress (InfoWorld · Scan) letters/siteminder-upgrade-shows-solid-progress.html
- 1997-10-13: Comnet Predictor offers a host of impressive analysis features (InfoWorld · Scan) letters/comnet-predictor-offers-a-host-of-impressive-analysis-features.html
- 1997-10-06: Cisco's anticipated NSM surpasses all expectations (InfoWorld · Scan) letters/cisco-s-anticipated-nsm-surpasses-all-expectations.html
- 1997-09-22: A note about the ANS ISP solution (InfoWorld · Scan) letters/a-note-about-the-ans-isp-solution.html
- 1997-09-22: Isolation Systems' VPN network toaster ready for prime time (InfoWorld · Scan) letters/isolation-systems-vpn-network-toaster-ready-for-prime-time.html
- 1997-09-22: Solaris 2.6 for Intranets gives Windows NT stiff competition (InfoWorld · Scan) letters/solaris-2-6-for-intranets-gives-windows-nt-stiff-competition.html
- 1997-08-04: Cisco's DNS/DHCP manager breaks into Windows NT (InfoWorld · Scan) letters/cisco-s-dns-dhcp-manager-breaks-into-windows-nt.html
- 1997-07-28: VPN promise yet to be fulfilled (InfoWorld · Scan) letters/vpn-promise-yet-to-be-fulfilled.html
- 1997-07-21: RealSecure defends your network from the inside out (InfoWorld · Scan) letters/realsecure-defends-your-network-from-the-inside-out.html
- 1997-07-14: Application Expert pinpoints the source of slowdowns (InfoWorld · Scan) letters/application-expert-pinpoints-the-source-of-slowdowns.html
- 1997-06-23: Aventail delivers a highly secure, flexible VPN solution (InfoWorld · Scan) letters/aventail-delivers-a-highly-secure-flexible-vpn-solution.html
- 1997-06-16: e-Lock handles certificates (InfoWorld · Scan) letters/e-lock-handles-certificates.html
- 1997-06-09: AltaVista firewall boasts impressive, security and remote management (InfoWorld · Scan) letters/altavista-firewall-boasts-impressive-security-and-remote-management.html
- 1997-03-24: Red Shift detects cracks in network security walls (InfoWorld · Scan) letters/red-shift-detects-cracks-in-network-security-walls.html
- 1997-03-10: Module adds NT diagnostics to Compas monitor (InfoWorld · Scan) letters/module-adds-nt-diagnostics-to-compas-monitor.html
- 1997-03-03: Simple, effective WebStalker pro bolsters NT security (InfoWorld · Scan) letters/simple-effective-webstalker-pro-bolsters-nt-security.html
- 1996-12-02: Solstice eases managing global environments (InfoWorld · Scan) letters/solstice-eases-managing-global-environments.html
- 1996-11-18: Centri Firewall secures Windows NT networks (InfoWorld · Scan) letters/centri-firewall-secures-windows-nt-networks.html
- 1996-11-11: DSM 2.04 "enlightens" enterprise (InfoWorld · Scan) letters/dsm-2-04-enlightens-enterprise.html
- 1996-11-04: Secure Access Firewall add-on provides a dynamic firewall in your Ascend routers (InfoWorld · Scan) letters/secure-access-firewall-add-on-provides-a-dynamic-firewall-in-your-ascend-routers.html
- 1996-10-21: QIP addresses the enterprise (InfoWorld · Stuart's words) letters/qip-addresses-the-nterprise.html
- 1996-10-07: MatchBox ES-2420 provides unprecedented level of configuration (InfoWorld · Scan) letters/matchbox-es-2420-provides-unprecedented-level-of-configuration.html

### Press (78)
- 2026-05-16: Reimagining Work with Cognitive Twins in Meeting-Light Organizations — Serious Insights (Serious Insights · Press) https://www.seriousinsights.net/stuart-mcclure-interview/
  Stuart on AI cognitive twins, Artificial Individual Intelligence, and building meeting-light organizations that boost trust and focus.
- 2025-11-17: OC500 2025: Stuart McClure (Orange County Business Journal · Press) https://www.ocbj.com/oc-500/2025/oc500-2025-stuart-mcclure/
  Stuart named to Orange County Business Journal's OC500 list of the most influential people in Orange County for 2025.
- 2025-09-30: Layered Defenses: Insecure AI Code & Exploit Chaining — TechNadu (TechNadu · Press) https://www.technadu.com/layered-defenses-addressing-insecure-ai-code-business-logic-flaws-and-exploit-chaining/610042/
  Expert insights on evolving attacker methods and AI-generated code risks.
- 2025-02: Experts Reveal How Agentic AI Is Shaping Cybersecurity in 2025 (Security Journey · Press) https://www.securityjourney.com/post/experts-reveal-how-agentic-ai-is-shaping-cybersecurity-in-2025
  Stuart shares expert insights on how agentic AI is transforming the cybersecurity landscape in 2025.
- 2024-12-08: OC Insider: Spectrum Sales — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/oc-insider/oc-insider-spectrum-sales/
  Stuart mentioned in OCBJ's OC Insider column covering notable Orange County business developments.
- 2024-08-05: OC's McClure Sees Long Road for CrowdStrike — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/technology/ocs-mcclure-sees-long-road-for-crowdstrike/
  Stuart provides expert commentary on CrowdStrike's challenges and the broader cybersecurity landscape.
- 2024-06-17: Cylance Co-Founder McClure Launches New AI Startup — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/technology/cylance-co-founder-mcclure-launches-new-ai-startup/
  OCBJ coverage of Stuart's launch of Wethos AI, applying artificial intelligence to human potential.
- 2024-05-31: Clearing the 'Fog of More' in Cyber Security — Unite.ai (Unite.AI · Press) https://www.unite.ai/clearing-the-fog-of-more-in-cyber-security/
  Stuart on how the proliferation of security tools creates a 'fog of more' that weakens organizational defenses.
- 2024-05-13: Cyber Pioneer Claims Cure for Cyberattacks — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/technology/cyber-pioneer-claims-cure-for-cyberattacks/
  Deep dive into Cylance's AI-first approach to stopping attacks before execution.
- 2024: Transforming Code Scanning with GenAI — Help Net Security (Help Net Security · Press) https://www.helpnetsecurity.com/2024/11/18/stuart-mcclure-qwiet-ai-code-scanning/
  Stuart on shifting from reactive fixes to proactive risk management in AppSec.
- 2024: Rethinking Work, Hiring & High-Performing Teams — Product Leaders Journey (Product Leaders Journey · Press) https://www.productleadersjourney.com/blog/rethinking-work-hiring-and-high-performing-teams-a-conversation-with-stuart-mcclure-ceo-wethosa/
  Conversation on the future of work and AI-assisted hiring.
- 2023-11-27: Hoag Innovators Award $1M to 3 Doctors (Archive page · Press) letters/hoag-innovators-award-1m-to-3-doctors.html
  Press coverage of the Hoag Innovators awards to three doctors.
- 2023-10-16: Cylance Co-Founder McClure Steps Up AI Focus — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/technology/cylance-co-founder-mcclure-steps-up-ai-focus/
  Coverage of Stuart's pivot post-Cylance into Qwiet AI, Wethos AI, and NumberOne AI.
- 2023-02-15: Let's Make Some Noise for Qwiet AI (Qwiet AI · Press) https://qwiet.ai/lets-make-some-noise-for-qwiet-ai-stuart-mcclure-qwiet-ai-ceo/
  Stuart announces and celebrates the Qwiet AI brand and mission.
- 2023-01-04: 2022 Leader Boards: A Look Back — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/leader-board/2022-leader-boards-a-look-back/
  Orange County Business Journal's 2022 Leader Boards retrospective featuring Stuart McClure.
- 2022-10-25: Cylance's McClure Lands $13M for New AI Venture — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/technology/cylances-mcclure-lands-13m-for-new-ai-venture/
  OCBJ coverage of Stuart raising $13 million for NumberOne AI, his AI venture studio.
- 2022-10-11: NumberOne AI Launches with Mission to Change the Incubator Game (PR Newswire · Press) https://www.prnewswire.com/news-releases/numberone-ai-raises-13m-to-fund-predictive-aiml-startups-301645539.html
  Announcement and coverage of Stuart's launch of NumberOne AI.
- 2022-08-23: Stuart McClure Shifts Ahead in Cybersecurity — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/technology/stuart-mcclure-shifts-ahead-in-cybersecurity/
  Profile of his transition from BlackBerry Cylance to new AI ventures.
- 2022-07-20: OC's Long-Term Economic Prosperity Relies on Artificial Intelligence — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/leader-board/oc-leader-board-123/
  Stuart's op-ed arguing that Orange County's future economic growth depends on embracing AI.
- 2020: A Chat with Infosec Innovator & Investor Stuart McClure (Nightfall AI) (Nightfall AI · Press) https://www.nightfall.ai/blog/a-chat-with-infosec-innovator-and-investor-stuart-mcclure
  Nightfall AI's 2020 profile interview covering Stuart's investment philosophy and views on the security landscape.
- 2019-12-10: Stuart McClure — OCBJ Full Archive (Orange County Business Journal · Press) https://www.ocbj.com/technology/stuart-mcclure/
  All Orange County Business Journal coverage of Stuart McClure.
- 2019-09-26: Cylance Founder Stuart McClure Leaves BlackBerry — SecurityWeek (SecurityWeek · Press) https://www.securityweek.com/cylance-founder-stuart-mcclure-leaves-blackberry/
  Reporting on Stuart's departure after the Cylance integration was complete.
- 2019-06-23: OCBJ Insider — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/news/weekly-news/ocbj-insider-3/
  Stuart featured in OCBJ's insider column covering Orange County business leaders.
- 2019-05-30: Ackcent Above and Beyond in Spain with Stuart McClure, President and Founder at Cylance (Ackcent · Press) https://ackcent.com/ackcent-above-and-beyond-in-spain-with-stuart-mcclure-president-and-founder-at-cylance/
  Stuart discusses Cylance's expansion into Spain and the partnership with Ackcent for AI-driven cybersecurity.
- 2019-05-05: OC 50 Keeping You Safe — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/special-report/mcclure/
  Stuart named to OCBJ's OC 50 list for his role in keeping the world safe through AI cybersecurity.
- 2019-02-25: BlackBerry Buys AI Cybersecurity Firm Cylance for $1.4bn — Fintech Futures (FinTech Futures · Press) https://www.fintechfutures.com/cybersecurity/blackberry-buys-ai-cybersecurity-firm-cylance-for-1-4bn/
  Industry analysis of the BlackBerry-Cylance deal.
- 2019-02-22: Cylance Bought by BlackBerry for $1.4 Billion — OC Register (OC Register · Press) https://www.ocregister.com/2019/02/22/cylance-in-irvine-bought-by-blackberry-for-1-4-billion/
  News coverage of BlackBerry's acquisition of Cylance.
- 2019: Press Release: UCI Commencement (UC Irvine Merage School · Press) https://merage.uci.edu/press-releases/2019/03/uci-paul-merage-school-of-business-announces-cylance-founder-and-ceo-stuart-mcclure-as-2019-distinguished-executive-commencement-speaker.html
  Cylance founder and CEO selected to address 850+ graduates. "Agile leaders are needed to guide and launch the companies of tomorrow."
- 2018-11-19: BlackBerry's $1.4B Bet on Cylance Security — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/news/weekly-news/blackberrys-14b-bet-cylance-security/
  OCBJ coverage of BlackBerry's acquisition of Cylance.
- 2018-08-26: Software Companies Again Boost Headcount Over 5% — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/special-report/software-companies-again-boost-headcount-over-5/
  OCBJ special report on OC software companies' hiring growth, featuring Cylance among top performers.
- 2018-05-23: Meet the Man Who's Making Your Computers Safer — Irvine Standard (Irvine Standard · Press) https://www.irvinestandard.com/2018/meet-the-man-whos-making-your-computers-safer/
  Profile of Stuart and Cylance's mission to revolutionize cybersecurity with AI from Irvine, California.
- 2018-03-29: Stuart McClure, Cylance — DFJ Venture Capital (Medium · Press) https://medium.com/@DFJvc/stuart-mcclure-cylance-464f71285aaf
  Investor perspective from DFJ Growth, one of Cylance's backers.
- 2017-07-09: Cylance Taps New Market — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/news/weekly-news/cylance-taps-new-market/
  OCBJ reporting on Cylance's expansion into new market segments.
- 2017-04-06: Cylance Cuts Jobs — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/manufacturing/cylance-inc-irvine-has-initiated-round-job-cuts-re/
  OCBJ reporting on a round of job reductions at Cylance during strategic restructuring.
- 2016-11-30: Meet the $1 Billion Startup Busting Cybersecurity's Greatest Myth — Inc. (Inc. · Press) https://www.inc.com/will-yakowicz/cylance-2016-company-of-the-year-nominee.html
  Inc.'s landmark profile of Cylance as it approached unicorn status, challenging AV industry myths.
- 2016-10-02: Cylance of the Worms — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/news/weekly-news/cylance-worms/
  OCBJ feature on Cylance's approach to combating worm-based cyber threats with AI.
- 2016-10-02: Software Maker Joins Data-Breach Resistance Group — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/news/weekly-news/software-maker-joins-data-breach-resistance-group/
  OCBJ coverage of Cylance joining an industry coalition focused on combating data breaches.
- 2016-09-18: Burgeoning Cybersecurity Lifts Cylance Nearly 2,000% — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/special-report/burgeoning-cybersecurity-lifts-cylance-nearly-2000/
  OCBJ special report on Cylance's explosive growth with revenue increasing nearly 2,000%.
- 2016-09-07: Opportunities to Stop OPM Cyber Breach Missed (The Banner-Tribune (AP) · Press) letters/opportunities-to-stop-opm-cyber-breach-missed.html
  AP report on the OPM breach quoting Cylance CEO Stuart McClure on the government's missed opportunities to stop the hackers.
- 2016-07-17: Next Act for Cylance: Consumer Market — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/news/weekly-news/next-act-cylance-consumer-market/
  OCBJ coverage of Cylance's strategic move to bring AI-driven cybersecurity to consumers.
- 2016-07-06: Duelling Unicorns: CrowdStrike vs. Cylance in Brutal Battle to Knock Hackers Out (Forbes · Press) https://www.forbes.com/sites/thomasbrewster/2016/07/06/duelling-unicorns-crowdstrike-vs-cylance-in-brutal-battle-to-knock-hackers-out/
  Forbes profiles the fierce competition between CrowdStrike and Cylance — two cybersecurity unicorns taking fundamentally different approaches to stopping hackers.
- 2016-06-11: CEO Stuart McClure Has Your Cure for Failed Cybersecurity Measures — Chief Executive (Chief Executive · Press) https://chiefexecutive.net/ceo-stuart-mcclure-search-security/
  Jennifer Pellet profiles Stuart's epiphany that conventional anti-malware doesn't work — the insight behind Cylance.
- 2015-09-23: Black Hat Sponsor Interview — Stuart McClure, Cylance (Black Hat · Press) https://blackhat.com/sponsor-interview/09232015.html
  Stuart discusses Cylance's AI-driven approach to endpoint security in this Black Hat sponsor interview.
- 2015-07-28: Cylance Gets $42M — OCBJ (Orange County Business Journal · Press) https://www.ocbj.com/technology/cylance-gets-42m/
  OCBJ reporting on Cylance's $42 million funding round.
- 2015: Entrepreneur Interview: Stuart McClure, Cylance (DFJ Growth · Press) https://dfjgrowth.com/founders/stuart-mcclure-cylance/
  Stuart on building Cylance.
- 2014-12: Iranian Hackers Infiltrate Airport & Airline Security (IBTimes UK · Press) https://www.ibtimes.co.uk/operation-cleaver-irans-state-sponsored-hackers-infiltrate-airport-airline-security-1477881
  Analysis of Iranian state-sponsored hacking campaigns targeting aviation and critical infrastructure.
- 2014-01-07: McClure: Hacking Exposed — Dark Reading (Dark Reading · Press) https://www.darkreading.com/vulnerabilities-threats/mcclure-hacking-exposed
  Stuart on surviving a plane crash, witnessing the Morris worm firsthand, and the journey from hacking a college buddy's password to building Cylance.
- 2014: Iranian Hackers Infiltrate Systems (Reuters · Press) letters/iranian-hackers-infiltrate-systems.html
  Reuters reports on Cylance's Operation Cleaver exposing Iranian state-sponsored hackers, featuring CEO Stuart McClure.
- 2013-07-18: Trying to Read Hackers' Minds (The Los Angeles Times · Press) letters/trying-to-read-hackers-minds.html
  LA Times profiles Cylance's AI-driven approach to cybersecurity.
- 2013-07: Hacker Barnaby Jack Dies a Week Before Hacking Convention (Reuters · Press) letters/hacker-barnaby-jack-dies-a-week-before-hacking-convention.html
  Reuters obituary quoting Stuart McClure on Barnaby Jack, who he gave one of his first jobs at McAfee.
- 2013-01-17: Cylance Acquires Spearpoint (Blog · Stuart's words) letters/cylance-acquires-spearpoint.html
  Stuart announces Cylance's acquisition of SpearPoint to enhance its services and research capabilities.
- 2013: Private Firms Take Major Role vs. Cyberattacks (Press clipping · Press) letters/private-firms-take-major-role-vs-cyberattacks.html
  Stuart McClure featured in a major newspaper piece on the private sector's growing role in defending against cyberattacks.
- 2013: Is Mandiant a 'Digital Blackwater'? (Press clipping · Press) letters/is-mandiant-a-digital-blackwater.html
  Stuart McClure featured in a deep examination of private cybersecurity firms and their role in cyber-espionage investigations.
- 2013: Private Security Firms Taking Big Role Fighting Cyberattacks (Associated Press · Press) letters/private-security-firms-taking-big-role-fighting-cyberattacks.html
  AP examines the rise of private cybersecurity firms in national defense, featuring Stuart McClure among industry leaders.
- 2012-12-04: How a Deadly Plane Flight Created Security Startup Cylance — VentureBeat (VentureBeat · Press) https://venturebeat.com/security/cylance/
  VentureBeat's early coverage tracing Cylance's origin to Stuart's experience on United Flight 811.
- 2012-08-30: Experts Hope to Protect Cars from Computer Viruses (Chicago Tribune · Press) letters/experts-hope-to-protect-cars-from-computer-viruses.html
  Chicago Tribune's Focus Cyber Security report on automotive hacking risks, quoting Stuart McClure on vehicle cybersecurity vulnerabilities.
- 2012: Cylance Founder Stuart McClure Finds Success In Slowing Down (Fast Company · Press) https://www.fastcompany.com/3002934/cylance-founder-stuart-mcclure-finds-success-slowing-down
  Fast Company profile on Stuart leaving McAfee CTO to found Cylance and the lessons learned from slowing down.
- 2012: Cars Next Frontier for Hackers, Report Warns (Agence France-Presse · Press) letters/cars-next-frontier-for-hackers.html
  Stuart McClure quoted on automotive cybersecurity risks in McAfee's "Caution: Malware Ahead" report.
- 2011-12-06: McAfee Names Stuart McClure Worldwide CTO — SecurityWeek (SecurityWeek · Press) https://www.securityweek.com/mcafee-names-stuart-mcclure-worldwide-cto/
  SecurityWeek covers Stuart's appointment as McAfee's Worldwide Chief Technology Officer.
- 2011: What Computers Control in Your Car (Chicago Tribune · Press) letters/what-computers-control-in-your-car.html
  Chicago Tribune's Focus Cyber Security report on automotive hacking risks, quoting Stuart McClure on vehicle vulnerabilities.
- 2011: Cyber Attack Target: Your Car (Jim Finkle · Press) letters/cyber-attack-target-your-car.html
  Stuart McClure warns about the future of automotive cybersecurity as connected vehicles become increasingly vulnerable.
- 2011: New State Team to Combat Tech Crime (LA Times · Press) letters/new-state-team-to-combat-tech-crime.html
  LA Times on AG Kamala Harris's new eCrime Unit, with McAfee CTO Stuart McClure on bringing tech criminals to justice.
- 2009: Operation Aurora (2009–2010) (Wikipedia · Press) https://en.wikipedia.org/wiki/Operation_Aurora
  The landmark 2009–2010 Chinese state-sponsored cyberattack on Google and 20+ major corporations, exposing the era of nation-state hacking.
- 2006: Operation NightDragon (2006–2011) (Wikipedia · Press) https://en.wikipedia.org/wiki/Night_Dragon_Operation
  Stuart led this McAfee campaign exposing Chinese state-sponsored cyber espionage targeting global energy and petrochemical companies starting in 2006.
- 2005-05: Ready, Set, Attack! — McAfee Day at RIT (RIT · Press) https://www.rit.edu/news/ready-set-attack
  Stuart keynoted RIT's McAfee Day where student teams built and defended networks against attacks by industry security experts.
- 2005-05: Fighting Off 'Hack Attack' (RIT & McAfee · Press) letters/fighting-off-hack-attack.html
  Newspaper coverage of RIT and McAfee's partnership cybersecurity competition where Stuart delivered the keynote.
- 2004-11-11: Security Expert Warns of Hacking (The Windsor Star · Press) letters/security-expert-warns-of-hacking.html
  Stuart McClure warns governments and corporations about the growing threat of politically motivated hacking.
- 2004: Beware Political Hackers: Expert (Press) letters/beware-political-hackers-expert.html
  Stuart McClure warns about the growing threat of politically motivated hacking targeting governments and corporations.
- 2003: Hacking Exposed Author Reveals His Security Secrets (CIO · Press) https://www.cio.com/article/278300/security0-hacking-exposed-author-reveals-his-security-secrets.html
  CIO Magazine interview where Stuart reveals the security strategies behind the Hacking Exposed book series.
- 2002-09-12: Interview with Stuart McClure, President and CTO of Foundstone — Help Net Security (Help Net Security · Press) https://www.helpnetsecurity.com/2002/09/12/interview-with-stuart-mcclure-president-and-cto-of-foundstone/
  Stuart discusses Foundstone's mission, vulnerability management, and the evolving cybersecurity threat landscape.
- 2000: Digital Trail Not Difficult to Follow (Press clipping · Press) letters/digital-trail-not-difficult-to-follow.html
  Stuart McClure and Joel Scambray examine the digital footprints we leave behind and the privacy implications of a connected world.
- 2000: 2600 Club Motivates People to Pursue Loftier Goals (The Washington Post · Press) letters/2600-club-motivates-people-to-pursue-loftier-goals.html
  Washington Post profiles the 2600 hacker club with Stuart McClure quoted as a leading security expert.
- 2000: Many Computer Hackers Believe They're Doing Good (Michael H. Hodges · Press) letters/many-computer-hackers-believe-theyre-doing-good.html
  Profile of the hacker community referencing Stuart McClure's Hacking Exposed as essential security reading.
- 2000: Teenage Hacker Charged: Experts Say Attack on eBay, Amazon 'Very, Very Simple' (Press clipping · Press) letters/teenage-hacker-charged-experts-say-attack-on-ebay-amazon-very-very-simple.html
  Stuart McClure quoted on the simplicity of the denial-of-service attacks against eBay and Amazon.
- 1999: 'Exposed' a Cautionary Hacker Tale (Albuquerque Journal · Press) letters/exposed-a-cautionary-hacker-tale.html
  Albuquerque Journal reviews Hacking Exposed by Stuart McClure — "be afraid, or at the very least, be cautious."
- undated: Endurance Cycling (photos and clippings) (Photo page · Scan) letters/endurance-cycling.html
  Photos and newspaper clippings from his racing years on Guam, including the Pacific Daily News, 1984.
- undated: Stuart McClure, CEO and Founder, North America (Archive page · Scan) letters/stuart-mcclure-ceo-and-founder-north-america.html
  A scanned profile page.
- undated: Stuart McClure, CEO de Cylance (Summary page · Summary — not his words) letters/stuart-mcclure-ceo-de-cylance.html
  A Spanish-language interview with Stuart as CEO of Cylance.

### Books (19)
- 2026-03-11: Guardians of the Machine Age: Security in the Digital Era (Amazon · Contributing author) https://www.amazon.com/Guardians-Machine-Age-Security-Digital/dp/1945254165/
  Stuart contributes to this multi-author volume on securing the digital future in the age of AI and machine learning.
- 2024: Foreword: The Language of Deception (Amazon · Stuart's words) https://www.amazon.com/dp/1394222548
  Stuart's foreword to Justin Hutchens's book on deception, social engineering and AI.
- 2018: Foreword: Introduction to Artificial Intelligence for Security Professionals (Amazon · Stuart's words) https://www.amazon.com/dp/B07654CFFQ
  Stuart's foreword establishing the importance of AI literacy for the next generation of security professionals.
- 2016: Foreword: How to Measure Anything in Cybersecurity Risk (Stuart's words)
  Stuart prefaces this influential book on applying quantitative analysis to security risk management.
- 2012: Hacking Exposed - 7th Edition (Amazon · Co-written with Joel Scambray) https://www.amazon.com/dp/0071780289
  The seventh edition. Co-authored with Joel Scambray and George Kurtz.
- 2009: Hacking Exposed - 6th Edition (Amazon · Co-written with Joel Scambray) https://www.amazon.com/dp/0071613749
  The sixth edition, updated for new attacks and defenses.
- 2007: Hacking Exposed Windows - 3rd Edition (Amazon · Co-written with Joel Scambray) https://www.amazon.com/dp/007149426X
  The Windows-specific edition of the Hacking Exposed series.
- 2006: Hacking Exposed Windows - Server 2003 Edition (Amazon · Co-written with Joel Scambray) https://www.amazon.com/Windows-Server-2003-Hacking-Exposed/dp/0072230614
  The Windows Server 2003 edition, co-authored with Joel Scambray, covering security for Microsoft's enterprise server platform.
- 2005: Hacking Exposed - 5th Edition (Amazon · Co-written with Joel Scambray) https://www.amazon.com/dp/0072260815
  The fifth edition, updated for new attacks and defenses.
- 2005: Foreword: Sockets, Shellcode, Porting & Coding (Amazon · Stuart's words) https://www.amazon.com/Sockets-Shellcode-Porting-Coding-Professionals/dp/1597490059
  Stuart's foreword to this deep-dive technical reference on reverse engineering, exploit development, and security tool coding.
- 2004: Foreword: Hacking for Dummies (Foreword · Stuart's words) letters/hacking-for-dummies-1st-edition-by-kevin-beaver.html
  Stuart contributes the foreword to one of the most widely read introductory hacking books.
- 2003: Hacking Exposed - 4th Edition (Amazon · Co-written with Joel Scambray) https://www.amazon.com/Hacking-Exposed-Network-Security-Solutions/dp/0072227427
  The fourth edition, updated for new attacks and defenses.
- 2003: Foreword: Special Ops: Host and Network Security for Microsoft, Unix, and Oracle (Amazon · Stuart's words) https://www.amazon.com/dp/1931836698
  Stuart's foreword to this advanced security operations reference.
- 2002: Web Hacking: Attacks and Defense (Amazon · Co-written) https://www.amazon.com/dp/0201761769
  Stuart's companion volume on web-specific attack techniques and defenses.
- 2001: Hacking Exposed - 3rd Edition (Amazon · Co-written with Joel Scambray) https://www.amazon.com/Hacking-Exposed-Network-Security-Solutions/dp/0072193816
  The third edition, updated for new attacks and defenses.
- 2001: Hacking Exposed Windows - 2000 Edition (Amazon · Co-written with Joel Scambray) https://www.amazon.com/Hacking-Exposed-Windows-2000-Solutions/dp/B007PMP862
  The Windows 2000 edition of the Hacking Exposed series, co-authored by Joel Scambray and Stuart McClure.
- 2000: Hacking Exposed - 2nd Edition (Amazon · Co-written with Joel Scambray) https://www.amazon.com/gp/product/0072127481?ref_=dbs_m_mng_rwt_calw_tpbk_0&storeType=ebooks
  The second edition, updated for new attacks and defenses.
- 1999: Hacking Exposed - 1st Edition (Goodreads · Co-written with Joel Scambray) https://www.goodreads.com/book/show/4286146
  The first edition, co-authored with Joel Scambray and George Kurtz.
- undated: CyberCanon: Hacking Exposed Series (Cybersecurity Canon · Press) https://cybercanon.org/hacking-exposed-series/
  "Mandatory reading if you want to understand what is happening at a technical level." — Cybersecurity Canon Hall of Fame review.

### Flight 811 (14)
- 2026-02-24: United Airlines Flight 811 — Confessions of a Trolley Dolly (Confessions of a Trolley Dolly · Press) https://confessionsofatrolleydolly.com/2026/02/24/united-airlines-flight-811/
  A flight attendant's perspective on the United Airlines Flight 811 disaster and its lasting impact on aviation safety.
- 2026-01-01: Mayday ACI: Terror Over the Pacific (United 811) (YouTube · Video) https://www.youtube.com/watch?v=2rfkGrwRXDE
  Full Mayday Air Crash Investigation episode featuring Stuart McClure and the United Flight 811 disaster.
- 2025-07: Air Crash Investigation: United Flight 811 (IMDb · Press) https://www.imdb.com/title/tt0386950/?ref_=nm_knf_t_1
  Stuart appears in this National Geographic Air Crash Investigation episode recreating the United Airlines Flight 811 incident.
- 2025-04-05: Air Disasters: Terror Over the Pacific (Facebook · Video) https://www.facebook.com/watch/?v=726604976649138
  Stuart appears in the Smithsonian Channel's Aviation Nation episode covering the United Flight 811 disaster over the Pacific.
- 2025-04-05: Air Disasters: Terror Over the Pacific (YouTube · Video) https://www.youtube.com/watch?v=RfJZRzj2DBA
  Smithsonian Channel's Aviation Nation episode covering the United Flight 811 disaster featuring Stuart McClure.
- 2023-01-14: Violent Night: The Near Crash of United Airlines Flight 811 (Admiral Cloudberg · Press) https://admiralcloudberg.medium.com/violent-night-the-near-crash-of-united-airlines-flight-811-ba72b3349ff0
  Admiral Cloudberg's detailed investigation and analysis of the United Airlines Flight 811 disaster.
- 2019-10-19: United Airlines Flight 811 Survivor Writing Book to Honour Victims Including Kiwi (Stuff (NZ) · Press) https://www.stuff.co.nz/national/116713809/united-airlines-flight-811-survivor-writing-book-to-honour-victims-including-kiwi
  Stuart's story as a Flight 811 survivor, and his plan to write a book honouring the nine passengers who were lost.
- 2018-04-17: From the Archives: Flight 811 — The Untold Story (Stuff (NZ) · Press) https://www.stuff.co.nz/travel/travel-troubles/103194922/from-the-archives-flight-811--the-untold-story
  Stuff.co.nz's in-depth archival feature on the United Flight 811 disaster and the investigation that followed.
- 2017-02-08: UAL 811: The Untold Story — Airscape Magazine (Airscape · Press) https://airscapemag.com/2017/02/08/ual-811-the-untold-story/
  Airscape Magazine's in-depth account of the United Airlines Flight 811 disaster and the investigation that uncovered the truth behind the cargo door failure.
- 2016-03-17: Airline Disaster Gave McClure the Genesis for Cylance — OC Register (OC Register · Press) https://www.ocregister.com/2016/03/17/an-airline-disaster-gave-stuart-mcclure-the-genesis-for-his-irvine-cybersecurity-company/
  How United Airlines Flight 811 led Stuart to start Cylance.
- 2009: Al Slader Interview — New York Magazine (New York Magazine · Press) https://nymag.com/news/features/53791/
  New York Magazine interview with Al Slader, a fellow survivor of United Airlines Flight 811.
- 1992-03-18: NTSB: Aircraft Accident Report (Tailstrike · Scan) https://tailstrike.com/media/0isewf1p/240289.pdf
  The official NTSB Aircraft Accident Report for United Airlines Flight 811, detailing the cargo door failure investigation and findings.
- 1989-02-24: United 811 Cockpit Voice Recorder (CVR) (Tailstrike · Press) https://tailstrike.com/database/24-february-1989-united-811/
  Cockpit voice recorder transcript and analysis from United Airlines Flight 811 on February 24, 1989.
- 1989-02-24: This Day in Aviation: February 24, 1989 — United Airlines Flight 811 (This Day in Aviation · Press) https://www.thisdayinaviation.com/24-february-1989/
  The full account of what happened on February 24, 1989 when United Airlines Flight 811 suffered explosive decompression after takeoff from Honolulu.

### Companies (24)
- 2026-02-04: MightyID → Semperis — ~$20 Million (Calcalist · Press) https://www.calcalistech.com/ctechnews/article/h100qb6ed11g
  Identity resilience platform. Stuart served on C-Suite Advisory Board. Acquired by Semperis.
- 2025-05-26: Fluxwear, Inc. (Orange County Business Journal · Press) https://www.ocbj.com/special-report/oc50-2025-kamran-ansari/
  Stuart's investment in Fluxwear, Inc.
- 2024: Wethos AI — Founder/CEO & Board (2024–Present) (WethosAI · Press) https://www.wethos.ai
  Founder and CEO of Wethos AI, an AI-powered platform for understanding and optimizing human potential and team dynamics.
- 2024: TechLok Solutions — Board of Advisors (EIN Presswire · Press) https://www.einpresswire.com/article/699535326/techlok-solutions-announces-stuart-mcclure-to-its-board-of-advisors
  Lead investor and advisor to TechLok Solutions, a physical device security and mobile productivity platform.
- 2024: MightyID → Semperis — C-Suite Advisory Board (2024–2025, acquired 2025) (PR Newswire · Press) https://www.prnewswire.com/news-releases/stuart-mcclure-joins-the-mightyid-c-suite-advisory-board-bolstering-cybersecurity-expertise-302068765.html
  Joined the MightyID C-Suite Advisory Board, advising on strategic initiatives for their identity resilience platform. Acquired by Semperis in 2025.
- 2023: Fast Company Executive Board — Member (Fast Company Executive Board · Press) https://board.fastcompany.com/profile/Stuart-McClure-Chief-Executive-Officer-Qwiet-AI/2463b204-840a-452d-b11c-2d62521373c6
  Member of the Fast Company Executive Board, a vetted professional network of company founders and executives defining the future of business.
- 2023: CyberGRX → ProcessUnity (SiliconANGLE · Press) https://siliconangle.com/2023/07/12/processunity-cybergrx-unite-bolster-third-party-risk-management/
  Third-party risk management platform. Stuart was an investor. Acquired by ProcessUnity in July 2023.
- 2022: NumberOne AI — Founder/CEO & Board (2022–Present) (NumberOne AI · Press) https://numberone.ai/
  Founder and CEO of NumberOne AI, an AI incubator and accelerator spawning the next generation of AI-native companies.
- 2022: NetRise — Board of Directors (2022–Present) (NetRise · Press) https://www.netrise.io/en/company/announcements/netrise-welcomes-former-ceo-of-cylance-to-board-of-directors
  Appointed to the board of directors of NetRise, an XIoT security platform for firmware and software risk assessment.
- 2021: Soluble → Lacework — Investment (DEV · Press) https://dev.to/lacework/how-will-laceworks-acquisition-of-soluble-benefit-devs-2i0f
  Investor in Soluble, a cloud infrastructure security platform. Acquired by Lacework in 2021.
- 2020: Globus AI — Board of Directors (2020–2022) (Globus AI · Press) https://globus.ai/
  Served on the board of directors of Globus AI, a Norwegian AI company delivering enterprise AI solutions.
- 2020: Hyperwise Ventures — Board of Advisors (2020–Present) (Hyperwise Ventures · Press) https://www.hyperwise.vc/
  Advisor to Hyperwise Ventures, a venture capital firm investing in cybersecurity and deep tech startups.
- 2020: Qwiet AI → Harness — CEO & Board (2020–2025, acquired 2025) (Qwiet AI · Press) https://qwiet.ai/
  Served as CEO and board member of Qwiet AI, an AI-powered application security platform. Acquired by Harness in September 2025.
- 2019: Demisto → Palo Alto Networks — $560 Million (SiliconANGLE · Press) https://siliconangle.com/2020/02/24/palo-alto-networks-turns-560m-demisto-buy-new-xsoar-security-platform/
  Angel investor in Demisto, a security orchestration and automation platform. Acquired by Palo Alto Networks for $560M in 2019.
- 2017: JASK → Sumo Logic — Board of Directors (2017, acquired 2019) (Dark Reading · Press) https://www.darkreading.com/threat-intelligence/stuart-mcclure-ceo-and-co-founder-of-cylance-inc-joins-jask-s-board-of-directors
  Investor and board member at JASK, an autonomous security operations platform using AI-driven alert triage. Acquired by Sumo Logic in 2019.
- 2017: JASK → Sumo Logic — Angel Investment (FinSMEs · Press) https://www.finsmes.com/2017/09/jask-receives-investment-from-stuart-mcclure.html
  Angel investor in JASK, an autonomous security operations platform. Acquired by Sumo Logic in 2019.
- 2015: Optiv → KKR — Board of Directors (2015–2016) (Optiv · Press) https://www.optiv.com/
  Served on the board of directors of Optiv, a leading cybersecurity solutions integrator. Acquired by KKR.
- 2015: Digital Shadows → ReliaQuest — Board of Directors (2015, acquired 2022) (Business Wire · Press) https://www.businesswire.com/news/home/20150729005198/en/Digital-Shadows-Appoints-Stuart-McClure-Board-Directors
  Appointed to the board of Digital Shadows, a cyber threat intelligence and digital risk protection company. Acquired by ReliaQuest in 2022.
- 2014: ClearSky Ventures — Board of Advisors (2014–Present) (ClearSky · Press) https://clearskyvc.com/
  Advisor to ClearSky Ventures, a venture capital firm investing in early-stage cybersecurity and enterprise technology companies.
- 2012: Ten Eleven Ventures — Board of Advisors (2012–Present) (Ten Eleven Ventures · Press) https://teneleven.vc/
  Advisor to Ten Eleven Ventures, a venture capital firm focused exclusively on cybersecurity investments.
- 2012: Cylance → BlackBerry — Founder & Board (2012–2019, acquired 2019) (Wikipedia · Press) https://en.wikipedia.org/wiki/Cylance
  Co-founded Cylance, which used AI to stop malware before it ran. Acquired by BlackBerry for $1.5 billion in February 2019.
- 2004: McAfee → Intel — Global CTO/GM Risk & Compliance (2004–2012, acquired 2010) (Wikipedia · Press) https://en.wikipedia.org/wiki/McAfee
  Global CTO and GM of Risk & Compliance following McAfee's acquisition of Foundstone. McAfee acquired by Intel for $7.8B in 2010.
- 1999: Foundstone → McAfee — Founder & Board (1999–2004, acquired 2004) (Crunchbase · Press) https://www.crunchbase.com/organization/foundstone
  Co-founded Foundstone, a security consulting and vulnerability management firm. Acquired by McAfee in 2004.
- 1992: Computerese — Founder (1992–1994) (Press)
  IT and networking buildouts with custom software development. Founded in Palm Desert, CA — Stuart's first company, where it all started.

### Recognition (26)
- 2026-01-15: Clavis Foundation: First-Ever Endowed Chair for Integrative Medicine at Rady Children's (PR Newswire · Press) https://www.prnewswire.com/news-releases/rady-childrens-health-orange-county-announces-first-ever-endowed-chair-strengthening-long-term-commitment-to-integrative-medicine-and-wellness-302662407.html
  Stuart McClure and the Clavis Foundation fund the inaugural endowed chair for integrative medicine and wellness at Rady Children's Health Orange County.
- 2024-08-01: Omada Foundation (Omada Foundation · Press) https://omadafoundation.org/team/stuart-mcclure/
  Stuart's philanthropic work with the Omada Foundation, supporting community initiatives in Orange County and beyond.
- 2024-05-31: Hoag Hospital Foundation: Innovators (Facebook · Press) https://www.facebook.com/hoaghospitalfoundation/photos/were-hoag-innovators-who-are-passionate-about-health-care-advances-that-amplify-/958921172910147/
  Stuart recognized as a Hoag Innovator, passionate about health care advances that amplify community impact.
- 2024: OC500 2024: Top 500 Most Influential in Orange County (Orange County Business Journal · Press) https://www.ocbj.com/oc-500/oc500-2024-stuart-mcclure/
  Stuart named to the OC500 for 2024 by the Orange County Business Journal.
- 2024: Hoag Innovators Award 2024 (Hoag Hospital Foundation · Press) https://www.hoaghospitalfoundation.org/innovators/
  Stuart receives the Hoag Innovators Award recognizing transformative innovation in Orange County.
- 2023-05-23: Patent: Automated Systems for Generative Multimodel Multiclass Classification Using Machine Learning (U.S. patent · Scan) https://patentimages.storage.googleapis.com/0f/f4/54/38ec417d708aca/US11657317.pdf
  Cylance's core AI patent covering automated ML-based multiclass classification of software artifacts for malware detection. Originally filed 2014; granted as US11657317B2 in May 2023 — active through October 2037. Co-invented with Ryan Permeh, Matthew Wolff, and the Cylance research team.
- 2021-01-06: The Clavis Foundation: Helping CHOC Families (CHOC Foundation · Press) https://foundation.choc.org/healthcare/clavis-foundation-covid-support/
  Stuart's support for the Clavis Foundation and Children's Hospital of Orange County (CHOC), helping families where they need it most.
- 2020-10-27: Patent: Application Execution Control Utilizing Ensemble Machine Learning (Continuation) (U.S. patent · Scan) https://patentimages.storage.googleapis.com/4e/1b/4d/d957585960c077/US10817599.pdf
  Continuation grant (Oct 2020, active through Feb 2035) broadening claims to cover receiving features from operational, static, dynamic, and external sources to generate safety scores with confidence levels.
- 2019-03-19: Patent: Application Execution Control Utilizing Ensemble Machine Learning (US Grant) (U.S. patent · Scan) https://patentimages.storage.googleapis.com/31/32/66/90184034f5a392/US10235518.pdf
  Granted US patent (March 2019, active through Feb 2035) for Cylance's core AI security technology — real-time execution control using ensemble ML analyzing static and dynamic features to prevent malicious execution.
- 2019: OC500 2019: Orange County Most Influential (Orange County Business Journal · Press) https://www.ocbj.com/issues/oc-500/oc-500-2019/
  Stuart named to the OC500 list for 2019 by the Orange County Business Journal.
- 2018: OC500 2018: Orange County Most Influential (Orange County Business Journal · Press) https://www.ocbj.com/oc500-directory-of-influence/
  Stuart named to the OC500 list for 2018 by the Orange County Business Journal.
- 2017-03-22: S.Hrg. 115-140 — The Promises and Perils of Emerging Technologies for Cybersecurity (U.S. Congress · Scan) https://www.congress.gov/115/chrg/CHRG-115shrg28382/CHRG-115shrg28382.pdf
  Senate hearing examining how emerging technologies including artificial intelligence and machine learning are reshaping cybersecurity threats and defenses.
- 2017: Cybersecurity Excellence Awards — Stuart McClure (Award image · Press) images/cybersecurity-excellence.jpg
  Stuart's profile and nominations on the Cybersecurity Excellence Awards platform.
- 2017: CEO of the Year — Info Security Products Guide Global Excellence Awards (MarketScreener · Press) https://www.marketscreener.com/news/latest/Cylance-CEO-Stuart-McClure-Honored-as-CEO-of-the-Year-in-the-2017-Info-Security-PG-s-Global-Excell-23881904/
  Stuart McClure honored as CEO of the Year in the 2017 Info Security Products Guide Global Excellence Awards.
- 2016-09-07: The OPM Data Breach: How the Government Jeopardized Our National Security for More than a Generation (House Oversight Committee · Scan) https://oversight.house.gov/wp-content/uploads/2016/09/The-OPM-Data-Breach-How-the-Government-Jeopardized-Our-National-Security-for-More-than-a-Generation.pdf
  The House Oversight Committee majority staff report on the OPM breach. It found that “the significance of the cutting edge preventative technology offered by Cylance in responding to the OPM data breach cannot be overstated” (p. 123).
- 2016: EY Entrepreneur of the Year 2016 — Technology Award Winner, Orange County (PR Newswire · Press) https://www.prnewswire.com/news-releases/ey-announces-cylance-ceo-stuart-mcclure-named-ey-entrepreneur-of-the-year-2016-technology-award-winner-in-orange-county-300288191.html
  Ernst & Young names Stuart the top technology entrepreneur of the year for Orange County.
- 2016: NetEvents Innovation Idol Award (NetEvents · Press) https://www.netevents.org/past_events/iot-cloud-innovation-awards-2016/
  Cylance recognized at the NetEvents IoT & Cloud Innovation Awards 2016.
- 2015-03-31: Patent: System and Method for Network-Based Asset Operational Dependence Scoring (U.S. patent · Scan) https://patentimages.storage.googleapis.com/f2/8a/bd/f6ede5cb2fd090/US8997234.pdf
  McAfee patent (granted 2015, active through July 2031) that calculates operational dependence scores for network assets by analyzing services, connections, and data criticality to prioritize vulnerability remediation.
- 2013-12-31: Patent: Network Vulnerability Detection and Reporting (Continuation IV) (U.S. patent · Scan) https://patentimages.storage.googleapis.com/32/6e/0e/2240535b671dc9/US8621060.pdf
  Fourth US grant (Dec 2013) covering multi-tier port scanning and vulnerability database comparison methodology within the automated network security assessment framework.
- 2013-12-31: Patent: Network Vulnerability Detection and Reporting (Continuation V) (U.S. patent · Scan) https://patentimages.storage.googleapis.com/92/7e/76/2235450ee092fc/US8621073.pdf
  Fifth US grant (Dec 2013) covering active vulnerability assessment and quantitative security scoring components of the automated network vulnerability detection system.
- 2013-12-24: Patent: Network Vulnerability Detection and Reporting (Continuation III) (U.S. patent · Scan) https://patentimages.storage.googleapis.com/9b/16/6d/0ad26d8f825f71/US8615582.pdf
  Third US grant (Dec 2013) covering the hierarchical graphical reporting methodology for network vulnerability results — dynamic network topology visualizations over text-based reports.
- 2012-06-12: H. Rept. 112-522 — Report on Legislative and Oversight Activities of the House Committee on Homeland Security (U.S. Congress · Scan) https://www.congress.gov/112/crpt/hrpt522/CRPT-112hrpt522.pdf
  Third quarter, 112th Congress second session. House Committee on Homeland Security legislative and oversight activities report pursuant to House Rule XI, 1(d).
- 2012-04-24: America Is Under Cyber Attack: Why Urgent Action Is Needed (U.S. Congress · Scan) https://www.congress.gov/112/chrg/CHRG-112hhrg77380/CHRG-112hhrg77380.pdf
  Congressional hearing on the state of cybersecurity threats facing the United States and the urgent need for improved defenses.
- 2012-03-13: Patent: Network Vulnerability Detection and Reporting (Continuation II) (U.S. patent · Scan) https://patentimages.storage.googleapis.com/67/05/e9/ab1f27de690850/US8135830.pdf
  Second major US grant (2012) in the Foundstone/McAfee network vulnerability family. Adds TCP fingerprinting, parallel batch port scanning (640 simultaneous slots), and intelligent UDP scanning with latency detection.
- 2006-12-19: Patent: System and Method for Network Vulnerability Detection and Reporting (U.S. patent · Scan) https://patentimages.storage.googleapis.com/f6/90/3d/4e3fe6df8719c4/US7152105.pdf
  Stuart's foundational 2002 patent from Foundstone — the original framework for automated network vulnerability scanning, OS fingerprinting, and quantitative security scoring. First US grant 2006 (US7152105B2); five US continuations granted through 2013. Later assigned to McAfee following acquisition.
- undated: IMDb — Stuart McClure (IMDb · Press) https://www.imdb.com/name/nm13245399/
  Stuart McClure's official IMDb profile and acting credits.