The Curious Engineer

Schneier on Security

2019–2022

1,266 posts

← 2016–2018 2023–2026 →

2022 296

December 2022

  1. Friday Squid Blogging: Grounded Fishing Boat Carrying 16,000 Pounds of Squid
  2. Recovering Smartphone Voice from the Accelerometer
  3. QR Code Scam
  4. Arresting IT Administrators
  5. LastPass Breach
  6. Friday Squid Blogging: Injured Giant Squid and Paddleboarder
  7. Hacking the JFK Airport Taxi Dispatch System
  8. Critical Microsoft Code-Execution Vulnerability
  9. Ukraine Intercepting Russian Soldiers’ Cell Phone Calls
  10. Trojaned Windows Installer Targets Ukraine
  11. How to Surrender to a Drone
  12. Friday Squid Blogging: Squid in Concert
  13. As Long as We’re on the Subject of CAPTCHAs
  14. Apple Patches iPhone Zero-Day
  15. A Security Vulnerability in the KmsdBot Botnet
  16. Recreating Democracy
  17. Hacking Boston’s CharlieCard
  18. Obligatory ChatGPT Post
  19. Apple Is Finally Encrypting iCloud Backups
  20. Friday Squid Blogging: China Bans Taiwanese Squid Imports
  21. Hacking Trespass Law
  22. Security Vulnerabilities in Eufy Cameras
  23. Leaked Signing Keys Are Being Used to Sign Malware
  24. The Decoupling Principle
  25. CryWiper Data Wiper Targeting Russian Sites
  26. CAPTCHA
  27. Friday Squid Blogging: Legend of the Indiana Oil-Pit Squid
  28. Existential Risk and the Fermi Paradox
  29. LastPass Security Breach
  30. Sirius XM Software Vulnerability

November 2022

  1. Facebook Fined $276M under GDPR
  2. Charles V of Spain Secret Code Cracked
  3. Computer Repair Technicians Are Stealing Your Data
  4. The US Has a Shortage of Bomb-Sniffing Dogs
  5. Apple’s Device Analytics Can Identify iCloud Users
  6. Breaking the Zeppelin Ransomware Encryption Scheme
  7. Friday Squid Blogging: Squid Brains
  8. First Review of A Hacker’s Mind
  9. Successful Hack of Time-Triggered Ethernet
  10. Failures in Twitter’s Two-Factor Authentication System
  11. Russian Software Company Pretending to Be American
  12. Another Event-Related Spyware App
  13. Upcoming Speaking Engagements
  14. A Digital Red Cross
  15. Friday Squid Blogging: Squid Purse
  16. New Book: A Hacker’s Mind
  17. NSA Over-surveillance
  18. An Untrustworthy TLS Certificate in Browsers
  19. Defeating Phishing-Resistant Multifactor Authentication
  20. Using Wi-FI to See through Walls
  21. The Conviction of Uber’s Chief Security Officer
  22. Friday Squid Blogging: Newfoundland Giant Squid Sculpture
  23. NSA on Supply Chain Security
  24. Iran’s Digital Surveillance Tools Leaked

October 2022

  1. Apple Only Commits to Patching Latest OS Version
  2. Friday Squid Blogging: Chinese Squid Fishing
  3. Critical Vulnerability in Open SSL
  4. Australia Increases Fines for Massive Data Breaches
  5. On the Randomness of Automatic Card Shufflers
  6. Friday Squid Blogging: The Reproductive Habits of Giant Squid
  7. Adversarial ML Attack that Secretly Gives a Language Model a Point of View
  8. Interview with Signal’s New President
  9. Museum Security
  10. Qatar Spyware
  11. Hacking Automobile Keyless Entry Systems
  12. Friday Squid Blogging: On Squid Ink
  13. Upcoming Speaking Engagements
  14. Regulating DAOs
  15. Digital License Plates
  16. Recovering Passwords by Measuring Residual Heat
  17. Inserting a Backdoor into a Machine-Learning System
  18. Complex Impersonation Story
  19. Friday Squid Blogging: Emotional Support Squid
  20. Spyware Maker Intellexa Sued by Journalist
  21. October Is Cybersecurity Awareness Month
  22. NSA Employee Charged with Espionage
  23. Detecting Deepfake Audio by Modeling the Human Acoustic Tract

September 2022

  1. Friday Squid Blogging: Breeding the Oval Squid
  2. Security Vulnerabilities in Covert CIA Websites
  3. Differences in App Security/Privacy Based on Country
  4. Cold War Bugging of Soviet Facilities
  5. New Report on IoT Security
  6. Leaking Passwords through the Spellchecker
  7. Friday Squid Blogging: Another Giant Squid Washes Up on New Zealand Beach
  8. Leaking Screen Information on Zoom Calls through Reflections in Eyeglasses
  9. Prompt Injection/Extraction Attacks against AI Systems
  10. Automatic Cheating Detection in Human Racing
  11. Credit Card Fraud That Bypasses 2FA
  12. Large-Scale Collection of Cell Phone Data at US Borders
  13. Friday Squid Blogging: Mayfly Squid
  14. Massive Data Breach at Uber
  15. Relay Attack against Teslas
  16. Upcoming Speaking Engagements
  17. Weird Fallout from Peiter Zatko’s Twitter Whistleblowing
  18. FBI Seizes Stolen Cryptocurrencies
  19. New Linux Cryptomining Malware
  20. Friday Squid Blogging: Colossal Squid in New Zealand Museum
  21. Responsible Disclosure for Cryptocurrency Security
  22. Facebook Has No Idea What Data It Has
  23. The LockBit Ransomware Gang Is Surprisingly Professional
  24. Friday Squid Blogging: Squid Images
  25. Montenegro Is the Victim of a Cyberattack
  26. Clever Phishing Scam Uses Legitimate PayPal Messages

August 2022

  1. High-School Graduation Prank Hack
  2. FTC Sues Data Broker
  3. Levels of Assurance for DoD Microelectronics
  4. Friday Squid Blogging: 14-foot Giant Squid Washes Ashore in Cape Town
  5. Security and Cheap Complexity
  6. Man-in-the-Middle Phishing Attack
  7. Mudge Files Whistleblower Complaint against Twitter
  8. Signal Phone Numbers Exposed in Twilio Hack
  9. Hyundai Uses Example Keys for Encryption System
  10. Friday Squid Blogging: The Language of the Jumbo Flying Squid
  11. USB “Rubber Ducky” Attack Tool
  12. Zoom Exploit on MacOS
  13. Remotely Controlling Touchscreens
  14. $23 Million YouTube Royalties Scam
  15. Upcoming Speaking Engagements
  16. Friday Squid Blogging: SQUID Acronym for Making Conscious Choices
  17. Twitter Exposes Personal Information for 5.4 Million Accounts
  18. A Taxonomy of Access Control
  19. Hacking Starlink
  20. NIST’s Post-Quantum Cryptography Standards
  21. Friday Squid Blogging: New Squid Species
  22. SIKE Broken
  23. Drone Deliveries into Prisons
  24. Surveillance of Your Car
  25. Ring Gives Videos to Police without a Warrant or User Consent

July 2022

  1. Friday Squid Blogging: Evolution of the Vampire Squid
  2. Microsoft Zero-Days Sold and Then Used
  3. New UEFI Rootkit
  4. Securing Open-Source Software
  5. Apple’s Lockdown Mode
  6. Friday Squid Blogging: Bathyteuthis berryi Holding Eggs
  7. Critical Vulnerabilities in GPS Trackers
  8. Russia Creates Malware False-Flag App
  9. NSO Group’s Pegasus Spyware Used against Thailand Pro-Democracy Activists and Leaders
  10. Facebook Is Now Encrypting Links to Prevent URL Stripping
  11. Friday Squid Blogging: Squid Inks Fisherman
  12. San Francisco Police Want Real-Time Access to Private Surveillance Cameras
  13. Upcoming Speaking Engagements
  14. New Browser De-anonymization Technique
  15. Post-Roe Privacy
  16. Security Vulnerabilities in Honda’s Keyless Entry System
  17. Nigerian Prison Break
  18. Friday Squid Blogging: Fishing for Squid
  19. Apple’s Lockdown Mode
  20. Ubiquitous Surveillance by ICE
  21. NIST Announces First Four Quantum-Resistant Cryptographic Algorithms
  22. Friday Squid Blogging: Multiplexing SQUIDs for X-ray Telescopes
  23. Analyzing the Swiss E-Voting System

June 2022

  1. ZuoRAT Malware Is Targeting Routers
  2. Ecuador’s Attempt to Resettle Edward Snowden
  3. When Security Locks You Out of Everything
  4. 2022 Workshop on Economics and Information Security (WEIS)
  5. Friday Squid Blogging: Squid Cubes
  6. On the Dangers of Cryptocurrencies and the Uselessness of Blockchain
  7. On the Subversion of NIST by the NSA
  8. Symbiote Backdoor in Linux
  9. Hidden Anti-Cryptography Provisions in Internet Anti-Trust Bills
  10. Hertzbleed: A New Side-Channel Attack
  11. Friday Squid Blogging: Signature Steamed Giant Squid with Thai Lime Sauce
  12. Tracking People via Bluetooth on Their Phones
  13. Attacking the Performance of Machine Learning Systems
  14. M1 Chip Vulnerability
  15. Upcoming Speaking Engagements
  16. Hacking Tesla’s Remote Key Cards
  17. Cryptanalysis of ENCSecurity’s Encryption Implementation
  18. Friday Squid Blogging: Squid Changes Color from Black to Transparent
  19. Twitter Used Two-Factor Login Details for Ad Targeting
  20. Smartphones and Civilians in Wartime
  21. Leaking Military Secrets on Gaming Discussion Boards
  22. Long Story on the Accused CIA Vault 7 Leaker
  23. Friday Squid Blogging: More on the “Mind Boggling” Squid Genome
  24. Me on Public-Interest Tech
  25. Remotely Controlling Touchscreens
  26. Clever—and Exploitable—Windows Zero-Day

May 2022

  1. The Limits of Cyber Operations in Wartime
  2. Security and Human Behavior (SHB) 2022
  3. Friday Squid Blogging: Squid Bites Diver
  4. Malware-Infested Smart Card Reader
  5. Manipulating Machine-Learning Systems through the Order of the Training Data
  6. The Justice Department Will No Longer Charge Security Researchers with Criminal Hacking
  7. Forging Australian Driver’s Licenses
  8. Friday Squid Blogging: Squid Street Art
  9. The Onion on Google Map Surveillance
  10. Bluetooth Flaw Allows Remote Unlocking of Digital Locks
  11. Websites that Collect Your Data as You Type
  12. iPhone Malware that Operates Even When the Phone Is Turned Off
  13. Attacks on Managed Service Providers Expected to Increase
  14. The NSA Says that There are No Known Flaws in NIST’s Quantum-Resistant Algorithms
  15. Upcoming Speaking Engagements
  16. Friday Squid Blogging: Squidmobile
  17. Surveillance by Driverless Car
  18. ICE Is a Domestic Surveillance Agency
  19. Apple Mail Now Blocks Email Trackers
  20. Friday Squid Blogging: Squid Filmed Changing Color for Camouflage Purposes
  21. Corporate Involvement in International Cybersecurity Treaties
  22. 15.3 Million Request-Per-Second DDoS Attack
  23. New Sophisticated Malware
  24. Using Pupil Reflection in Smartphone Camera Selfies

April 2022

  1. Friday Squid Blogging: Ten-Foot Long Squid Washed onto Japanese Shore—ALIVE
  2. Video Conferencing Apps Sometimes Ignore the Mute Button
  3. Microsoft Issues Report of Russian Cyberattacks against Ukraine
  4. Zero-Day Vulnerabilities Are on the Rise
  5. SMS Phishing Attacks are on the Rise
  6. Friday Squid Blogging: Squid Skin–Inspired Insulating Material
  7. Java Cryptography Implementation Mistake Allows Digital-Signature Forgeries
  8. Long Article on NSO Group
  9. Clever Cryptocurrency Theft
  10. Undetectable Backdoors in Machine-Learning Models
  11. Friday Squid Blogging: Strawberry Squid Video
  12. Upcoming Speaking Engagements
  13. Industrial Control System Malware Discovered
  14. Russian Cyberattack against Ukrainian Power Grid Prevented
  15. John Oliver on Data Brokers
  16. De-anonymizing Bitcoin
  17. Friday Squid Blogging: Do Squid Have Emotions?
  18. AirTags Are Used for Stalking Far More than Previously Reported
  19. US Disrupts Russian Botnet
  20. Cyberweapons Arms Manufacturer FinFisher Shuts Down
  21. Hackers Using Fake Police Data Requests against Tech Companies
  22. Wyze Camera Vulnerability
  23. Friday Squid Blogging: Squid Migration and Climate Change
  24. Bypassing Two-Factor Authentication

March 2022

  1. Chrome Zero-Day from North Korea
  2. Stalking with an Apple Watch
  3. A Detailed Look at the Conti Ransomware Gang
  4. Friday Squid Blogging: Unexpectedly Low Squid Population in the Arctic
  5. Gus Simmons’s Memoir
  6. Linux Improves Its Random Number Generator
  7. NASA’s Insider Threat Program
  8. White House Warns of Possible Russian Cyberattacks
  9. Developer Sabotages Open-Source Software Package
  10. Friday Squid Blogging: The Costs of Unregulated Squid Fishing
  11. Why Vaccine Cards Are So Easily Forged
  12. “Change Password”
  13. Breaking RSA through Insufficiently Random Primes
  14. US Critical Infrastructure Companies Will Have to Report When They Are Hacked
  15. Upcoming Speaking Events
  16. Leak of Russian Censorship Data
  17. Friday Squid Blog: 328-million-year-old Vampire Squid Ancestor Discovered
  18. Where’s the Russia-Ukraine Cyberwar?
  19. Fraud on Zelle
  20. Using Radar to Read Body Language
  21. Hacking Alexa through Alexa’s Speech
  22. Friday Squid Blogging: Far Side Cartoon
  23. Samsung Encryption Flaw
  24. Details of an NSA Hacking Operation
  25. Vulnerability in Stalkerware Apps
  26. Decrypting Hive Ransomware Data

February 2022

  1. Insurance Coverage for NotPetya Losses
  2. Friday Squid Blogging: Squid Videos
  3. Privacy Violating COVID Tests
  4. An Elaborate Employment Con in the Internet Age
  5. Bypassing Apple’s AirTag Security
  6. A New Cybersecurity “Social Contract”
  7. Stealing Bicycles by Swapping QR Codes
  8. Friday Squid Blogging: South American Squid Stocks Threatened by Chinese Fishing
  9. Possible Government Surveillance of the Otter.ai Transcription App
  10. Vendors are Fixing Security Flaws Faster
  11. Secret CIA Data Collection Program
  12. Upcoming Speaking Engagements
  13. Friday Squid Blogging: Climate Change Causing “Squid Bloom” along Pacific Coast
  14. On the Irish Health Services Executive Hack
  15. Bunnie Huang’s Plausibly Deniable Database
  16. Breaking 256-bit Elliptic Curve Encryption with a Quantum Computer
  17. Amy Zegart on Spycraft in the Internet Age
  18. Friday Squid Blogging: Are Squid from Another Planet?
  19. The EARN IT Act Is Back
  20. Interview with the Head of the NSA’s Research Directorate
  21. Finding Vulnerabilities in Open Source Projects
  22. Me on App Store Monopolies and Security

January 2022

  1. Twelve-Year-Old Linux Vulnerability Discovered and Patched
  2. Friday Squid Blogging: Cephalopods Thirty Million Years Older Than Previously Thought
  3. Tracking Secret German Organizations with Apple AirTags
  4. New DeadBolt Ransomware Targets NAS Devices
  5. Merck Wins Insurance Lawsuit re NotPetya Attack
  6. Linux-Targeted Malware Increased by 35%
  7. Friday Squid Blogging: Piglet Squid
  8. China’s Olympics App Is Horribly Insecure
  9. San Francisco Police Illegally Spying on Protesters
  10. Are Fake COVID Testing Sites Harvesting Data?
  11. UK Government to Launch PR Campaign Undermining End-to-End Encryption
  12. An Examination of the Bug Bounty Marketplace
  13. Friday Squid Blogging: The Evolution of Squid Eyes
  14. Upcoming Speaking Engagements
  15. Using EM Waves to Detect Malware
  16. Using Foreign Nationals to Bypass US Surveillance Restrictions
  17. Faking an iPhone Reboot
  18. Apple’s Private Relay Is Being Blocked
  19. Fake QR Codes on Parking Meters
  20. Friday Squid Blogging: Squid Prices Are Rising
  21. Norton’s Antivirus Product Now Includes an Ethereum Miner
  22. People Are Increasingly Choosing Private Web Search
  23. More Russian Cyber Operations against Ukraine

2021 299

December 2021

  1. Friday Squid Blogging: Deep-Dwelling Squid
  2. Apple AirTags Are Being Used to Track People and Cars
  3. Friday Squid Blogging: Squid-Headed Statue Appears in Dallas
  4. Stolen Bitcoins Returned
  5. More on NSO Group and Cytrox: Two Cyberweapons Arms Manufacturers
  6. Friday Squid Blogging: UK Recognizes Squid as Sentient Beings
  7. More Log4j News
  8. Upcoming Speaking Engagements
  9. On the Log4j Vulnerability
  10. NSO Group’s Pegasus Spyware Used Against US State Department Officials
  11. Friday Squid Blogging: The Far Side Squid Comic
  12. Law Enforcement Access to Chat Data and Metadata
  13. Google Shuts Down Glupteba Botnet, Sues Operators
  14. New German Government is Pro-Encryption and Anti-Backdoors
  15. Someone Is Running Lots of Tor Relays
  16. Thieves Using AirTags to “Follow” Cars
  17. Friday Squid Blogging: Squeeze the Squid
  18. Testing Faraday Cages
  19. Smart Contract Bug Results in $31 Million Loss

November 2021

  1. Intel Is Maintaining Legacy Technology for Security Research
  2. Friday Squid Blogging: Bobtail Squid and Vibrio Bacteria
  3. Proposed UK Law Bans Default Passwords
  4. Apple Sues NSO Group
  5. “Crypto” Means “Cryptography,” Not “Cryptocurrency”
  6. Friday Squid Blogging: Bigfin Squid Captured on Video
  7. New Rowhammer Technique
  8. Is Microsoft Stealing People’s Bookmarks?
  9. Wire Fraud Scam Upgraded with Bitcoin
  10. Why I Hate Password Rules
  11. Book Sale: Click Here to Kill Everybody and Data and Goliath
  12. Securing Your Smartphone
  13. Upcoming Speaking Engagements
  14. Friday Squid Blogging: Giant Squid Art
  15. MacOS Zero-Day Used against Hong Kong Activists
  16. Advice for Personal Digital Security
  17. Hacking the Sony Playstation 5
  18. Drones Carrying Explosives
  19. Friday Squid Blogging: Squid Game Cryptocurrency Was a Scam
  20. US Blacklists NSO Group
  21. Using Fake Student Accounts to Shill Brands
  22. On Cell Phone Metadata
  23. Hiding Vulnerabilities in Source Code

October 2021

  1. Friday Squid Blogging: Squid Game Has a Cryptocurrency
  2. More Russian SVR Supply-Chain Attacks
  3. How the FBI Gets Location Information
  4. New York Times Journalist Hacked with NSO Spyware
  5. Friday Squid Blogging: Squid Eating Maine Shrimp
  6. Nation-State Attacker of Telecommunications Networks
  7. Problems with Multifactor Authentication
  8. Textbook Rental Scam
  9. Using Machine Learning to Guess PINs from Video
  10. Ransomware Attacks against Water Treatment Plants
  11. Missouri Governor Doesn’t Understand Responsible Disclosure
  12. Friday Squid Blogging: New Giant Squid Video
  13. Security Risks of Client-Side Scanning
  14. Upcoming Speaking Engagements
  15. Recovering Real Faces from Face-Generation ML System
  16. Suing Infrastructure Companies for Copyright Violations
  17. Airline Passenger Mistakes Vintage Camera for a Bomb
  18. The European Parliament Voted to Ban Remote Biometric Surveillance
  19. Friday Squid Blogging: Strawberry Squid
  20. Syniverse Hack
  21. Facebook Is Down
  22. Cheating on Tests
  23. Friday Squid Blogging: Squid Game
  24. A Death Due to Ransomware

September 2021

  1. Hardening Your VPN
  2. Check What Information Your Browser Leaks
  3. Tracking Stolen Cryptocurrencies
  4. Friday Squid Blogging: Person in Squid Suit Takes Dog for a Walk
  5. I Am Not Satoshi Nakamoto
  6. The Proliferation of Zero-days
  7. ROT8000
  8. FBI Had the REvil Decryption Key
  9. Alaska’s Department of Health and Social Services Hack
  10. Friday Squid Blogging: Ram’s Horn Squid Shells
  11. Zero-Click iMessage Exploit
  12. Identifying Computer-Generated Faces
  13. Upcoming Speaking Engagements
  14. Designing Contact-Tracing Apps
  15. Friday Squid Blogging: Possible Evidence of Squid Paternal Care
  16. ProtonMail Now Keeps IP Logs
  17. More Detail on the Juniper Hack and the NSA PRNG Backdoor
  18. Security Risks of Relying on a Single Smartphone
  19. Lightning Cable with Embedded Eavesdropping
  20. Tracking People by their MAC Addresses
  21. Friday Squid Blogging: Squid Communication
  22. Hacker-Themed Board Game
  23. History of the HX-63 Rotor Machine
  24. Zero-Click iPhone Exploits

August 2021

  1. More Military Cryptanalytics, Part III
  2. Excellent Write-up of the SolarWinds Security Breach
  3. Friday Squid Blogging: Tentacle Doorknob
  4. Details of the Recent T-Mobile Breach
  5. Interesting Privilege Escalation Vulnerability
  6. Surveillance of the Internet Backbone
  7. Friday Squid Blogging: On Squid Brains
  8. More on Apple’s iPhone Backdoor
  9. T-Mobile Data Breach
  10. Apple’s NeuralHash Algorithm Has Been Reverse-Engineered
  11. Tetris: Chinese Espionage Tool
  12. Upcoming Speaking Engagements
  13. Friday Squid Blogging: A Good Year for Squid?
  14. Using AI to Scale Spear Phishing
  15. Cobalt Strike Vulnerability Affects Botnet Servers
  16. Apple Adds a Backdoor to iMessage and iCloud Storage
  17. Defeating Microsoft’s Trusted Platform Module
  18. Friday Squid Blogging: Squid Dog Toy
  19. Using “Master Faces” to Bypass Face-Recognition Authenticating Systems
  20. Zoom Lied about End-to-End Encryption
  21. Paragon: Yet Another Cyberweapons Arms Manufacturer
  22. The European Space Agency Launches Hackable Satellite

July 2021

  1. Friday Squid Blogging: Squid Skin Is Naturally Anti-microbial
  2. I Am Parting With My Crypto Library
  3. Storing Encrypted Photos in Google’s Cloud
  4. AirDropped Gun Photo Causes Terrorist Scare
  5. De-anonymization Story
  6. Hiding Malware in ML Models
  7. Disrupting Ransomware by Disrupting Bitcoin
  8. Friday Squid Blogging: The Evolution of Squid
  9. Commercial Location Data Used to Out Priest
  10. Nasty Windows Printer Driver Vulnerability
  11. NSO Group Hacked
  12. Candiru: Another Cyberweapons Arms Manufacturer
  13. Friday Squid Blogging: Giant Squid Model
  14. REvil is Off-Line
  15. Colorado Passes Consumer Privacy Law
  16. Upcoming Speaking Engagements
  17. China Taking Control of Zero-Day Exploits
  18. Iranian State-Sponsored Hacking Attempts
  19. Analysis of the FBI’s Anom Phone
  20. Friday Squid Blogging: Squid-Related Game
  21. Details of the REvil Ransomware Attack
  22. Vulnerability in the Kaspersky Password Manager
  23. Stealing Xbox Codes
  24. Friday Squid Blogging: Best Squid-Related Headline
  25. More Russian Hacking
  26. Insurance and Ransomware

June 2021

  1. Risks of Evidentiary Software
  2. NFC Flaws in POS Devices and ATMs
  3. Friday Squid Blogging: Colossal Squid Photographed off the Coast of Antarctica
  4. AI-Piloted Fighter Jets
  5. Banning Surveillance-Based Advertising
  6. Mollitiam Industries is the Newest Cyberweapons Arms Manufacturer
  7. Apple Will Offer Onion Routing for iCloud/Safari Users
  8. The Future of Machine Learning and Cybersecurity
  9. Friday Squid Blogging: Video of Giant Squid Hunting Prey
  10. Peloton Vulnerability Found and Fixed
  11. Intentional Flaw in GPRS Encryption Algorithm GEA-1
  12. Paul van Oorschot’s Computer Security and the Internet
  13. VPNs and Trust
  14. Andrew Appel on New Hampshire’s Election Audit
  15. Upcoming Speaking Engagements
  16. TikTok Can Now Collect Biometric Data
  17. Friday Squid Blogging: Fossil of Squid Eating and Being Eaten
  18. FBI/AFP-Run Encrypted Phone
  19. Detecting Deepfake Picture Editing
  20. Information Flows and Democracy
  21. Vulnerabilities in Weapons Systems
  22. The Supreme Court Narrowed the CFAA
  23. Friday Squid Blogging: Squids in Space
  24. Security and Human Behavior (SHB) 2021
  25. The DarkSide Ransomware Gang
  26. Security Vulnerability in Apple’s Silicon “M1” Chip

May 2021

  1. Friday Squid Blogging: Underwater Cameras for Observing Squid
  2. The Misaligned Incentives for Cloud Security
  3. The Story of the 2011 RSA Hack
  4. New Disk Wiping Malware Targets Israel
  5. AIs and Fake Comments
  6. Friday Squid Blogging: Picking up Squid on the Beach
  7. Double-Encrypting Ransomware
  8. Bizarro Banking Trojan
  9. Apple Censorship and Surveillance in China
  10. Adding a Russian Keyboard to Protect against Ransomware
  11. Is 85% of US Critical Infrastructure in Private Hands?
  12. Friday Squid Blogging: Far Side Squid Comic
  13. Upcoming Speaking Engagements
  14. Ransomware Is Getting Ugly
  15. New US Executive Order on Cybersecurity
  16. Book Sale: Beyond Fear
  17. AI Security Risk Assessment Tool
  18. Ransomware Shuts Down US Pipeline
  19. Newly Declassified NSA Document on Cryptography in the 1970s
  20. Friday Squid Blogging: COVID Relief Funds
  21. Teaching Cybersecurity to Children
  22. The Story of Colossus
  23. New Spectre-Like Attacks
  24. Tesla Remotely Hacked from a Drone
  25. Identifying the Person Behind Bitcoin Fog

April 2021

  1. Friday Squid Blogging: On Squid Coloration
  2. Serious MacOS Vulnerability Patched
  3. Identifying People Through Lack of Cell Phone Use
  4. Second Click Here to Kill Everybody Sale
  5. Security Vulnerabilities in Cellebrite
  6. When AIs Start Hacking
  7. Friday Squid Blogging: Squid-Shaped Bike Rack
  8. On North Korea’s Cyberattack Capabilities
  9. Backdoor Found in Codecov Bash Uploader
  10. Biden Administration Imposes Sanctions on Russia for SolarWinds
  11. Details on the Unlocking of the San Bernardino Terrorist’s iPhone
  12. Friday Squid Blogging: Blobs of Squid Eggs Found Near Norway
  13. Cybersecurity Experts to Follow on Twitter
  14. NSA Discloses Vulnerabilities in Microsoft Exchange
  15. DNI’s Annual Threat Assessment
  16. Upcoming Speaking Engagements
  17. The FBI Is Now Securing Networks Without Their Owners’ Permission
  18. More Biden Cybersecurity Nominations
  19. Friday Squid Blogging: Jurassic Squid and Prey
  20. Backdoor Added—But Found—in PHP
  21. Google’s Project Zero Finds a Nation-State Zero-Day Operation
  22. Signal Adds Cryptocurrency Support
  23. Phone Cloning Scam
  24. Wi-Fi Devices as Physical Object Sensors
  25. Friday Squid Blogging: 500-Million-Year-Old Cephalopod
  26. Malware Hidden in Call of Duty Cheating Software
  27. Fugitive Identified on YouTube By His Distinctive Tattoos

March 2021

  1. System Update: New Android Malware
  2. Friday Squid Blogging: Squid Potato Masher
  3. Hacking Weapons Systems
  4. Determining Key Shape from Sound
  5. Accellion Supply Chain Hack
  6. Details of a Computer Banking Scam
  7. Friday Squid Blogging: Squid Cartoon
  8. Easy SMS Hijacking
  9. Exploiting Spectre Over the Internet
  10. Illegal Content and the Blockchain
  11. On the Insecurity of ES&S Voting Machines’ Hash Code
  12. Security Analysis of Apple’s “Find My…” Protocol
  13. Upcoming Speaking Engagements
  14. Friday Squid Blogging: On SQUIDS
  15. Metadata Left in Security Agency PDFs
  16. Fast Random Bit Generation
  17. More on the Chinese Zero-Day Microsoft Exchange Hack
  18. On Not Fixing Old Vulnerabilities
  19. Hacking Digitally Signed PDF Files
  20. Friday Squid Blogging: Vampire Squid Fossil
  21. No, RSA Is Not Broken
  22. Threat Model Humor
  23. Four Microsoft Exchange Zero-Days Exploited by China
  24. Chinese Hackers Stole an NSA Windows Exploit in 2014
  25. Encoded Message in the Perseverance Mars Lander’s Parachute
  26. Mysterious Macintosh Malware
  27. National Security Risks of Late-Stage Capitalism

February 2021

  1. Friday Squid Blogging: Far Side Cartoon
  2. The Problem with Treating Data as a Commodity
  3. On Chinese-Owned Technology Platforms
  4. Twelve-Year-Old Vulnerability Found in Windows Defender
  5. Dependency Confusion: Another Supply-Chain Vulnerability
  6. GPS Vulnerabilities
  7. Friday Squid Blogging: Amazing Video of a Black-Eyed Squid Trying to Eat an Owlfish
  8. Router Security
  9. WEIS 2021 Call for Papers
  10. Virginia Data Privacy Law
  11. Browser Tracking Using Favicons
  12. Malicious Barcode Scanner App
  13. US Cyber Command Valentine’s Day Cryptography Puzzles
  14. Deliberately Playing Copyrighted Music to Avoid Being Live-Streamed
  15. On Vulnerability-Adjacent Vulnerabilities
  16. Chinese Supply-Chain Attack on Computer Systems
  17. Friday Squid Blogging: Flying Squid
  18. Medieval Security Techniques
  19. Attack against Florida Water Treatment Facility
  20. Ransomware Profitability
  21. Web Credit Card Skimmer Steals Data from Another Credit Card Skimmer
  22. SonicWall Zero-Day
  23. NoxPlayer Android Emulator Supply-Chain Attack
  24. Friday Squid Blogging: Live Giant Squid Found in Japan
  25. Presidential Cybersecurity and Pelotons
  26. Another SolarWinds Orion Hack
  27. More SolarWinds News
  28. Georgia’s Ballot-Marking Devices

January 2021

  1. Friday Squid Blogging: Squids Don’t Like Pile-Driving Noises
  2. Including Hackers in NATO Wargames
  3. New iMessage Security Features
  4. Police Have Disrupted the Emotet Botnet
  5. Dutch Insider Attack on COVID-19 Data
  6. Massive Brazilian Data Breach
  7. Insider Attack on Home Surveillance Systems
  8. Friday Squid Blogging: Vegan Chili Squid
  9. SVR Attacks on Microsoft 365
  10. Sophisticated Watering Hole Attack
  11. Injecting a Backdoor into SolarWinds Orion
  12. Friday Squid Blogging: China Launches Six New Squid Jigging Vessels
  13. Click Here to Kill Everybody Sale
  14. Cell Phone Location Privacy
  15. Upcoming Speaking Engagements
  16. Finding the Location of Telegram Users
  17. On US Capitol Security—By Someone Who Manages Arena-Rock-Concert Security
  18. Cloning Google Titan 2FA keys
  19. Changes in WhatsApp’s Privacy Policy
  20. Friday Squid Blogging: Searching for Giant Squid by Collecting Environmental DNA
  21. APT Horoscope
  22. Russia’s SolarWinds Attack and Software Security
  23. Extracting Personal Information from Large Language Models Like GPT-2
  24. Backdoor in Zyxel Firewalls and Gateways
  25. Latest on the SVR’s SolarWinds Hack
  26. Military Cryptanalytics, Part III
  27. Amazon Has Trucks Filled with Hard Drives and an Armed Guard
  28. Friday Squid Blogging: Linguine allo Scoglio Recipe

2020 324

December 2020

  1. Brexit Deal Mandates Old Insecure Crypto Algorithms
  2. On the Evolution of Ransomware
  3. Russia’s SolarWinds Attack
  4. Friday Squid Blogging: Small Giant Squid Washes Ashore in Japan
  5. How China Uses Stolen US Personnel Data
  6. Investigating the Navalny Poisoning
  7. Eavesdropping on Phone Taps from Voice Assistants
  8. Cellebrite Can Break Signal
  9. Friday Squid Blogging: Christmas Squid Memories
  10. NSA on Authentication Hacks (Related to SolarWinds Breach)
  11. US Schools Are Buying Cell Phone Unlocking Systems
  12. More on the SolarWinds Breach
  13. Mexican Drug Cartels with High-Tech Spyware
  14. Zodiac Killer Cipher Solved
  15. How the SolarWinds Hackers Bypassed Duo’s Multi-Factor Authentication
  16. Another Massive Russian Hack of US Government Networks
  17. Should There Be Limits on Persuasive Technologies?
  18. Upcoming Speaking Engagements
  19. Authentication Failure
  20. Friday Squid Blogging: Newly Identified Ichthyosaur Species Probably Ate Squid
  21. A Cybersecurity Policy Agenda
  22. Finnish Data Theft and Extortion
  23. FireEye Hacked
  24. Oblivious DNS-over-HTTPS
  25. Hiding Malware in Social Media Buttons
  26. Friday Squid Blogging: Bigfin Squid Found in Australian Waters
  27. The 2020 Workshop on Economics and Information Security (WEIS)
  28. Enigma Machine Recovered from the Baltic Sea
  29. Open Source Does Not Equal Secure
  30. Impressive iPhone Exploit
  31. Manipulating Systems Using Remote Lasers

November 2020

  1. Check Washing
  2. Friday Squid Blogging: Diplomoceras Maximum
  3. Undermining Democracy
  4. Cyber Public Health
  5. On That Dusseldorf Hospital Ransomware Attack and the Resultant Death
  6. More on the Security of the 2020 US Election
  7. Indistinguishability Obfuscation
  8. Friday Squid Blogging: Ram’s Horn Squid Video
  9. Symantec Reports on Cicada APT Attacks against Japan
  10. The US Military Buys Commercial Location Data
  11. Michael Ellis as NSA General Counsel
  12. On Blockchain Voting
  13. Upcoming Speaking Engagements
  14. Friday Squid Blogging: Underwater Robot Uses Squid-Like Propulsion
  15. Inrupt’s Solid Announcement
  16. New Zealand Election Fraud
  17. “Privacy Nutrition Labels” in Apple’s App Store
  18. The Security Failures of Online Exam Proctoring
  19. 2020 Was a Secure Election
  20. Friday Squid Blogging: Peru Defends Its Waters against Chinese Squid Fishing Boats
  21. Detecting Phishing Emails
  22. California Proposition 24 Passes
  23. Determining What Video Conference Participants Are Typing from Watching Shoulder Movements
  24. New Windows Zero-Day

October 2020

  1. Friday Squid Blogging: Interview with a Squid Researcher
  2. The Legal Risks of Security Research
  3. Tracking Users on Waze
  4. The NSA is Refusing to Disclose its Policy on Backdooring Commercial Products
  5. Reverse-Engineering the Redactions in the Ghislaine Maxwell Deposition
  6. IMSI-Catchers from Canada
  7. Friday Squid Blogging: Squid-like Nebula
  8. New Report on Police Decryption Capabilities
  9. NSA Advisory on Chinese Government Hacking
  10. Cybersecurity Visuals
  11. Split-Second Phantom Images Fool Autopilots
  12. Friday Squid Blogging: Chinese Squid Fishing Near the Galapagos
  13. US Cyber Command and Microsoft Are Both Disrupting TrickBot
  14. Upcoming Speaking Engagements
  15. 2020 Workshop on Economics of Information Security
  16. Google Responds to Warrants for “About” Searches
  17. Hacking Apple for Profit
  18. Friday Squid Blogging: Saving the Humboldt Squid
  19. New Privacy Features in iOS 14
  20. Swiss-Swedish Diplomatic Row Over Crypto AG
  21. On Risk-Based Authentication
  22. Friday Squid Blogging: After Squidnight
  23. COVID-19 and Acedia
  24. Detecting Deep Fakes with a Heartbeat

September 2020

  1. Negotiating with Ransomware Gangs
  2. Hacking a Coffee Maker
  3. On Executive Order 12333
  4. Friday Squid Blogging: COVID-19 Found on Chinese Squid Packaging
  5. CEO of NS8 Charged with Securities Fraud
  6. Iranian Government Hacking Android
  7. Documented Death from a Ransomware Attack
  8. Interview with the Author of the 2000 Love Bug Virus
  9. Amazon Delivery Drivers Hacking Scheduling System
  10. Former NSA Director Keith Alexander Joins Amazon’s Board of Directors
  11. Friday Squid Blogging: Nano-Sized SQUIDS
  12. Nihilistic Password Security Questions
  13. Matt Blaze on OTP Radio Stations
  14. New Bluetooth Vulnerability
  15. How the FIN7 Cybercrime Gang Operates
  16. Privacy Analysis of Ambient Light Sensors
  17. Upcoming Speaking Engagements
  18. Interesting Attack on the EMV Smartcard Payment Standard
  19. Friday Squid Blogging: Calamari vs. Squid
  20. Ranking National Cyber Power
  21. The Third Edition of Ross Anderson’s Security Engineering
  22. US Space Cybersecurity Directive
  23. More on NIST’s Post-Quantum Cryptography
  24. Schneier.com is Moving
  25. Friday Squid Blogging: Morning Squid
  26. Hacking AI-Graded Tests
  27. 2017 Tesla Hack
  28. Insider Attack on the Carnegie Library
  29. North Korea ATM Hack

August 2020

  1. Seny Kamara on "Crypto for the People"
  2. Friday Squid Blogging: How Squid Survive Freezing, Oxygen-Deprived Waters
  3. US Postal Service Files Blockchain Voting Patent
  4. Cory Doctorow on The Age of Surveillance Capitalism
  5. Amazon Supplier Fraud
  6. Identifying People by Their Browsing Histories
  7. DiceKeys
  8. Friday Squid Blogging: Rhode Island's State Appetizer Is Calamari
  9. Yet Another Biometric: Bioacoustic Signatures
  10. Copying a Key by Listening to It in Action
  11. Using Disinformation to Cause a Blackout
  12. Vaccine for Emotet Malware
  13. Robocall Results from a Telephony Honeypot
  14. Friday Squid Blogging: Editing the Squid Genome
  15. Upcoming Speaking Engagements
  16. Drovorub Malware
  17. UAE Hack and Leak Operations
  18. Cryptanalysis of an Old Zip Encryption Algorithm
  19. Collecting and Selling Mobile Phone Location Data
  20. Smart Lock Vulnerability
  21. Friday Squid Blogging: New SQUID
  22. The NSA on the Risks of Exposing Location Data
  23. Cybercrime in the Age of COVID-19
  24. BlackBerry Phone Cracked

July 2020

  1. Twitter Hacker Arrested
  2. Friday Squid Blogging: Squid Proteins for a Better Face Mask
  3. Data and Goliath Book Placement
  4. Fake Stories in Real News Sites
  5. Survey of Supply Chain Attacks
  6. Images in Eye Reflections
  7. Friday Squid Blogging: Introducing the Seattle Kraken
  8. Update on NIST's Post-Quantum Cryptography Program
  9. Adversarial Machine Learning and the CFAA
  10. Fawkes: Digital Image Cloaking
  11. Hacking a Power Supply
  12. On the Twitter Hack
  13. Friday Squid Blogging: Squid Found on Provincetown Sandbar
  14. Twitter Hackers May Have Bribed an Insider
  15. NSA on Securing VPNs
  16. Enigma Machine for Sale
  17. A Peek into the Fake Review Marketplace
  18. Friday Squid Blogging: China Closing Its Squid Spawning Grounds
  19. EFF's 30th Anniversary Livestream
  20. Business Email Compromise (BEC) Criminal Ring
  21. Traffic Analysis of Home Security Cameras
  22. Half a Million IoT Passwords Leaked
  23. IoT Security Principles
  24. ThiefQuest Ransomware for the Mac
  25. Friday Squid Blogging: Strawberry Squid
  26. EncroChat Hacked by Police
  27. The Security Value of Inefficiency
  28. Securing the International IoT Supply Chain

June 2020

  1. Android Apps Stealing Facebook Credentials
  2. iPhone Apps Stealing Clipboard Data
  3. Friday Squid Blogging: Fishing for Jumbo Squid
  4. The Unintended Harms of Cybersecurity
  5. Analyzing IoT Security Best Practices
  6. COVID-19 Risks of Flying
  7. Cryptocurrency Pump and Dump Scams
  8. Nation-State Espionage Campaigns against Middle East Defense Contractors
  9. Identifying a Person Based on a Photo, LinkedIn and Etsy Profiles, and Other Internet Bread Crumbs
  10. Friday Squid Blogging: Giant Squid Washes Up on South African Beach
  11. Security and Human Behavior (SHB) 2020
  12. New Hacking-for-Hire Company in India
  13. Theft of CIA's "Vault Seven" Hacking Tools Due to Its Own Lousy Security
  14. Zoom Will Be End-to-End Encrypted for All Users
  15. Bank Card "Master Key" Stolen
  16. Eavesdropping on Sound Using Variations in Light Bulbs
  17. Examining the US Cyber Budget
  18. Friday Squid Blogging: Human Cells with Squid-Like Transparency
  19. Facebook Helped Develop a Tails Exploit
  20. Another Intel Speculative Execution Vulnerability
  21. Availability Attacks against Neural Networks
  22. Security Analysis of the Democracy Live Online Voting System
  23. Gene Spafford on Internet Voting
  24. Phishing Attacks against Trump and Biden Campaigns
  25. Friday Squid Blogging: Shark vs. Squid
  26. New Research: "Privacy Threats in Intimate Relationships"
  27. Zoom's Commitment to User Security Depends on Whether you Pay It or Not
  28. Wallpaper that Crashes Android Phones
  29. "Sign in with Apple" Vulnerability
  30. Password Changing After a Breach

May 2020

  1. Friday Squid Blogging: Humboldt Squid Communication
  2. Bogus Security Technology: An Anti-5G USB Stick
  3. Facebook Announces Messenger Security Features that Don't Compromise Privacy
  4. Thermal Imaging as Security Theater
  5. Websites Conducting Port Scans
  6. Bluetooth Vulnerability: BIAS
  7. Friday Squid Blogging: Squid Can Edit Their Own Genomes
  8. Ann Mitchell, Bletchley Park Cryptanalyst, Dies
  9. Bart Gellman on Snowden
  10. Criminals and the Normalization of Masks
  11. AI and Cybersecurity
  12. Ramsay Malware
  13. Friday Squid Blogging: Vegan "Squid" Made from Chickpeas
  14. On Marcus Hutchins
  15. US Government Exposes North Korean Malware
  16. New US Electronic Warfare Platform
  17. Attack Against PC Thunderbolt Port
  18. Another California Data Privacy Law
  19. Friday Squid Blogging: Jurassic Squid Attack
  20. Used Tesla Components Contain Personal Information
  21. iOS XML Bug
  22. ILOVEYOU Virus
  23. Malware in Google Apps
  24. Denmark, Sweden, Germany, the Netherlands and France SIGINT Alliance
  25. Friday Squid Blogging: Cocaine Smuggled in Squid
  26. Me on COVID-19 Contact Tracing Apps

April 2020

  1. Securing Internet Videoconferencing Apps: Zoom and Others
  2. How Did Facebook Beat a Federal Wiretap Demand?
  3. Fooling NLP Systems Through Word Swapping
  4. Automatic Instacart Bots
  5. Friday Squid Blogging: Humboldt Squid Backlight Themselves to Communicate More Clearly
  6. Global Surveillance in the Wake of COVID-19
  7. Chinese COVID-19 Disinformation Campaign
  8. New iPhone Zero-Day Discovered
  9. Another Story of Bad 1970s Encryption
  10. Vulnerability Finding Using Machine Learning
  11. Friday Squid Blogging: On the Efficacy of Squid as Bait
  12. The DoD Isn't Fixing Its Security Problems
  13. California Needlessly Reduces Privacy During COVID-19 Pandemic
  14. Upcoming Speaking Engagements
  15. Ransomware Now Leaking Stolen Documents
  16. Contact Tracing COVID-19 Infections via Smartphone Apps
  17. Friday Squid Blogging: Amazingly Realistic Squid Drawings
  18. Kubernetes Security
  19. Microsoft Buys Corp.com
  20. RSA-250 Factored
  21. Cybersecurity During COVID-19
  22. Emotet Malware Causes Physical Damage
  23. Friday Squid Blogging: On Squid Communication
  24. Security and Privacy Implications of Zoom
  25. Bug Bounty Programs Are Being Used to Buy Silence
  26. Marriott Was Hacked—Again
  27. Dark Web Hosting Provider Hacked

March 2020

  1. Clarifying the Computer Fraud and Abuse Act
  2. Privacy vs. Surveillance in the Age of COVID-19
  3. Friday Squid Blogging: Squid Can Edit Their Own Genome
  4. Story of Gus Weiss
  5. On Cyber Warranties
  6. Facial Recognition for People Wearing Masks
  7. Internet Voting in Puerto Rico
  8. Hacking Voice Assistants with Ultrasonic Waves
  9. Friday Squid Blogging: Squid Orders Down in Italy
  10. Emergency Surveillance During COVID-19 Crisis
  11. Work-from-Home Security Advice
  12. The Insecurity of WordPress and Apache Struts
  13. TSA Admits Liquid Ban Is Security Theater
  14. Friday Squid Blogging: New Report on Squid Markets
  15. The EARN-IT Act
  16. The Whisper Secret-Sharing App Exposed Locations
  17. LA Covers Up Bad Cybersecurity
  18. CIA Dirty Laundry Aired
  19. Cybersecurity Law Casebook
  20. Friday Squid Blogging: The Effect of Noise on Squid
  21. More on Crypto AG
  22. Security of Health Information
  23. Let's Encrypt Vulnerability
  24. Wi-Fi Chip Vulnerability
  25. Facebook's Download-Your-Data Tool Is Incomplete

February 2020

  1. Friday Squid Blogging: Squid Eggs
  2. Humble Bundle's 2020 Cybersecurity Books
  3. Deep Learning to Find Malicious Email Attachments
  4. Securing the Internet of Things through Class-Action Lawsuits
  5. Newly Declassified Study Demonstrates Uselessness of NSA's Phone Metadata Program
  6. Firefox Enables DNS over HTTPS
  7. Russia Is Trying to Tap Transatlantic Cables
  8. Friday Squid Blogging: 13-foot Giant Squid Caught off New Zealand Coast
  9. Inrupt, Tim Berners-Lee's Solid, and Me
  10. Policy vs. Technology
  11. Internet of Things Candle
  12. Hacking McDonald's for Free Food
  13. Voatz Internet Voting App Is Insecure
  14. Friday Squid Blogging: Squids Are as Intelligent as Dogs
  15. Upcoming Speaking Engagements
  16. DNSSEC Keysigning Ceremony Postponed Because of Locked Safe
  17. A US Data Protection Agency
  18. Companies that Scrape Your Email
  19. Crypto AG Was Owned by the CIA
  20. Apple's Tracking-Prevention Feature in Safari has a Privacy Bug
  21. Friday Squid Blogging: An MRI Scan of a Squid's Brain
  22. Security in 2020: Revisited
  23. New Ransomware Targets Industrial Control Systems
  24. A New Clue for the Kryptos Sculpture
  25. Tree Code
  26. New Research on the Adtech Industry
  27. Attacking Driverless Cars with Projected Images

January 2020

  1. Friday Squid Blogging: The Pterosaur Ate Squid
  2. NSA Security Awareness Posters
  3. US Department of Interior Grounding All Drones
  4. Collating Hacked Data Sets
  5. Customer Tracking at Ralphs Grocery Store
  6. Google Receives Geofence Warrants
  7. Modern Mass Surveillance: Identify, Correlate, Discriminate
  8. Smartphone Election in Washington State
  9. Friday Squid Blogging: More on the Giant Squid's DNA
  10. Technical Report of the Bezos Phone Hack
  11. Apple Abandoned Plans for Encrypted iCloud Backup after FBI Complained
  12. Half a Million IoT Device Passwords Published
  13. Brazil Charges Glenn Greenwald with Cybercrimes
  14. SIM Hijacking
  15. Clearview AI and Facial Recognition
  16. Friday Squid Blogging: Giant Squid Genome Analyzed
  17. Securing Tiffany's Move
  18. Critical Windows Vulnerability Discovered by NSA
  19. Upcoming Speaking Engagements
  20. 5G Security
  21. Artificial Personas and Public Discourse
  22. Friday Squid Blogging: Stuffed Squid with Vegetables and Pancetta
  23. Police Surveillance Tools from Special Services Group
  24. New SHA-1 Attack
  25. USB Cable Kill Switch for Laptops
  26. Mailbox Master Keys
  27. Friday Squid Blogging: Giant Squid Video from the Gulf of Mexico
  28. Chrome Extension Stealing Cryptocurrency Keys and Passwords
  29. Mysterious Drones Are Flying over Colorado

2019 347

December 2019

  1. Hacking School Surveillance Systems
  2. Friday Squid Blogging: New Species of Bobtail Squid
  3. Chinese Hackers Bypassing Two-Factor Authentication
  4. ToTok Is an Emirati Spying Tool
  5. Friday Squid Blogging: Streamlined Quick Unfolding Investigation Drone
  6. Lousy IoT Security
  7. Attacker Causes Epileptic Seizure over the Internet
  8. Iranian Attacks on Industrial Control Systems
  9. Security Vulnerabilities in the RCS Texting Protocol
  10. Upcoming Speaking Engagements
  11. Friday Squid Blogging: Color-Changing Properties of the Opalescent Inshore Squid
  12. EFF on the Mechanics of Corporate Surveillance
  13. Scaring People into Supporting Backdoors
  14. Extracting Data from Smartphones
  15. Reforming CDA 230
  16. Failure Modes in Machine Learning
  17. Friday Squid Blogging: Squidfall Safety
  18. Andy Ellis on Risk Assessment
  19. Election Machine Insecurity Story
  20. Becoming a Tech Policy Activist
  21. RSA-240 Factored
  22. The Story of Tiversa
  23. Cameras that Automatically Detect Mobile Phone Use

November 2019

  1. Friday Squid Blogging: Squid-Like Underwater Drone
  2. Manipulating Machine Learning Systems by Manipulating Training Data
  3. DHS Mandates Federal Agencies to Run Vulnerability Disclosure Policy
  4. Friday Squid Blogging: T-Shirt
  5. The NSA Warns of TLS Inspection
  6. GPS Manipulation
  7. Iran Has Shut Off its Internet
  8. Security Vulnerabilities in Android Firmware
  9. Friday Squid Blogging: Planctotuethis Squid
  10. TPM-Fail Attacks Against Cryptographic Coprocessors
  11. Upcoming Speaking Engagements
  12. Technology and Policymakers
  13. NTSB Investigation of Fatal Driverless Car Accident
  14. Identifying and Arresting Ransomware Criminals
  15. Fooling Voice Assistants with Lasers
  16. Friday Squid Blogging: 80-Foot Steel Kraken Deliberately Sunk
  17. xHelper Malware for Android
  18. Eavesdropping on SMS Messages inside Telco Networks
  19. Details of an Airbnb Fraud
  20. Obfuscation as a Privacy Tool
  21. Homemade TEMPEST Receiver
  22. Friday Squid Blogging: Triassic Kraken
  23. Resources for Measuring Cybersecurity

October 2019

  1. A Broken Random Number Generator in AMD Microcode
  2. WhatsApp Sues NSO Group
  3. ICT Supply-Chain Security
  4. Former FBI General Counsel Jim Baker Chooses Encryption Over Backdoors
  5. Friday Squid Blogging: Researchers Investigating Using Squid Propulsion for Underwater Robots
  6. Dark Web Site Taken Down without Breaking Encryption
  7. Mapping Security and Privacy Research across the Decades
  8. NordVPN Breached
  9. Public Voice Launches Petition for an International Moratorium on Using Facial Recognition for Mass Surveillance
  10. Calculating the Benefits of the Advanced Encryption Standard
  11. Details of the Olympic Destroyer APT
  12. Friday Squid Blogging: Six-Foot-Long Mass of Squid Eggs Found on Great Barrier Reef
  13. Why Technologists Need to Get Involved in Public Policy
  14. Adding a Hardware Backdoor to a Networked Computer
  15. Using Machine Learning to Detect IP Hijacking
  16. Cracking the Passwords of Early Internet Pioneers
  17. Factoring 2048-bit Numbers Using 20 Million Qubits
  18. Friday Squid Blogging: Apple Fixes Squid Emoji
  19. I Have a New Book: We Have Root
  20. Details on Uzbekistan Government Malware: SandCat
  21. New Reductor Nation-State Malware Compromises TLS
  22. Wi-Fi Hotspot Tracking
  23. Cheating at Professional Poker
  24. Illegal Data Center Hidden in Former NATO Bunker
  25. Speakers Censored at AISA Conference in Melbourne
  26. New Unpatchable iPhone Exploit Allows Jailbreaking
  27. Edward Snowden's Memoirs
  28. Friday Squid Blogging: Hawaiian Bobtail Squid Squirts Researcher
  29. More Cryptanalysis of Solitaire
  30. Tracking by Smart TVs
  31. Measuring the Security of IoT Devices
  32. New Research into Russian Malware
  33. NSA on the Future of National Cybersecurity

September 2019

  1. Supply-Chain Security and Trust
  2. Friday Squid Blogging: Did Super-Intelligent Giant Squid Steal an Underwater Research Station?
  3. Superhero Movies and Security Lessons
  4. On Chinese "Spy Trains"
  5. Ineffective Package Tracking Facilitates Fraud
  6. Russians Hack FBI Comms System
  7. France Outlines Its Approach to Cyberwar
  8. Friday Squid Blogging: Piglet Squid
  9. Crown Sterling Claims to Factor RSA Keylengths First Factored Twenty Years Ago
  10. A Feminist Take on Information Privacy
  11. New Biometrics
  12. Revisiting Software Vulnerabilities in the Boeing 787
  13. I'm Looking to Hire a Strategist to Help Figure Out Public-Interest Tech
  14. Cracking Forgotten Passwords
  15. Another Side Channel in Intel Chips
  16. Upcoming Speaking Engagements
  17. Friday Squid Blogging: How Scientists Captured the Giant Squid Video
  18. When Biology Becomes Software
  19. Smart Watches and Cheating on Tests
  20. Fabricated Voice Used in Financial Fraud
  21. More on Law Enforcement Backdoor Demands
  22. On Cybersecurity Insurance
  23. NotPetya
  24. Friday Squid Blogging: Squid Perfume
  25. Default Password for GPS Trackers
  26. The Doghouse: Crown Sterling
  27. Credit Card Privacy
  28. Massive iPhone Hack Targets Uyghurs

August 2019

  1. Friday Squid Blogging: Why Mexican Jumbo Squid Populations Have Declined
  2. Attacking the Intel Secure Enclave
  3. AI Emotion-Detection Arms Race
  4. The Myth of Consumer-Grade Security
  5. The Threat of Fake Academic Research
  6. Detecting Credit Card Skimmers
  7. Friday Squid Blogging: Vulnerabilities in Squid Server
  8. License Plate "NULL"
  9. Modifying a Tesla to Become a Surveillance Platform
  10. Google Finds 20-Year-Old Microsoft Windows Vulnerability
  11. Surveillance as a Condition for Humanitarian Aid
  12. Influence Operations Kill Chain
  13. Friday Squid Blogging: Robot Squid Propulsion
  14. Software Vulnerabilities in the Boeing 787
  15. Bypassing Apple FaceID's Liveness Detection Feature
  16. Side-Channel Attack against Electronic Locks
  17. Attorney General Barr and Encryption
  18. Exploiting GDPR to Get Private Information
  19. Evaluating the NSA's Telephony Metadata Program
  20. Friday Squid Blogging: Sinuous Asperoteuthis Mangoldae Squid
  21. Supply-Chain Attack against the Electron Development Platform
  22. AT&T Employees Took Bribes to Unlock Smartphones
  23. Brazilian Cell Phone Hack
  24. Phone Pharming for Ad Fraud
  25. Regulating International Trade in Commercial Spyware
  26. Friday Squid Blogging: Piglet Squid Video
  27. More on Backdooring (or Not) WhatsApp
  28. Disabling Security Cameras with Lasers
  29. How Privacy Laws Hurt Defendants
  30. Facebook Plans on Backdooring WhatsApp

July 2019

  1. Another Attack Against Driverless Cars
  2. ACLU on the GCHQ Backdoor Proposal
  3. Wanted: Cybersecurity Imagery
  4. Friday Squid Blogging: Humbolt Squid in Mexico Are Getting Smaller
  5. Insider Logic Bombs
  6. Software Developers and Security
  7. Attorney General William Barr on Encryption Policy
  8. Science Fiction Writers Helping Imagine Future Threats
  9. Hackers Expose Russian FSB Cyberattack Projects
  10. Friday Squid Blogging: Squid Mural
  11. A Harlequin Romance Novel about Hackers
  12. John Paul Stevens Was a Cryptographer
  13. Identity Theft on the Job Market
  14. Zoom Vulnerability
  15. Palantir's Surveillance Service for Law Enforcement
  16. Upcoming Speaking Engagements
  17. Friday Squid Blogging: When the Octopus and Squid Lost Their Shells
  18. Clickable Endnotes to Click Here to Kill Everybody
  19. Presidential Candidate Andrew Yang Has Quantum Encryption Policy
  20. Resetting Your GE Smart Light Bulb
  21. Details of the Cloud Hopper Attacks
  22. Cell Networks Hacked by (Probable) Nation-State Attackers
  23. Cardiac Biometric
  24. Ransomware Recovery Firms Who Secretly Pay Hackers
  25. Friday Squid Blogging: Squid Cars
  26. Applied Cryptography is Banned in Oregon Prisons
  27. Research on Human Honesty
  28. US Journalist Detained When Returning to US
  29. Digital License Plates
  30. Google Releases Basic Homomorphic Encryption Tool
  31. Yubico Security Keys with a Crypto Flaw

June 2019

  1. Friday Squid Blogging: Fantastic Video of a Juvenile Giant Squid
  2. I'm Leaving IBM
  3. Cellebrite Claims It Can Unlock Any iPhone
  4. Spanish Soccer League App Spies on Fans
  5. MongoDB Offers Field Level Encryption
  6. Person in Latex Mask Impersonated French Minister
  7. Florida City Pays Ransomware
  8. iPhone Apps Surreptitiously Communicated with Unknown Servers
  9. Election Security
  10. Friday Squid Blogging: Squid Tea Bags
  11. Backdoor Built into Android Firmware
  12. Fake News and Pandemics
  13. How Apple's "Find My" Feature Works
  14. Hacking Hardware Security Modules
  15. Risks of Password Managers
  16. Maciej Cegłowski on Privacy in the Information Age
  17. Data, Surveillance, and the AI Arms Race
  18. Friday Squid Blogging: Climate Change Could be Good for Squid
  19. Upcoming Speaking Engagements
  20. Computers and Video Surveillance
  21. Video Surveillance by Computer
  22. Report on the Stalkerware Industry
  23. Rock-Paper-Scissors Robot
  24. Workshop on the Economics of Information Security
  25. Employment Scam
  26. Friday Squid Blogging: Possible New Squid Species
  27. iOS Shortcut for Recording the Police
  28. Security and Human Behavior (SHB) 2019
  29. Chinese Military Wants to Develop Custom OS
  30. Lessons Learned Trying to Secure Congressional Campaigns
  31. The Cost of Cybercrime
  32. The Importance of Protecting Cybersecurity Whistleblowers

May 2019

  1. The Human Cost of Cyberattacks
  2. Friday Squid Blogging: Hundred-Million-Year-Old Squid Relative Found in Amber
  3. Fraudulent Academic Papers
  4. Alex Stamos on Content Moderation and Security
  5. First American Financial Corp. Data Records Leak
  6. Friday Squid Blogging: More Materials Science from Squid Skin
  7. NSA Hawaii
  8. Germany Talking about Banning End-to-End Encryption
  9. German SG-41 Encryption Machine Up for Auction
  10. Thangrycat: A Serious Cisco Vulnerability
  11. Visiting the NSA
  12. Fingerprinting iPhones
  13. How Technology and Politics Are Changing Spycraft
  14. The Concept of "Return on Data"
  15. Friday Squid Blogging: On Squid Intelligence
  16. Why Are Cryptographers Being Denied Entry into the US?
  17. More Attacks against Computer Automatic Update Systems
  18. Another Intel Chip Flaw
  19. WhatsApp Vulnerability Fixed
  20. International Spy Museum Reopens
  21. Upcoming Speaking Engagements
  22. Cryptanalysis of SIMON-32/64
  23. Reverse Engineering a Chinese Surveillance App
  24. Friday Squid Blogging: Cephalopod Appreciation Society Event
  25. Cryptanalyzing a Pair of Russian Encryption Algorithms
  26. Another NSA Leaker Identified and Charged
  27. Amazon Is Losing the War on Fraudulent Sellers
  28. Leaked NSA Hacking Tools
  29. Malicious MS Office Macro Creator
  30. Locked Computers
  31. First Physical Retaliation for a Cyberattack
  32. Protecting Yourself from Identity Theft
  33. Friday Squid Blogging: Squid Skin "Inspires" New Thermal Sheeting
  34. Cybersecurity for the Public Interest
  35. Why Isn't GDPR Being Enforced?
  36. On Security Tokens

April 2019

  1. Defending Democracies Against Information Attacks
  2. Stealing Ethereum by Guessing Weak Private Keys
  3. Friday Squid Blogging: Toraiz SQUID Digital Sequencer
  4. Interview of Me in Taiwan
  5. Towards an Information Operations Kill Chain
  6. Fooling Automated Surveillance Cameras with Patchwork Color Printout
  7. Vulnerability in French Government Tchap Chat App
  8. G7 Comes Out in Favor of Encryption Backdoors
  9. Excellent Analysis of the Boeing 737 Max Software Problems
  10. Friday Squid Blogging: New Squid Species off the New Zealand Coast
  11. Iranian Cyberespionage Tools Leaked Online
  12. New DNS Hijacking Attacks
  13. A "Department of Cybersecurity"
  14. More on the Triton Malware
  15. Vulnerabilities in the WPA3 Wi-Fi Security Protocol
  16. China Spying on Undersea Internet Cables
  17. Friday Squid Blogging: Detecting Illegal Squid Fishing with Satellite Imagery
  18. Maliciously Tampering with Medical Imagery
  19. New Version of Flame Malware Discovered
  20. TajMahal Spyware
  21. How the Anonymous Artist Banksy Authenticates His or Her Work
  22. Hey Secret Service: Don't Plug Suspect USB Sticks into Random Computers
  23. Ghidra: NSA's Reverse-Engineering Tool
  24. Friday Squid Blogging: Fried Squid Recipe
  25. Unhackable Cryptography?
  26. Former Mozilla CTO Harassed at the US Border
  27. Adversarial Machine Learning against Tesla's Autopilot
  28. How Political Campaigns Use Personal Data
  29. Hacking Instagram to Get Free Meals in Exchange for Positive Reviews
  30. Recovering Smartphone Typing from Microphone Sounds

March 2019

  1. Friday Squid Blogging: Restoring the Giant Squid at the Museum of Natural History
  2. NSA-Inspired Vulnerability Found in Huawei Laptops
  3. Malware Installed in Asus Computers through Hacked Update Process
  4. Programmers Who Don't Understand Security Are Poor at Security
  5. Personal Data Left on Used Laptops
  6. Mail Fishing
  7. Friday Squid Blogging: New Research on Squid Camouflage
  8. Enigma, Typex, and Bombe Simulators
  9. First Look Media Shutting Down Access to Snowden NSA Archives
  10. Zipcar Disruption
  11. An Argument that Cybersecurity Is Basically Okay
  12. Triton
  13. CAs Reissue Over One Million Weak Certificates
  14. Friday Squid Blogging: A Squid-Related Vacation Tour in Hawaii
  15. I Was Cited in a Court Decision
  16. Upcoming Speaking Engagements
  17. Critical Flaw in Swiss Internet Voting System
  18. DARPA Is Developing an Open-Source Voting System
  19. Judging Facebook's Privacy Shift
  20. On Surveillance in the Workplace
  21. Russia Is Testing Online Voting
  22. Friday Squid Blogging: Squid Proteins Can Be an Alternative to Plastic
  23. Videos and Links from the Public-Interest Technology Track at the RSA Conference
  24. Cybersecurity Insurance Not Paying for NotPetya Losses
  25. Detecting Shoplifting Behavior
  26. Letterlocking
  27. Digital Signatures in PDFs Are Broken
  28. Cybersecurity for the Public Interest
  29. The Latest in Creepy Spyware
  30. Friday Squid Blogging: Chinese Squid-Processing Facility
  31. Data Leakage from Encrypted Databases

February 2019

  1. Can Everybody Read the US Terrorist Watch List?
  2. "Insider Threat" Detection Software
  3. Attacking Soldiers on Social Media
  4. On the Security of Password Managers
  5. Friday Squid Blogging: A Tracking Device for Squid
  6. Gen. Nakasone on US Cyber Command
  7. Reverse Location Search Warrants
  8. Details on Recent DNS Hijacking
  9. Estonia's Volunteer Cyber Militia
  10. I Am Not Associated with Swift Recovery Ltd.
  11. Cataloging IoT Vulnerabilities
  12. Friday Squid Blogging: Sharp-Eared Enope Squid
  13. Reconstructing SIGSALY
  14. USB Cable with Embedded Wi-Fi Controller
  15. Cyberinsurance and Acts of War
  16. Blockchain and Trust
  17. Friday Squid Blogging: The Hawaiian Bobtail Squid Genome
  18. Friday Squid Blogging: Multiple Organisms Co-Evolving in a Single Squid
  19. China's AI Strategy and its Security Implications
  20. Using Gmail "Dot Addresses" to Commit Fraud
  21. Major Zcash Vulnerability Fixed
  22. Facebook's New Privacy Hires
  23. Friday Squid Blogging: Squid with Chorizo, Tomato, and Beans
  24. Public-Interest Tech at the RSA Conference

January 2019

  1. Security Flaws in Children's Smart Watches
  2. Security Analysis of the LIFX Smart Light Bulb
  3. iPhone FaceTime Vulnerability
  4. Japanese Government Will Hack Citizens' IoT Devices
  5. Friday Squid Blogging: Squids on the Tree of Life
  6. Hacking the GCHQ Backdoor
  7. Military Carrier Pigeons in the Era of Electronic Warfare
  8. The Evolution of Darknets
  9. Hacking Construction Cranes
  10. Clever Smartphone Malware Concealment Technique
  11. Friday Squid Blogging: Squid Lollipops
  12. Evaluating the GCHQ Exceptional Access Proposal
  13. Prices for Zero-Day Exploits Are Rising
  14. El Chapo's Encryption Defeated by Turning His IT Consultant
  15. Alex Stamos on Content Moderation and Security
  16. Upcoming Speaking Engagements
  17. Why Internet Security Is So Bad
  18. Friday Squid Blogging: New Giant Squid Video
  19. Using a Fake Hand to Defeat Hand-Vein Biometrics
  20. Security Vulnerabilities in Cell Phone Systems
  21. EU Offering Bug Bounties on Critical Open-Source Software
  22. Machine Learning to Detect Software Vulnerabilities
  23. New Attack Against Electrum Bitcoin Wallets
  24. Friday Squid Blogging: The Future of the Squid Market
  25. Podcast Interview with Eva Galperin
  26. Long-Range Familial Searching Forensics

← 2016–2018 2023–2026 →