Remote

Schneier on Security RSS

@Schneier_rss@burn.capital

mastodon 4.3.9

Automated toots from the Schneier on Security RSS feed. This account is not affiliated with Bruce Schneier.

2270 Followers

0 Following

50 Posts

Joined December 14, 2020

Bruce Schneier:

https://www.schneier.com/

avatar image by:

Joe MacInnis

https://gitlab.com/chaica/feed2toot/

Schneier on Security RSS @Schneier_rss@burn.capital

· 3w ago

25 Years of Mass Surveillance Is Enough This essay was written with Cindy Cohn, and originally appeared in Lawfare. One of the many legacies of the terrorist attacks of Sept. 11 is... https://www.schneier.com/blog/archives/2026/09/25-years-of-mass-surveillance-is-enough.html #Uncategorized #surveillance #privacy

Schneier on Security

25 Years of Mass Surveillance Is Enough - Schneier on Security

This essay was written with Cindy Cohn, and originally appeared in Lawfare. One of the many legacies of the terrorist attacks of Sept. 11 is the government-wide shift from targeted surveillance—such as individual wiretaps or pen register/trap and trace orders—to mass surveillance techniques—such as tapping into the internet backbone or mass collection of telephone or internet metadata. The legal and technical architecture of modern mass surveillance, initially framed as a neces

Schneier on Security RSS @Schneier_rss@burn.capital

· 2mo ago

Separating AI’s Technological Problems from Its Capitalism Problems

This essay was written with Nathan E. Sanders, and originally appeared in Tech Policy Press.
AI represents the first tim... https://www.schneier.com/blog/archives/2026/08/separating-ais-technological-problems-from-its-capitalism-problems.html

#Uncategorized #LLM #AI

Schneier on Security

Separating AI's Technological Problems from Its Capitalism Problems - Schneier on Security

This essay was written with Nathan E. Sanders, and originally appeared in Tech Policy Press. AI represents the first time we humans can do cognitive work outside of our bodies at scale. The only comparable moment is the early years of the industrial revolution, when new technologies like the steam engine provided a quantum leap in our ability to do mechanical work outside of our bodies at scale. If AI’s cognitive capabilities become integrated into our lives, businesses, and governments—a proces

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

Hacking Public Wi-Fi DNS to Steal Credentials

Criminals are hacking into public Wi-Fi devices—at hotels, conference centers, and so on—around the world and ... https://www.schneier.com/blog/archives/2026/08/hacking-public-wi-fi-dns-to-steal-credentials.html

#Uncategorized #credentials #phishing #hacking #theft #DNS

Schneier on Security

Hacking Public Wi-Fi DNS to Steal Credentials - Schneier on Security

Criminals are hacking into public Wi-Fi devices—at hotels, conference centers, and so on—around the world and changing their DNS settings. The goal is to redirect users to fake login pages and steal their credentials.

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

Criminal Deception in Silicon Valley

Interesting paper:
Abstract: With entrepreneurial fraud cases on the rise, we investigate how entrepreneurs carry out criminal deception... https://www.schneier.com/blog/archives/2026/08/criminal-deception-in-silicon-valley.html

#academicpapers #Uncategorized #deception #crime

Schneier on Security

Criminal Deception in Silicon Valley - Schneier on Security

Interesting paper: Abstract: With entrepreneurial fraud cases on the rise, we investigate how entrepreneurs carry out criminal deception, employing deceptive means to defraud audiences. Analyzing court data from Silicon Valley ventures and their founders prosecuted for fraud between 2000 and 2023, our findings reveal that entrepreneurs carry out criminal deception through a process of façading: Entrepreneurs construct, perform, and protect illusory appearances (façades) that externally project h

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

More Incidents of AIs Going Rogue in Cybersecurity Challenges

The AI Security Institute has a new report of AI systems engaging in “unsanctioned behavior”—what I have been calling &#... https://www.schneier.com/blog/archives/2026/08/more-incidents-of-ais-going-rogue-in-cybersecurity-challenges.html

#Uncategorized #cybersecurity #loopholes #AI

Schneier on Security

More Incidents of AIs Going Rogue in Cybersecurity Challenges - Schneier on Security

The AI Security Institute has a new report of AI systems engaging in “unsanctioned behavior”—what I have been calling “genie behavior—while being tested on their cybersecurity capabilities. The incident stemmed from a single evaluation where agents were given a task of solving a cyber security challenge. We ran this challenge 122 times across several models. Our investigation found that in 10 of those runs, an AI agent took autonomous, unsanctioned action on the live internet, targeting real peo

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

ICE Collecting DNA Samples

ICE collected nearly a million DNA samples last year.... https://www.schneier.com/blog/archives/2026/08/ice-collecting-dna-samples.html

#nationalsecuritypolicy #homelandsecurity #identification #Uncategorized #databases #DNA #FBI

Schneier on Security

ICE Collecting DNA Samples - Schneier on Security

ICE collected nearly a million DNA samples last year.

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

Spyware for Babies

The New York Times has a long article (alt link) on surveillance systems aimed at babies. They are increas... https://www.schneier.com/blog/archives/2026/08/spyware-for-babies.html

#Uncategorized #surveillance #healthcare #children #privacy #spyware #AI

Schneier on Security

Spyware for Babies - Schneier on Security

The New York Times has a long article (alt link) on surveillance systems aimed at babies. They are increasingly using AI. Nanit and its rivals want to own 24/7 health tracking for the sub-four-foot set. And their already astonishing levels of baby data collection are just the beginning. Nanit recently raised $50 million from investors to expand its use of A.I. and use its camera to track speech and language development, motor skills and more, while extending its presence in children’s bedrooms i

Schneier on Security RSS @Schneier_rss@burn.capital

· 2mo ago

AI Genie in the Wild

When I give talks about AI genies, I use this sort of example as a hypothetical. It’s ... https://www.schneier.com/blog/archives/2026/08/ai-genie-in-the-wild.html

#vulnerabilities #Uncategorized #exploits #AI

Schneier on Security

AI Genie in the Wild - Schneier on Security

When I give talks about AI genies, I use this sort of example as a hypothetical. It’s happened. The story is from Australia. Someone named Andrew tasked OpenClaw to book gym classes for him. And…. Minutes later, his AI agent reported it had discovered a way to book Andrew into classes several weeks in advance, far beyond what was supposed to be possible. Andrew, who was sitting fourth on a waitlist for a class later that week, asked if it was possible to move him to the top of the list. The agen

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

AI Doesn’t Mean the End of Mathematics—at Least Not Yet

This essay was written with Kasra Rafi, and originally appeared in The Guardian.
Earlier this month, about 40 top mathematicians

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

Detailed Timeline of OpenAI’s Cyberattack on Hugging Face

OpenAI presented details of its AI’s model’s cyberattack on Hugging Face at Black Hat last week. Simon Willison

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

Police Are Hiding Their Use of Flock Surveillance Cameras

A usage policy for Flock license plate reader cameras tells police not to talk about the cameras:
When cops use ... https://www.schneier.com/blog/archives/2026/08/police-are-hiding-their-use-of-flock-surveillance-cameras.html

#lawenforcement #Uncategorized #police #cars

Schneier on Security

Police Are Hiding Their Use of Flock Surveillance Cameras - Schneier on Security

A usage policy for Flock license plate reader cameras tells police not to talk about the cameras: When cops use Flock to arrest someone in Wapello County, Iowa, they don’t want them to know. A usage policy for the automated license plate reader cameras in the county tells police, in no uncertain terms, to keep them a secret: “DO NOT MENTION ALPR USAGE TO THE OCCUPANTS OF THE VEHICLE,” the policy document reads. “DO NOT MENTION ALPR USAGE IN YOUR REPORT OR COMPLAINT UNLESS ABSOLUTELY NECESSARY.”

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

LLMs and Contextual Integrity

#academicpapers #Uncategorized #integrity #LLM #AI

Schneier on Security

LLMs and Contextual Integrity - Schneier on Security

I have been thinking a lot about AI and integrity. Part of that is contextual integrity. I recently found two papers on the topic. “CIMemories: A Compositional Benchmark for Contextual Integrity of Persistent Memory in LLMs“: Abstract: Large Language Models (LLMs) increasingly use persistent memory from past interactions to enhance personalization and task performance. However, this memory introduces critical risks when sensitive information is revealed in inappropriate contexts. We present CIMe

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

Friday Squid Blogging: Searching for the Colossal Squid

Fascinating video about searching for life undersea. The video basically makes the point that our bright white searchlights are scaring everything away, and that red light is more neutral. ... https://www.schneier.com/blog/archives/2026/08/friday-squid-blogging-searching-for-the-colossal-squid-2.html

#Uncategorized #squid #video

Schneier on Security

Friday Squid Blogging: Searching for the Colossal Squid - Schneier on Security

Fascinating video about searching for life undersea. The video basically makes the point that our bright white searchlights are scaring everything away, and that red light is more neutral. That, plus bait to attract sea creatures, is teaching us a lot about what’s going on down there. Lots of footage of giant squid, and speculation about the colossal squid. Worth watching. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moder

Schneier on Security RSS @Schneier_rss@burn.capital

· 2mo ago

A Video Screen That Is Also a Camera Amazing: Researchers from ETH Zurich in Switzerland, however, managed to create a new type of pixel that can simultaneously do bot... https://www.schneier.com/blog/archives/2026/07/a-video-screen-that-is-also-a-camera.html #academicpapers #Uncategorized #cameras #videos

Schneier on Security

A Video Screen That Is Also a Camera - Schneier on Security

Amazing: Researchers from ETH Zurich in Switzerland, however, managed to create a new type of pixel that can simultaneously do both. This hypercharged pixel, called a Fourier pixel, can generate and sense arbitrary light fields and tap into a pixel’s full potential for carrying information by manipulating light’s intensity, oscillation phases, and polarization. The team reported its findings in a paper published yesterday in Nature. We are one step closer to 1984 technology: The telescreen recei

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

How Dangerous Is Anthropic’s Mythos AI?

#vulnerabilities #Uncategorized #regulation #patching #hacking #laws #LLM #AI

Schneier on Security

How Dangerous Is Anthropic's Mythos AI? - Schneier on Security

Last month, Anthropic made a remarkable announcement about its new model, Claude Mythos Preview: it was so good at finding security vulnerabilities in software that the company would not release it to the general public. Instead, it would only be available to a select group of companies to scan and fix their own software. The announcement requires context—but it contained an essential truth. While Anthropic’s model is really good at finding software vulnerabilities, so are other models. The UK’s

Schneier on Security RSS @Schneier_rss@burn.capital

· 2mo ago

Measuring LLMs’ Ability to Perform Cryptanalysis There’s new benchmark measuring AI’s ability to perform mathematical cryptanalysis. Anthropic’s frontier model actually found new attacks. The benchmark: “CryptanalysisBench... https://www.schneier.com/blog/archives/2026/07/measuring-llms-ability-to-perform-cryptanalysis.html #academicpapers #Uncategorized #cryptanalysis #cybersecurity #LLM #AI

Schneier on Security

Measuring LLMs' Ability to Perform Cryptanalysis - Schneier on Security

There’s new benchmark measuring AI’s ability to perform mathematical cryptanalysis. Anthropic’s frontier model actually found new attacks. The benchmark: “CryptanalysisBench: Can LLMs do Cryptanalysis?” The idea is to benchmark the ability of LLMs to discover new mathematical cryptanalytic attacks against a series of historical algorithms. Abstract: Cryptanalysis—the task of finding attacks against cryptographic schemes—its at the intersection of mathematical reasoning and cybersecurity, two are

Schneier on Security RSS @Schneier_rss@burn.capital

· 2mo ago

Why AI Needs a “Genie Coefficient” This essay was written with Barath Raghavan, and originally appeared in The Guardian. Major benchmarks measure what AI can do. None measure whether it does what you mean: t... https://www.schneier.com/blog/archives/2026/07/why-ai-needs-a-genie-coefficient.html #Uncategorized #LLM #AI

Schneier on Security

Why AI Needs a “Genie Coefficient” - Schneier on Security

This essay was written with Barath Raghavan, and originally appeared in IEEE Spectrum. Major benchmarks measure what AI can do. None measure whether it does what you mean: the distance between what you ask an AI to do and the unspoken assumptions about how you want the AI to do it. We propose a new metric: the Genie coefficient. There’s often a gap between one person’s request and another’s understanding. Most of the time, we bridge it using general knowledge. For example, if you ask a friend to

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

LLMs and Text-in-Text Steganography

Turns out that LLMs are really good at hiding text messages in other text messages.... https://www.schneier.com/blog/archives/2026/05/llms-and-text-in-text-steganography.html

#academicpapers #Uncategorized #steganography #LLM

Schneier on Security

LLMs and Text-in-Text Steganography - Schneier on Security

Turns out that LLMs are really good at hiding text messages in other text messages.

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

ICE Uses Graphite Spyware

ICE has admitted that it uses spyware from the Israeli company Graphite.... https://www.schneier.com/blog/archives/2026/04/ice-uses-graphite-spyware.html

#homelandsecurity #Uncategorized #surveillance #privacy #spyware #Israel

Schneier on Security

ICE Uses Graphite Spyware - Schneier on Security

ICE has admitted that it uses spyware from the Israeli company Graphite.

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Hacking Polymarket

#assassinations #Uncategorized #cheating #gambling #insiders #hacking

Schneier on Security

Hacking Polymarket - Schneier on Security

Polymarket is a platform where people can bet on real-world events, political and otherwise. Leaving the ethical considerations of this aside (for one, it facilitates assassination), one of the issues with making this work is the verification of these real-world events. Polymarket gamblers have threatened a journalist because his story was being used to verify an event. And now, gamblers are taking hair dryers to weather sensors to rig weather bets. There’s also insider trading: a lot of it.

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Friday Squid Blogging: How Squid Survived Extinction Events

Science news:
Scientists have finally cracked a long-standing mystery about squid and cuttlefish evolution by analyzing newly sequenced genomes alongsi... https://www.schneier.com/blog/archives/2026/04/friday-squid-blogging-how-squid-survived-extinction-events.html

#Uncategorized #squid

Schneier on Security

Friday Squid Blogging: How Squid Survived Extinction Events - Schneier on Security

Science news: Scientists have finally cracked a long-standing mystery about squid and cuttlefish evolution by analyzing newly sequenced genomes alongside global datasets. The research reveals that these bizarre, intelligent creatures likely originated deep in the ocean over 100 million years ago, surviving mass extinction events by retreating into oxygen-rich deep-sea refuges. For millions of years, their evolution barely changed—until a dramatic post-extinction boom sparked rapid diversificatio

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Is “Satoshi Nakamoto” Really Adam Back?

The New York Times has a long article where the author lays out an impressive array of circumstantial evidence that the inventor of B... https://www.schneier.com/blog/archives/2026/04/is-satoshi-nakamoto-really-adam-back.html

#cryptocurrency #Uncategorized #pseudonymity #bitcoin

Schneier on Security

Is "Satoshi Nakamoto" Really Adam Back? - Schneier on Security

The New York Times has a long article where the author lays out an impressive array of circumstantial evidence that the inventor of Bitcoin is the cypherpunk Adam Back. I don’t know. The article is convincing, but it’s written to be convincing. I can’t remember if I ever met Adam. I was a member of the Cypherpunks mailing list for a while, but I was never really an active participant. I spent more time on the Usenet newsgroup sci.crypt. I knew a bunch of the Cypherpunks, though, from various con

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Friday Squid Blogging: Giant Squid Live in the Waters of Western Australia

Evidence of them has been found by a... https://www.schneier.com/blog/archives/2026/05/friday-squid-blogging-giant-squid-live-in-the-waters-of-western-australia.html

#Uncategorized #squid

Schneier on Security

Friday Squid Blogging: Giant Squid Live in the Waters of Western Australia - Schneier on Security

Evidence of them has been found by analyzing DNA in the seawater. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Insider Betting on Polymarket

Insider trading is rife on Polymarket:
Analysis by the Anti-Corruption Data Collective, a non-profit research ... https://www.schneier.com/blog/archives/2026/05/insider-betting-on-polymarket.html

#Uncategorized #gambling #insiders

Schneier on Security

Insider Betting on Polymarket - Schneier on Security

Insider trading is rife on Polymarket: Analysis by the Anti-Corruption Data Collective, a non-profit research and advocacy group, found that long-shot bets—defined as wagers of $2,500 or more at odds of 35 percent or less—on the platform had an average win rate of around 52 percent in markets on military and defense actions. That compares with a win rate of 25 percent across all politics-focused markets and just 14 percent for all markets on the platform as a whole. It is absolutely insane tha

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Rowhammer Attack Against NVIDIA Chips

A new rowhammer attack gives complete control of NVIDIA CPUs... https://www.schneier.com/blog/archives/2026/05/rowhammer-attack-against-nvidia-chips.html

#academicpapers #Uncategorized #cyberattack #hardware #hacking

Schneier on Security

Rowhammer Attack Against NVIDIA Chips - Schneier on Security

A new rowhammer attack gives complete control of NVIDIA CPUs. On Thursday, two research teams, working independently of each other, demonstrated attacks against two cards from Nvidia’s Ampere generation that take GPU rowhammering into new—and potentially much more consequential—territory: GDDR bitflips that give adversaries full control of CPU memory, resulting in full system compromise of the host machine. For the attack to work, IOMMU memory management must be disabled, as is the default in

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

A Ransomware Negotiator Was Working for a Ransomware Gang

Someone pleaded guilty to secretly working for a ransomware gang as he negotiated ransomware payments for clients.... https://www.schneier.com/blog/archives/2026/05/a-ransomware-negotiator-was-working-for-a-ransomware-gang.html

#Uncategorized #cybercrime #ransomware

Schneier on Security

A Ransomware Negotiator Was Working for a Ransomware Gang - Schneier on Security

Someone pleaded guilty to secretly working for a ransomware gang as he negotiated ransomware payments for clients.

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Claude Mythos Has Found 271 Zero-Days in Firefox

That’s a lot. No, it’s an extraordinary number:
Since February, the Firefox team has been working around the clock using frontie... https://www.schneier.com/blog/archives/2026/04/claude-mythos-has-found-271-zero-days-in-firefox.html

#Uncategorized #zero-day #Firefox #AI

Schneier on Security

Claude Mythos Has Found 271 Zero-Days in Firefox - Schneier on Security

That’s a lot. No, it’s an extraordinary number: Since February, the Firefox team has been working around the clock using frontier AI models to find and fix latent security vulnerabilities in the browser. We wrote previously about our collaboration with Anthropic to scan Firefox with Opus 4.6, which led to fixes for 22 security-sensitive bugs in Firefox 148. As part of our continued collaboration with Anthropic, we had the opportunity to apply an early version of Claude Mythos Preview

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

What Anthropic’s Mythos Means for the Future of Cybersecurity

Two weeks ago, Anthropic announced that its new model, Claude Mythos Preview, can autonomously find and weaponize software vulnerabilities, turning them into working exploits without exp... https://www.schneier.com/blog/archives/2026/04/what-anthropics-mythos-means-for-the-future-of-cybersecurity.html

#vulnerabilities #Uncategorized #cybersecurity #patching #LLM #AI

Schneier on Security

What Anthropic’s Mythos Means for the Future of Cybersecurity - Schneier on Security

Two weeks ago, Anthropic announced that its new model, Claude Mythos Preview, can autonomously find and weaponize software vulnerabilities, turning them into working exploits without expert guidance. These were vulnerabilities in key software like operating systems and internet infrastructure that thousands of software developers working on those systems failed to find. This capability will have major security implications, compromising the devices and services we use every day. As a result, Ant

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Medieval Encrypted Letter Decoded

Sent by a Spanish diplomat. Apparently people have been working on it since it was rediscovered in 1860.... https://www.schneier.com/blog/archives/2026/04/medieval-encrypted-letter-decoded.html

#historyofcryptography #Uncategorized

Schneier on Security

Medieval Encrypted Letter Decoded - Schneier on Security

Sent by a Spanish diplomat. Apparently people have been working on it since it was rediscovered in 1860.

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Friday Squid Blogging: New Giant Squid Video

Pretty fantastic video from Japan of a giant squid eating another squid.
As usual, you can also use this squid post to talk about the security stories in the news tha... https://www.schneier.com/blog/archives/2026/04/friday-squid-blogging-new-giant-squid-video-2.html

#Uncategorized #squid #video

Schneier on Security

Friday Squid Blogging: New Giant Squid Video - Schneier on Security

Pretty fantastic video from Japan of a giant squid eating another squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Mythos and Cybersecurity

Last week, Anthropic pulled back the curtain on Claude Mythos Preview, an AI model so capable at finding and exploiting software vulnerabilities that the company

Schneier on Security RSS @Schneier_rss@burn.capital

· 6mo ago

Inventors of Quantum Cryptography Win Turing Award

Charles Bennett and Gilles Brassard have won the 2026 Turing Award for inventing quantum cryptography.
I am incredibly pleased to see... https://www.schneier.com/blog/archives/2026/03/inventors-of-quantum-cryptography-win-turing-award.html

#historyofcryptography #quantumcryptography #quantumcomputing #Uncategorized

Schneier on Security

Inventors of Quantum Cryptography Win Turing Award - Schneier on Security

Charles Bennett and Gilles Brassard have won the 2026 Turing Award for inventing quantum cryptography. I am incredibly pleased to see them get this recognition. I have always thought the technology to be fantastic, even though I think it’s largely unnecessary. I wrote up my thoughts back in 2008, in an essay titled “Quantum Cryptography: As Awesome As It Is Pointless.” Back then, I wrote: While I like the science of quantum cryptography—my undergraduate degree was in physics—I don’t see any comm

Schneier on Security RSS @Schneier_rss@burn.capital

· 6mo ago

Apple’s Camera Indicator Lights

A thoughtful review of Apple’s system to alert users that the camera is on. It’s really well-designed, and important in a world where malware could su... https://www.schneier.com/blog/archives/2026/03/apples-camera-indicator-lights.html

#Uncategorized #cameras #malware #Apple

Schneier on Security

Apple's Camera Indicator Lights - Schneier on Security

A thoughtful review of Apple’s system to alert users that the camera is on. It’s really well-designed, and important in a world where malware could surreptitiously start recording. The reason it’s tempting to think that a dedicated camera indicator light is more secure than an on-display indicator is the fact that hardware is generally more secure than software, because it’s harder to tamper with. With hardware, a dedicated hardware indicator light can be connected to the camera hardware such th

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

FBI Extracts Deleted Signal Messages from iPhone Notification Database

404 Media reports (alternate site):
The FBI was able to forensic... https://www.schneier.com/blog/archives/2026/04/fbi-extracts-deleted-signal-messages-from-iphone-notification-database.html

#Uncategorized #databases #terrorism #iPhone #FBI

Schneier on Security

FBI Extracts Deleted Signal Messages from iPhone Notification Database - Schneier on Security

404 Media reports (alternate site): The FBI was able to forensically extract copies of incoming Signal messages from a defendant’s iPhone, even after the app was deleted, because copies of the content were saved in the device’s push notification database…. The news shows how forensic extraction—when someone has physical access to a device and is able to run specialized software on it—can yield sensitive data derived from secure messaging apps in unexpected places. Signal already has a setting

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

Friday Squid Blogging: Neon Flying Squid

The neon flying squid can fly in formation.
The shoal of about 100 squid ro... https://www.schneier.com/blog/archives/2026/08/friday-squid-blogging-neon-flying-squid.html

#Uncategorized #squid

Schneier on Security

Friday Squid Blogging: Neon Flying Squid - Schneier on Security

The neon flying squid can fly in formation. The shoal of about 100 squid rose unexpectedly from a patch of the Pacific Ocean around 370 miles from Tokyo and glided near the boat for about 30 metres. The astonished researchers were the first to capture photographs of such a thing, which looked like the early stages of an alien invasion. They were probably neon flying squid (Ommastrephes bartramii), the subsequent study states, a species that is part of a 20-strong flying squid family that was kno

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

Friday Squid Blogging: Truckload of Squid Spills in Rhode Island

Ugh:
A tractor-trailer rollover sent a truckload of squid spilling into a Rhode Island roadway, leaving a stench as they sat... https://www.schneier.com/blog/archives/2026/08/friday-squid-blogging-truckload-of-squid-spills-in-rhode-island.html

#Uncategorized #squid

Schneier on Security

Friday Squid Blogging: Truckload of Squid Spills in Rhode Island - Schneier on Security

Ugh: A tractor-trailer rollover sent a truckload of squid spilling into a Rhode Island roadway, leaving a stench as they sat in the road for hours in the summer heat. Local authorities have dubbed it the “Squidpocalypse of ’26.” That would be twenty tons of squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Hiding Bluetooth Trackers in Mail

It was used to track a D... https://www.schneier.com/blog/archives/2026/04/hiding-bluetooth-trackers-in-mail.html

#Uncategorized #Bluetooth #tracking

Schneier on Security

Hiding Bluetooth Trackers in Mail - Schneier on Security

It was used to track a Dutch naval ship: Dutch journalist Just Vervaart, working for regional media network Omroep Gelderland, followed the directions posted on the Dutch government website and mailed a postcard with a hidden tracker inside. Because of this, they were able to track the ship for about a day, watching it sail from Heraklion, Crete, before it turned towards Cyprus. While it only showed the location of that one vessel, knowing that it was part of a carrier strike group sailing in th

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Smart Glasses for the Authorities

ICE is developing its own version of smart glasses, with facial recognition tied to various databases.... https://www.schneier.com/blog/archives/2026/05/smart-glasses-for-the-authorities.html

#facerecognition #Uncategorized #biometrics #DHS

Schneier on Security

Smart Glasses for the Authorities - Schneier on Security

ICE is developing its own version of smart glasses, with facial recognition tied to various databases.

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

LLM-Based Social Engineering Scams

OpenAI disrupted a social engineering group from Cambodia that used ChatGPT. Its scope is impressive:
The network simultaneously con... https://www.schneier.com/blog/archives/2026/08/llm-based-social-engineering-scams.html

#socialengineering #Uncategorized #crime #scams #LLM #AI

Schneier on Security

LLM-Based Social Engineering Scams - Schneier on Security

OpenAI disrupted a social engineering group from Cambodia that used ChatGPT. Its scope is impressive: The network simultaneously conducted multiple types of scams, often blending elements from different schemes. For instance, operators used dating personas to build trust before introducing fraudulent investment opportunities involving cryptocurrencies and spot gold trading. Other users engaged in lengthy romantic conversations with targets using fictitious identities, posed as representatives of

Schneier on Security RSS @Schneier_rss@burn.capital

· 6mo ago

Is “Hackback” Official US Cybersecurity Strategy?

The 2026 US “Cyber Strategy for America” document is mostly the same thing we’ve seen out of the White House for ... https://www.schneier.com/blog/archives/2026/04/is-hackback-official-us-cybersecurity-strategy.html

#nationalsecuritypolicy #Uncategorized #cybersecurity #hackback #hacking

Schneier on Security

Is "Hackback" Official US Cybersecurity Strategy? - Schneier on Security

The 2026 US “Cyber Strategy for America” document is mostly the same thing we’ve seen out of the White House for over a decade, but with a more aggressive tone. But one sentence stood out: “We will unleash the private sector by creating incentives to identify and disrupt adversary networks and scale our national capabilities.” This sounds like a call for hackback: giving private companies permission to conduct offensive cyber operations. The Economist noticed (alternate link) this, too. I think

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Fast16 Malware

Researchers have reverse-engineered a piece of malware named Fast16. It’s almost certainly state-sponsored, probably US in origin, and was

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

DarkSword Malware

DarkSword is a sophisticated piece of malware—probably government designed—that targets iOS.
Google Threat Intelligen... https://www.schneier.com/blog/archives/2026/05/darksword-malware.html

#vulnerabilities #Uncategorized #cybercrime #exploits #zero-day #malware #Apple #iOS

Schneier on Security

DarkSword Malware - Schneier on Security

DarkSword is a sophisticated piece of malware—probably government designed—that targets iOS. Google Threat Intelligence Group (GTIG) has identified a new iOS full-chain exploit that leveraged multiple zero-day vulnerabilities to fully compromise devices. Based on toolmarks in recovered payloads, we believe the exploit chain to be called DarkSword. Since at least November 2025, GTIG has observed multiple commercial surveillance vendors and suspected state-sponsored actors utilizing DarkSword in d

Schneier on Security RSS @Schneier_rss@burn.capital

· 2mo ago

Prompt Injections for Defense

This seems to work:
Researchers from Tracebit on Monday

Schneier on Security RSS @Schneier_rss@burn.capital

· 6mo ago

Friday Squid Blogging: Bioluminescent Bacteria in Squid

The Hawaiian bobtail squid has bioluminescent bacteria.... https://www.schneier.com/blog/archives/2026/03/friday-squid-blogging-bioluminescent-bacteria-in-squid.html

#Uncategorized

Schneier on Security

Friday Squid Blogging: Bioluminescent Bacteria in Squid - Schneier on Security

The Hawaiian bobtail squid has bioluminescent bacteria.

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

AI Is Learning to Write Genetic Code

This sort of research is both exciting and terrifying:
The two models in question were told to generate c... https://www.schneier.com/blog/archives/2026/08/ai-is-learning-to-write-genetic-code.html

#Uncategorized #medicine #AI

Schneier on Security

AI Is Learning to Write Genetic Code - Schneier on Security

This sort of research is both exciting and terrifying: The two models in question were told to generate complete genomes for a viable bacteriophage—a type of virus able to infect and replicate itself inside bacteria, destroying them from the inside. Using an existing bacteriophage as an example—ΦX174 (pronounced “fie-ex-1-7-4”), known for its ability to infect and destroy E. coli bacteria—the models generated about 700,000 potential designs, of which the researchers picked 285 that looked most p

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak:

I’m speaking, signing books, and participating in panel discussions at LAcon V in Anaheim, California, USA. My full schedule is

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

Black Hat State of Security Vendors

Andy Ellis has a roundup of the security vendors at Black Hat this year.
Key Takeaways: We have entered into an AI world. While nearly half of b... https://www.schneier.com/blog/archives/2026/08/black-hat-state-of-security-vendors.html

#securityconferences #Uncategorized #conferences #marketing #AI

Schneier on Security

Black Hat State of Security Vendors - Schneier on Security

Andy Ellis has a roundup of the security vendors at Black Hat this year. Key Takeaways: We have entered into an AI world. While nearly half of booths didn’t directly mention AI or agents in their taglines, the effects of AI are everywhere. Multiple spaces (Identity, SaaS, AppSec, Data) have almost every vendor leading with AI; existing unsolved problem areas just got worse. At the same time, there’s a clear trichotomy in the market: tools that tell you how bad things are; tools that stop adversa

Schneier on Security RSS @Schneier_rss@burn.capital

· 6mo ago

A Taxonomy of Cognitive Security

Last week, I listened to a fascinating talk by K. Melton on cognitive security, cognitive hacking, and reality pentesting. The slides from the talk are

Schneier on Security RSS @Schneier_rss@burn.capital

· 5mo ago

Mexican Surveillance Company

Grupo Seguritech is a Mexican surveillance company that is expanding into the US.... https://www.schneier.com/blog/archives/2026/04/mexican-surveillance-company.html

#Uncategorized #surveillance #privacy #Mexico

Schneier on Security

Mexican Surveillance Company - Schneier on Security

Grupo Seguritech is a Mexican surveillance company that is expanding into the US.

Schneier on Security RSS @Schneier_rss@burn.capital

· 1mo ago

If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them

This essay was written with Nathan E. Sanders, and originally appeared in The Guardian.
OpenAI, and then