Schneier on Security
- Posts
- 9,551 from 1 Oct 2004 to 28 Oct 2026
- Posting
- about daily (343 in the last year)
- Kind
- personal blog
- Feed
- https://www.schneier.com/feed/
Latest
October 2026
- Studying Fraudulent North Korean IT Workers
- Hiding Capabilities in AI Models
- Bias in Qwen3-Coder Model
- Friday Squid Blogging: Increasing Squid Populations
- Compromised TLS Certificates
- New Serious PHP Vulnerabilities Released and Patched
- Workshop on Economics and Information Security (WEIS) Archive
- Possible new Cellebrite iPhone Radio Zero-Day
- Training AIs to Solve CAPTCHAs
- Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
- Backdooring Open-Weight AI Models
- Measuring Human Cryptanalysis Effort
- Upcoming Speaking Engagements
- The Future of AI Cryptanalysis
- Cyberattack on Connected Fridges in France
- FBI Arrests Suspect in FBI-Hacking Case
- Friday Squid Blogging: I Caught a Squid
- How Technology Empowers—and Imperils—Dictators
- Apple’s Verified Photography System
- Possible Vulnerability in Apple’s Automatic Reboot
- Another Historic Cipher Falls to AI
- Friday Squid Blogging: EU is Trying to Fight Unregulated Squid Fishing
- Unidentified Flock Cameras in Florida
- How American Political Campaigns Are Using AI—and What They’re Spending on the Tools
- Connected Cars Are a Surveillance Platform
September 2026
- I Want Better Reporting on AI Genie Behavior
- Using Device Linking to Eavesdrop on WhatsApp and Signal
- New Attack Against RSA
- Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee
- On Anthropic’s AI Misuse Report
- Malicious npm Packages That Evade Defenses
- Research on Models Engaging in Genie-Like Behavior
- GPT-6 Astra Breaks an Old Enigma Message
- Reverse-Engineering Flock Cameras
- Friday Squid Blogging: On Squid Egg Sacs
- Are AIs Still Struggling with CAPTCHAs?
- How Candidates Could Use AI for Good
- Fake CAPTCHA Scams
- 25 Years of Mass Surveillance Is Enough
- On the NSA’s Supercomputer from the 1960s
- Upcoming Speaking Engagements
- Using AI for Weapons Development
- Microsoft’s Patching
- Friday Squid Blogging: Rotting Squid on a Beached California Boat
- My Talk at DEF CON
- Cliff Stoll’s DEF CON Talk
- AIs Compress Exploit Timeline
- Driver’s License Data for Sale
- Claude Fable Solves a Historical Cipher
- AIs as Modern Genies
- Stealing AI Reasoning Traces
- Automobile Camouflage to Hide from Flock Cameras
- Friday Squid Blogging: Squid on a Stick at the New York State Fair
- Using a VM to Contain an AI Agent
- Security Vulnerability in a Voting System
- AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks
- Researching Employment Scams
- AI Agents Are Now Emailing Me with Their Security Concerns
- Wireless Routers as Motion Detectors
- What’s the Scam?
- Leaked Russian Cyber-Operations Training Materials
- Rewiring Democracy Series on The Renovator
August 2026
- Is Someone Hacking DoD Refrigerators?
- Hiding Prompt Injection in Legal Filing
- Friday Squid Blogging: Truckload of Squid Spills in Rhode Island
- AI Doesn’t Mean the End of Mathematics—at Least Not Yet
- LLM-Based Social Engineering Scams
- Spyware for Babies
- Black Hat State of Security Vendors
- Criminal Deception in Silicon Valley
- Friday Squid Blogging: Neon Flying Squid
- AI Is Learning to Write Genetic Code
- More Incidents of AIs Going Rogue in Cybersecurity Challenges
- Detailed Timeline of OpenAI’s Cyberattack on Hugging Face
- Police Are Hiding Their Use of Flock Surveillance Cameras
- ICE Collecting DNA Samples
- LLMs and Contextual Integrity
- Hacking Public Wi-Fi DNS to Steal Credentials
- Friday Squid Blogging: Searching for the Colossal Squid
- Upcoming Speaking Engagements
- If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them
- Separating AI’s Technological Problems from Its Capitalism Problems
- Prompt Injections for Defense
- AI Genie in the Wild
- AI for Military Support
- Python Now Has a Post-Quantum Encryption Library
- Friday Squid Blogging: Arctic Bobtail Squid Video
- ICE Is Buying Access to Credit Card Records
- Adversarial Clothing Designed to Fool Facial Recognition Systems
- Vulnerabilities in Car Anti-Theft Device
- Iran Cyberattacks Against Minnesota Water Systems
- Some Claude Chats Are Searchable on Google
- More on the OpenAI Agent’s Attack on Hugging Face
- The OpenAI Hack Shows the Genie Is Out of the Bottle
July 2026
- Friday Squid Blogging: Squid Helps Discover New Marine Species
- Anthropic’s Opus 5 Is Better at Resisting Prompt Injection
- Facial Recognition at Madison Square Garden
- American Being Prosecuted for Wiping His Phone Before Handing It Over to Border Officials
- Should You Use AI for a Task? Here’s a Simple Way to Decide
- Measuring the Tendency of AI Agents to Go Rogue
- Long-Lived Vulnerability in Microsoft Secure Boot
- Measuring LLMs’ Ability to Perform Cryptanalysis
- Axon Is Another License Plate Surveillance Company
- Cognyte Sells a Mobile Cell Surveillance Van
- Friday Squid Blogging: Illex Squid Catch in the Falklands
- Why AI Needs a “Genie Coefficient”
- End-to-End Encryption and “Going Dark”
- First-Person Identity Theft Story
- MIT to Become Hotbed of AI Video Surveillance
- On Flock License Plate Tracking Cameras
- Friday Squid Blogging: Squid Washing Up on Cape Cod Beach
- Details of Alan Turing’s Voice Encryption System
- Protecting Privacy in an AI Era
- A Video Screen That Is Also a Camera
- Upcoming Speaking Engagements
- Vulnerability in FIFA’s Network
- AI Data Centers and the Concentration of Wealth
- Friday Squid Blogging: “Squidbleed” Vulnerability
- AI Surveillance and Social Progress
- The Language of AI Could Change How Humans Speak
- Cybersecurity and the Gap Between Skill and Ability
- Google Is Suing Chinese Scammers Who Are Using Gemini
- France to Stop Certifying Non-Quantum-Safe Encryption
- Flock Cameras Can Surveil Cars Without License Plates
- Cybersecurity Mission Creep in the US
- Papa Johns Surveillance-Based Advertising
June 2026
- The Realities of AI Video Surveillance
- Factoring RSA Keys with Many Zeros
- Robot Police Officers
- Friday Squid Blogging: The Chinese Control the Majority of Argentina’s Squid Fleet
- Meta Is Testing Facial Recognition for Police and Military
- One Million Passports Leaked Online
- AI and Liability
- Interesting Paper Exploring Prompt Injection
- Embedding Forbidden Text in Spyware to Discourage AI Analysis
- Anthropic’s Fable 5 Model Jailbroken Within Days
- Professional Athletes and Wearables
- Friday Squid Blogging: Victims of Unregulated Squid Fishing
- Anthropic’s Fable and the State of AI
- Embedding Forbidden Text in Spyware to Discourage AI Analysis
- AI Use by the US Government
- Flock Cameras Are Being Used for Stalking
- The FCC Wants to Eliminate Burner Phones
- Upcoming Speaking Engagements
- Friday Squid Blogging: Squid-Inspired Fluid Pump
- Bernie Sanders’ AI Sovereign Wealth Fund Plan
- Enhanced License Plate Tracking
- NSO Group Hacking WhatsApp Despite Court Order
- GPS As a Key Distribution Platform
- Critical Zcash Vulnerability Found and Fixed
Every year
2026 2922025 3072024 3182023 3082022 2962021 2992020 3242019 3472018 3512017 3732016 4342015 4532014 4532013 4942012 4512011 4472010 5152009 5382008 6272007 6862006 6352005 5352004 68