The Curious Engineer

Schneier on Security

2023–2026

1,225 posts

← 2019–2022

2026 292

October 2026

  1. Studying Fraudulent North Korean IT Workers
  2. Hiding Capabilities in AI Models
  3. Bias in Qwen3-Coder Model
  4. Friday Squid Blogging: Increasing Squid Populations
  5. Compromised TLS Certificates
  6. New Serious PHP Vulnerabilities Released and Patched
  7. Workshop on Economics and Information Security (WEIS) Archive
  8. Possible new Cellebrite iPhone Radio Zero-Day
  9. Training AIs to Solve CAPTCHAs
  10. Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
  11. Backdooring Open-Weight AI Models
  12. Measuring Human Cryptanalysis Effort
  13. Upcoming Speaking Engagements
  14. The Future of AI Cryptanalysis
  15. Cyberattack on Connected Fridges in France
  16. FBI Arrests Suspect in FBI-Hacking Case
  17. Friday Squid Blogging: I Caught a Squid
  18. How Technology Empowers—and Imperils—Dictators
  19. Apple’s Verified Photography System
  20. Possible Vulnerability in Apple’s Automatic Reboot
  21. Another Historic Cipher Falls to AI
  22. Friday Squid Blogging: EU is Trying to Fight Unregulated Squid Fishing
  23. Unidentified Flock Cameras in Florida
  24. How American Political Campaigns Are Using AI—and What They’re Spending on the Tools
  25. Connected Cars Are a Surveillance Platform

September 2026

  1. I Want Better Reporting on AI Genie Behavior
  2. Using Device Linking to Eavesdrop on WhatsApp and Signal
  3. New Attack Against RSA
  4. Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee
  5. On Anthropic’s AI Misuse Report
  6. Malicious npm Packages That Evade Defenses
  7. Research on Models Engaging in Genie-Like Behavior
  8. GPT-6 Astra Breaks an Old Enigma Message
  9. Reverse-Engineering Flock Cameras
  10. Friday Squid Blogging: On Squid Egg Sacs
  11. Are AIs Still Struggling with CAPTCHAs?
  12. How Candidates Could Use AI for Good
  13. Fake CAPTCHA Scams
  14. 25 Years of Mass Surveillance Is Enough
  15. On the NSA’s Supercomputer from the 1960s
  16. Upcoming Speaking Engagements
  17. Using AI for Weapons Development
  18. Microsoft’s Patching
  19. Friday Squid Blogging: Rotting Squid on a Beached California Boat
  20. My Talk at DEF CON
  21. Cliff Stoll’s DEF CON Talk
  22. AIs Compress Exploit Timeline
  23. Driver’s License Data for Sale
  24. Claude Fable Solves a Historical Cipher
  25. AIs as Modern Genies
  26. Stealing AI Reasoning Traces
  27. Automobile Camouflage to Hide from Flock Cameras
  28. Friday Squid Blogging: Squid on a Stick at the New York State Fair
  29. Using a VM to Contain an AI Agent
  30. Security Vulnerability in a Voting System
  31. AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks
  32. Researching Employment Scams
  33. AI Agents Are Now Emailing Me with Their Security Concerns
  34. Wireless Routers as Motion Detectors
  35. What’s the Scam?
  36. Leaked Russian Cyber-Operations Training Materials
  37. Rewiring Democracy Series on The Renovator

August 2026

  1. Is Someone Hacking DoD Refrigerators?
  2. Hiding Prompt Injection in Legal Filing
  3. Friday Squid Blogging: Truckload of Squid Spills in Rhode Island
  4. AI Doesn’t Mean the End of Mathematics—at Least Not Yet
  5. LLM-Based Social Engineering Scams
  6. Spyware for Babies
  7. Black Hat State of Security Vendors
  8. Criminal Deception in Silicon Valley
  9. Friday Squid Blogging: Neon Flying Squid
  10. AI Is Learning to Write Genetic Code
  11. More Incidents of AIs Going Rogue in Cybersecurity Challenges
  12. Detailed Timeline of OpenAI’s Cyberattack on Hugging Face
  13. Police Are Hiding Their Use of Flock Surveillance Cameras
  14. ICE Collecting DNA Samples
  15. LLMs and Contextual Integrity
  16. Hacking Public Wi-Fi DNS to Steal Credentials
  17. Friday Squid Blogging: Searching for the Colossal Squid
  18. Upcoming Speaking Engagements
  19. If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them
  20. Separating AI’s Technological Problems from Its Capitalism Problems
  21. Prompt Injections for Defense
  22. AI Genie in the Wild
  23. AI for Military Support
  24. Python Now Has a Post-Quantum Encryption Library
  25. Friday Squid Blogging: Arctic Bobtail Squid Video
  26. ICE Is Buying Access to Credit Card Records
  27. Adversarial Clothing Designed to Fool Facial Recognition Systems
  28. Vulnerabilities in Car Anti-Theft Device
  29. Iran Cyberattacks Against Minnesota Water Systems
  30. Some Claude Chats Are Searchable on Google
  31. More on the OpenAI Agent’s Attack on Hugging Face
  32. The OpenAI Hack Shows the Genie Is Out of the Bottle

July 2026

  1. Friday Squid Blogging: Squid Helps Discover New Marine Species
  2. Anthropic’s Opus 5 Is Better at Resisting Prompt Injection
  3. Facial Recognition at Madison Square Garden
  4. American Being Prosecuted for Wiping His Phone Before Handing It Over to Border Officials
  5. Should You Use AI for a Task? Here’s a Simple Way to Decide
  6. Measuring the Tendency of AI Agents to Go Rogue
  7. Long-Lived Vulnerability in Microsoft Secure Boot
  8. Measuring LLMs’ Ability to Perform Cryptanalysis
  9. Axon Is Another License Plate Surveillance Company
  10. Cognyte Sells a Mobile Cell Surveillance Van
  11. Friday Squid Blogging: Illex Squid Catch in the Falklands
  12. Why AI Needs a “Genie Coefficient”
  13. End-to-End Encryption and “Going Dark”
  14. First-Person Identity Theft Story
  15. MIT to Become Hotbed of AI Video Surveillance
  16. On Flock License Plate Tracking Cameras
  17. Friday Squid Blogging: Squid Washing Up on Cape Cod Beach
  18. Details of Alan Turing’s Voice Encryption System
  19. Protecting Privacy in an AI Era
  20. A Video Screen That Is Also a Camera
  21. Upcoming Speaking Engagements
  22. Vulnerability in FIFA’s Network
  23. AI Data Centers and the Concentration of Wealth
  24. Friday Squid Blogging: “Squidbleed” Vulnerability
  25. AI Surveillance and Social Progress
  26. The Language of AI Could Change How Humans Speak
  27. Cybersecurity and the Gap Between Skill and Ability
  28. Google Is Suing Chinese Scammers Who Are Using Gemini
  29. France to Stop Certifying Non-Quantum-Safe Encryption
  30. Flock Cameras Can Surveil Cars Without License Plates
  31. Cybersecurity Mission Creep in the US
  32. Papa Johns Surveillance-Based Advertising

June 2026

  1. The Realities of AI Video Surveillance
  2. Factoring RSA Keys with Many Zeros
  3. Robot Police Officers
  4. Friday Squid Blogging: The Chinese Control the Majority of Argentina’s Squid Fleet
  5. Meta Is Testing Facial Recognition for Police and Military
  6. One Million Passports Leaked Online
  7. AI and Liability
  8. Interesting Paper Exploring Prompt Injection
  9. Embedding Forbidden Text in Spyware to Discourage AI Analysis
  10. Anthropic’s Fable 5 Model Jailbroken Within Days
  11. Professional Athletes and Wearables
  12. Friday Squid Blogging: Victims of Unregulated Squid Fishing
  13. Anthropic’s Fable and the State of AI
  14. Embedding Forbidden Text in Spyware to Discourage AI Analysis
  15. AI Use by the US Government
  16. Flock Cameras Are Being Used for Stalking
  17. The FCC Wants to Eliminate Burner Phones
  18. Upcoming Speaking Engagements
  19. Friday Squid Blogging: Squid-Inspired Fluid Pump
  20. Bernie Sanders’ AI Sovereign Wealth Fund Plan
  21. Enhanced License Plate Tracking
  22. NSO Group Hacking WhatsApp Despite Court Order
  23. GPS As a Key Distribution Platform
  24. Critical Zcash Vulnerability Found and Fixed
  25. Anthropic’s Project Glasswing Update
  26. AI Worm
  27. Hacking Meta’s AI Chatbot
  28. AI Used to Decrypt Medieval Ciphers
  29. The Intersection of Encryption and AI
  30. Microsoft Threatening Security Researcher
  31. Vulnerability Disclosure in the Age of AI

May 2026

  1. Friday Squid Blogging: Another Squid
  2. Chilling Effects
  3. FBI’s 2025 Internet Crime Report
  4. Identifying People Using Wi-Fi Routers
  5. Friday Squid Blogging: Regulating Squid Fishing in the South Pacific
  6. CISA Security Leak
  7. macOS Kernel Memory Corruption Exploit
  8. On AI Security
  9. Laurie Anderson Is Quoting Me
  10. Zero-Day Exploit Against Windows BitLocker
  11. Friday Squid Blogging: Bigfin Squid
  12. Bypassing On-Camera Age-Verification Checks
  13. Upcoming Speaking Engagements
  14. How Dangerous Is Anthropic’s Mythos AI?
  15. OpenAI’s GPT-5.5 is as Good as Mythos at Finding Security Vulnerabilities
  16. Copy.Fail Linux Vulnerability
  17. LLMs and Text-in-Text Steganography
  18. Friday Squid Blogging: Giant Squid Live in the Waters of Western Australia
  19. Insider Betting on Polymarket
  20. Smart Glasses for the Authorities
  21. Rowhammer Attack Against NVIDIA Chips
  22. DarkSword Malware
  23. Hacking Polymarket
  24. A Ransomware Negotiator Was Working for a Ransomware Gang

April 2026

  1. Fast16 Malware
  2. Claude Mythos Has Found 271 Zero-Days in Firefox
  3. What Anthropic’s Mythos Means for the Future of Cybersecurity
  4. Medieval Encrypted Letter Decoded
  5. Friday Squid Blogging: How Squid Survived Extinction Events
  6. Hiding Bluetooth Trackers in Mail
  7. FBI Extracts Deleted Signal Messages from iPhone Notification Database
  8. ICE Uses Graphite Spyware
  9. Mexican Surveillance Company
  10. Is “Satoshi Nakamoto” Really Adam Back?
  11. Friday Squid Blogging: New Giant Squid Video
  12. Mythos and Cybersecurity
  13. Human Trust of AI Agents
  14. Defense in Depth, Medieval Style
  15. Upcoming Speaking Engagements
  16. How Hackers Are Thinking About AI
  17. On Anthropic’s Mythos Preview and Project Glasswing
  18. AI Chatbots and Trust
  19. Friday Squid Blogging: Squid Overfishing in the South Pacific
  20. Sen. Sanders Talks to Claude About AI and Privacy
  21. On Microsoft’s Lousy Cloud Security
  22. Python Supply-Chain Compromise
  23. Cybersecurity in the Age of Instant Software
  24. Hong Kong Police Can Force You to Reveal Your Encryption Keys
  25. New Mexico’s Meta Ruling and Encryption
  26. Google Wants to Transition to Post-Quantum Cryptography by 2029
  27. Friday Squid Blogging: Jurassic Fish Chokes on Squid
  28. Company that Secretly Records and Publishes Zoom Meetings
  29. US Bans All Foreign-Made Consumer Routers
  30. Possible US Government iPhone Hacking Tool Leaked
  31. Is “Hackback” Official US Cybersecurity Strategy?
  32. A Taxonomy of Cognitive Security

March 2026

  1. Inventors of Quantum Cryptography Win Turing Award
  2. Apple’s Camera Indicator Lights
  3. Friday Squid Blogging: Bioluminescent Bacteria in Squid
  4. As the US Midterms Approach, AI Is Going to Emerge as a Key Issue Concerning Voters
  5. Sen. Wyden Warns of Another Section 702 Abuse
  6. Team Mirai and Democracy
  7. Microsoft Xbox One Hacked
  8. Friday Squid Blogging: Jumbo Flying Squid in the South Pacific
  9. Proton Mail Shared User Information with the Police
  10. Hacking a Robot Vacuum
  11. Meta’s AI Glasses and Privacy
  12. South Korean Police Accidentally Post Cryptocurrency Wallet Password
  13. Possible New Result in Quantum Factorization
  14. Upcoming Speaking Engagements
  15. Friday Squid Blogging: Increased Squid Population in the Falklands
  16. Academia and the “AI Brain Drain”
  17. iPhones and iPads Approved for NATO Classified Data
  18. Canada Needs Nationalized, Public AI
  19. Jailbreaking the F-35 Fighter Jet
  20. New Attack Against Wi-Fi
  21. Friday Squid Blogging: Squid in Byzantine Monk Cooking
  22. Anthropic and the Pentagon
  23. Claude Used to Hack Mexican Government
  24. Israel Hacked Traffic Cameras in Iran
  25. Hacked App Part of US/Israeli Propaganda Campaign Against Iran
  26. Manipulating AI Summarization Features
  27. On Moltbook
  28. LLM-Assisted Deanonymization

February 2026

  1. Friday Squid Blogging: Squid Fishing in Peru
  2. Why Tehran’s Two-Tiered Internet Is So Dangerous
  3. Phishing Attacks Against People Seeking Programming Jobs
  4. LLMs Generate Predictable Passwords
  5. Poisoning AI Training Data
  6. Is AI Good for Democracy?
  7. On the Security of Password Managers
  8. Friday Squid Blogging: Squid Cartoon
  9. Ring Cancels Its Partnership with Flock
  10. Malicious AI
  11. AI Found Twelve New Vulnerabilities in OpenSSL
  12. Side-Channel Attacks Against LLMs
  13. The Promptware Kill Chain
  14. Upcoming Speaking Engagements
  15. Friday Squid Blogging: Do Squid Dream?
  16. 3D Printer Surveillance
  17. Rewiring Democracy Ebook is on Sale
  18. Prompt Injection Via Road Signs
  19. AI-Generated Text and the Detection Arms Race
  20. LLMs are Getting a Lot Better and Faster at Finding and Exploiting Zero-Days
  21. Friday Squid Blogging: Squid Fishing Tips
  22. I Am in the Epstein Files
  23. iPhone Lockdown Mode Protects Washington Post Reporter
  24. Backdoor in Notepad++
  25. US Declassifies Information on JUMPSEAT Spy Satellites
  26. Microsoft is Giving the FBI BitLocker Keys
  27. AI Coding Assistants Secretly Copying All Code to China

January 2026

  1. Friday Squid Blogging: New Squid Species Discovered
  2. AIs Are Getting Better at Finding and Exploiting Security Vulnerabilities
  3. The Constitutionality of Geofence Warrants
  4. Ireland Proposes Giving Police New Digital Surveillance Powers
  5. Friday Squid Blogging: Giant Squid in the Star Trek Universe
  6. AIs are Getting Better at Finding and Exploiting Internet Vulnerabilities
  7. Why AI Keeps Falling for Prompt Injection Attacks
  8. Internet Voting is Too Insecure for Use in Elections
  9. Could ChatGPT Convince You to Buy Something?
  10. AI-Powered Surveillance in Schools
  11. AI and the Corporate Capture of Knowledge
  12. New Vulnerability in n8n
  13. Hacking Wheelchairs over Bluetooth
  14. Upcoming Speaking Engagements
  15. 1980s Hacker Manifesto
  16. Corrupting LLMs Through Weird Generalizations
  17. Friday Squid Blogging: The Chinese Squid-Fishing Fleet off the Argentine Coast
  18. Palo Alto Crosswalk Signals Had Default Passwords
  19. AI & Humans: Making the Relationship Work
  20. The Wegman’s Supermarket Chain Is Probably Using Facial Recognition
  21. A Cyberattack Was Part of the US Assault on Venezuela
  22. Telegram Hosting World’s Largest Darknet Market
  23. Friday Squid Blogging: Squid Found in Light Fixture
  24. Flock Exposes Its AI-Enabled Surveillance Cameras

2025 307

December 2025

  1. LinkedIn Job Scams
  2. Using AI-Generated Images to Get Refunds
  3. Are We Ready to Be Governed by Artificial Intelligence?
  4. Friday Squid Blogging: Squid Camouflage
  5. IoT Hack
  6. Urban VPN Proxy Surreptitiously Intercepts AI Chats
  7. Denmark Accuses Russia of Conducting Two Cyberattacks
  8. Microsoft Is Finally Killing RC4
  9. Friday Squid Blogging: Petting a Squid
  10. AI Advertising Company Hacked
  11. Someone Boarded a Plane at Heathrow Without a Ticket or Passport
  12. Deliberate Internet Shutdowns
  13. Chinese Surveillance and AI
  14. Against the Federal Moratorium on State-Level Regulation of AI
  15. Upcoming Speaking Engagements
  16. Friday Squid Blogging: Giant Squid Eating a Diamondback Squid
  17. Building Trustworthy AI Agents
  18. AIs Exploiting Smart Contracts
  19. FBI Warns of Fake Video Scams
  20. AI vs. Human Drivers
  21. Substitution Cipher Based on The Voynich Manuscript
  22. Friday Squid Blogging: Vampire Squid Genome
  23. New Anonymous Phone Service
  24. Like Social Media, AI Requires Difficult Choices
  25. Banning VPNs

November 2025

  1. Friday Squid Blogging: Flying Neon Squid Found on Israeli Beach
  2. Prompt Injection Through Poetry
  3. Huawei and Chinese Surveillance
  4. Four Ways AI Is Being Used to Strengthen Democracies Worldwide
  5. IACR Nullifies Election Because of Lost Decryption Key
  6. Friday Squid Blogging: New “Squid” Sneaker
  7. More on Rewiring Democracy
  8. AI as Cyberattacker
  9. Scam USPS and E-Z Pass Texts and Websites
  10. Legal Restrictions on Vulnerability Disclosure
  11. AI and Voter Engagement
  12. More Prompt||GTFO
  13. Friday Squid Blogging: Pilot Whales Eat a Lot of Squid
  14. Upcoming Speaking Engagements
  15. The Role of Humans in an AI-Powered World
  16. Book Review: The Business of Secrets
  17. On Hacking Back
  18. Prompt Injection in AI Browsers
  19. New Attacks Against Secure Enclaves
  20. Friday Squid Blogging: Squid Game: The Challenge , Season Two
  21. Faking Receipts with AI
  22. Rigged Poker Games
  23. Scientists Need a Positive Vision for AI
  24. Cybercriminals Targeting Payroll Sites
  25. AI Summarization Optimization

October 2025

  1. Friday Squid Blogging: Giant Squid at the Smithsonian
  2. Will AI Strengthen or Undermine Democracy?
  3. The AI-Designed Bioweapon Arms Race
  4. Signal’s Post-Quantum Cryptographic Implementation
  5. Social Engineering People’s Credit Card Details
  6. Louvre Jewel Heist
  7. First Wap: A Surveillance Computer You’ve Never Heard Of
  8. Friday Squid Blogging: “ El Pulpo The Squid”
  9. Part Four of The Kryptos Sculpture
  10. Serious F5 Breach
  11. Failures in Face Recognition
  12. A Cybersecurity Merit Badge
  13. Agentic AI’s OODA Loop Problem
  14. Friday Squid Blogging: Squid Inks Philippines Fisherman
  15. A Surprising Amount of Satellite Traffic Is Unencrypted
  16. Cryptocurrency ATMs
  17. Apple’s Bug Bounty Program
  18. Upcoming Speaking Engagements
  19. The Trump Administration’s Increased Use of Social Media Surveillance
  20. Rewiring Democracy is Coming Soon
  21. AI and the Future of American Politics
  22. Friday Squid Blogging: Sperm Whale Eating a Giant Squid
  23. Autonomous AI Hacking and the Future of Cybersecurity
  24. Flok License Plate Surveillance
  25. AI-Enabled Influence Operation Against Iran
  26. AI in the 2026 Midterm Elections
  27. Friday Squid Blogging: Squid Overfishing in the Southwest Atlantic
  28. Daniel Miessler on the AI Attack/Defense Balance
  29. Use of Generative AI in Scams

September 2025

  1. Details of a Scam
  2. Abusing Notion’s AI Agent for Data Theft
  3. Friday Squid Blogging: Jigging for Squid
  4. Digital Threat Modeling Under Authoritarianism
  5. Malicious-Looking URL Creation Service
  6. US Disrupts Massive Cell Phone Array in New York
  7. Apple’s New Memory Integrity Enforcement
  8. Details About Chinese Surveillance and Propaganda Companies
  9. Friday Squid Blogging: Giant Squid vs. Blue Whale
  10. Surveying the Global Spyware Market
  11. Time-of-Check Time-of-Use Attacks Against LLMs
  12. Hacking Electronic Safes
  13. Microsoft Still Uses RC4
  14. Lawsuit About WhatsApp Security
  15. Upcoming Speaking Engagements
  16. Assessing the Quality of Dried Squid
  17. A Cyberattack Victim Notification Framework
  18. New Cryptanalysis of the Fiat-Shamir Protocol
  19. Signed Copies of Rewiring Democracy
  20. AI in Government
  21. Friday Squid Blogging: The Origin and Propagation of Squid
  22. My Latest Book: Rewiring Democracy
  23. GPT-4o-mini Falls for Psychological Manipulation
  24. Generative AI as a Cybercrime Assistant
  25. Indirect Prompt Injection Attacks Against LLM Assistants
  26. 1965 Cryptanalysis Training Workbook Released by the NSA

August 2025

  1. Friday Squid Blogging: Catching Humboldt Squid
  2. Baggage Tag Scam
  3. The UK May Be Dropping Its Backdoor Mandate
  4. We Are Still Unable to Secure LLMs from Malicious Inputs
  5. Encryption Backdoor in Military/Police Radios
  6. Poor Password Choices
  7. Friday Squid Blogging: Bobtail Squid
  8. I’m Spending the Year at the Munk School
  9. AI Agents Need Data Integrity
  10. Jim Sanborn Is Auctioning Off the Solution to Part Four of the Kryptos Sculpture
  11. Subverting AIOps Systems Through Poisoned Input Data
  12. Zero-Day Exploit in WinRAR File
  13. Eavesdropping on Phone Conversations Through Vibrations
  14. Friday Squid Blogging: Squid-Shaped UFO Spotted Over Texas
  15. Trojans Embedded in .svg Files
  16. LLM Coding Integrity Breach
  17. AI Applications in Cybersecurity
  18. SIGINT During World War II
  19. The “Incriminating Video” Scam
  20. Automatic License Plate Readers Are Coming to Schools
  21. Friday Squid Blogging: New Vulnerability in Squid HTTP Proxy Server
  22. Google Project Zero Changes Its Disclosure Policy
  23. China Accuses Nvidia of Putting Backdoors into Their Chips
  24. The Semiconductor Industry and Regulatory Compliance
  25. Surveilling Your Children with AirTags
  26. First Sentencing in Scheme to Help North Koreans Infiltrate US Companies
  27. Friday Squid Blogging: A Case of Squid Fossil Misidentification
  28. Spying on People Through Airportr Luggage Delivery Service

July 2025

  1. Cheating on Quantum Computing Benchmarks
  2. Measuring the Attack/Defense Balance
  3. Aeroflot Hacked
  4. That Time Tom Lehrer Pranked the NSA
  5. Microsoft SharePoint Zero-Day
  6. Friday Squid Blogging: Stable Quasi-Isodynamic Designs
  7. Subliminal Learning in AIs
  8. How the Solid Protocol Restores Digital Agency
  9. Google Sues the Badbox Botnet Operators
  10. “Encryption Backdoors and the Fourth Amendment”
  11. Another Supply Chain Vulnerability
  12. Friday Squid Blogging: The Giant Squid Nebula
  13. New Mobile Phone Forensics Tool
  14. Security Vulnerabilities in ICEBlock
  15. Hacking Trains
  16. Report from the Cambridge Cybercrime Conference
  17. Squid Dominated the Oceans in the Late Cretaceous
  18. Tradecraft in the Information Age
  19. Using Signal Groups for Activism
  20. Yet Another Strava Privacy Leak
  21. Hiding Prompt Injections in Academic Papers
  22. Friday Squid Blogging: How Squid Skin Distorts Light
  23. Surveillance Used by a Drug Cartel
  24. Ubuntu Disables Spectre/Meltdown Protections
  25. Iranian Blackout Affected Misinformation Campaigns

June 2025

  1. How Cybersecurity Fears Affect Confidence in Voting Systems
  2. Friday Squid Blogging: What to Do When You Find a Squid “Egg Mop”
  3. The Age of Integrity
  4. House of Representatives Bans WhatsApp
  5. What LLMs Know About Their Users
  6. Here’s a Subliminal Channel You Haven’t Considered Before
  7. Largest DDoS Attack to Date
  8. Friday Squid Blogging: Gonate Squid Video
  9. Surveillance in the US
  10. Self-Driving Car Video Footage
  11. Ghostwriting Scam
  12. Where AI Provides Value
  13. Upcoming Speaking Engagements
  14. Friday Squid Blogging: Stubby Squid
  15. Paragon Spyware Used to Spy on European Journalists
  16. Airlines Secretly Selling Passenger Data to the Government
  17. New Way to Covertly Track Android Users
  18. Friday Squid Blogging: Squid Run in Southern New England
  19. Hearing on the Federal Government and AI
  20. Report on the Malicious Uses of AI
  21. The Ramifications of Ukraine’s Drone Attack
  22. New Linux Vulnerabilities
  23. Australia Requires Ransomware Victims to Declare Payments

May 2025

  1. Why Take9 Won’t Improve Cybersecurity
  2. Friday Squid Blogging: NGC 1068 Is the “Squid Galaxy”
  3. Surveillance Via Smart Toothbrush
  4. Location Tracking App for Foreigners in Moscow
  5. Chinese-Owned VPNs
  6. Friday Squid Blogging: US Naval Ship Attacked by Squid in 1978
  7. Signal Blocks Windows Recall
  8. The Voter Experience
  9. More AIs Are Taking Polls and Surveys
  10. DoorDash Hack
  11. The NSA’s “Fifty Years of Mathematical Cryptanalysis (1937–1987)”
  12. Friday Squid Blogging: Pet Squid Simulation
  13. Communications Backdoor in Chinese Power Inverters
  14. AI-Generated Law
  15. Upcoming Speaking Engagements
  16. Google’s Advanced Protection Now on Android
  17. Court Rules Against NSO Group
  18. Florida Backdoor Bill Fails
  19. Friday Squid Blogging: Japanese Divers Video Giant Squid
  20. Chinese AI Submersible
  21. Fake Student Fraud in Community Colleges
  22. Another Move in the Deepfake Creation/Detection Arms Race
  23. Friday Squid Blogging: Pyjama Squid
  24. Privacy for Agentic AI
  25. NCSC Guidance on “Advanced Cryptography”
  26. US as a Surveillance State

April 2025

  1. WhatsApp Case Against NSO Group Progressing
  2. Applying Security Engineering to Prompt Injection Security
  3. Windscribe Acquitted on Charges of Not Collecting Users’ Data
  4. Friday Squid Blogging: Squid Facts on Your Phone
  5. Cryptocurrency Thefts Get Physical
  6. New Linux Rootkit
  7. Regulating AI Behavior with a Hypervisor
  8. Android Improves Its Security
  9. Friday Squid Blogging: Live Colossal Squid Filmed
  10. Age Verification Using Facial Scans
  11. CVE Program Almost Unfunded
  12. Slopsquatting
  13. Upcoming Speaking Engagements
  14. China Sort of Admits to Being Behind Volt Typhoon
  15. Friday Squid Blogging: Squid and Efficient Solar Tech
  16. AI Vulnerability Finding
  17. Reimagining Democracy
  18. How to Leak to a Journalist
  19. Arguing Against CALEA
  20. DIRNSA Fired
  21. Friday Squid Blogging: Two-Man Giant Squid
  22. Troy Hunt Gets Phished
  23. Web 3.0 Requires Data Integrity
  24. Rational Astrologies and Security
  25. Cell Phone OPSEC for Border Crossings

March 2025

  1. The Signal Chat Leak and the NSA
  2. Friday Squid Blogging: Squid Werewolf Hacking Group
  3. AIs as Trusted Third Parties
  4. A Taxonomy of Adversarial Machine Learning Attacks and Mitigations
  5. AI Data Poisoning
  6. Report on Paragon Spyware
  7. More Countries are Demanding Backdoors to Encrypted Apps
  8. Friday Squid Blogging: A New Explanation of Squid Camouflage
  9. My Writings Are in the LibGen AI Training Corpus
  10. NCSC Releases Post-Quantum Cryptography Timeline
  11. Critical GitHub Attack
  12. Is Security Human Factors Research Skewed Towards Western Ideas and Habits?
  13. Improvements in Brute Force Attacks
  14. Friday Squid Blogging: SQUID Band
  15. Upcoming Speaking Engagements
  16. TP-Link Router Botnet
  17. RIP Mark Klein
  18. China, Russia, Iran, and North Korea Intelligence Sharing
  19. Silk Typhoon Hackers Indicted
  20. Thousands of WordPress Websites Infected with Malware
  21. Friday Squid Blogging: Squid Loyalty Cards
  22. Rayhunter: Device to Detect Cellular Surveillance
  23. The Combined Cipher Machine
  24. CISA Identifies Five New Vulnerabilities Currently Being Exploited
  25. Trojaned AI Tool Leads to Disney Hack

February 2025

  1. Friday Squid Blogging: Eating Bioluminescent Squid
  2. “Emergent Misalignment” in LLMs
  3. UK Demanded Apple Add a Backdoor to iCloud
  4. North Korean Hackers Steal $1.5B in Cryptocurrency
  5. More Research Showing AI Breaking the Rules
  6. Friday Squid Blogging: New Squid Fossil
  7. Implementing Cryptography in AI Systems
  8. An LLM Trained to Create Backdoors in Code
  9. Device Code Phishing
  10. Story About Medical Device Security
  11. Atlas of Surveillance
  12. Friday Squid Blogging: Squid the Care Dog
  13. Upcoming Speaking Engagements
  14. AI and Civil Service Purges
  15. DOGE as a National Cyberattack
  16. Delivering Malware Through Abandoned Amazon S3 Buckets
  17. Trusted Execution Environments
  18. Pairwise Authentication of Humans
  19. UK Is Ordering Apple to Break Its Own Encryption
  20. Friday Squid Blogging: The Colossal Squid
  21. Screenshot-Reading Malware
  22. AIs and Robots Should Sound Robotic
  23. On Generative AI Security
  24. Deepfakes and the 2024 US Election
  25. Journalists and Civil Society Members Using WhatsApp Targeted by Paragon Spyware

January 2025

  1. Friday Squid Blogging: On Squid Brains
  2. Fake Reddit and WeTransfer Sites Are Pushing Malware
  3. ExxonMobil Lobbyist Caught Hacking Climate Activists
  4. CISA Under Trump
  5. New VPN Backdoor
  6. Friday Squid Blogging: Beaked Whales Feed on Squid
  7. Third Interdisciplinary Workshop on Reimagining Democracy (IWORD 2024)
  8. AI Will Write Complex Laws
  9. AI Mistakes Are Very Different from Human Mistakes
  10. Biden Signs New Cybersecurity Order
  11. Friday Squid Blogging: Opioid Alternatives from Squid Research
  12. Social Engineering to Disable iMessage Protections
  13. FBI Deletes PlugX Malware from Thousands of Computers
  14. Phishing False Alarm
  15. Upcoming Speaking Engagements
  16. The First Password on the Internet
  17. Microsoft Takes Legal Action Against AI “Hacking as a Service” Scheme
  18. Friday Squid Blogging: Cotton-and-Squid-Bone Sponge
  19. Apps That Are Spying on Your Location
  20. Zero-Day Vulnerability in Ivanti VPN
  21. US Treasury Department Sanctions Chinese Company Over Cyberattacks
  22. Privacy of Photos.app’s Enhanced Visual Search
  23. Friday Squid Blogging: Anniversary Post
  24. ShredOS
  25. Google Is Allowing Device Fingerprinting

2024 318

December 2024

  1. Gift Card Fraud
  2. Salt Typhoon’s Reach Continues to Grow
  3. Casino Players Using Hidden Cameras for Cheating
  4. Friday Squid Blogging: Squid on Pizza
  5. Scams Based on Fake Google Emails
  6. Spyware Maker NSO Group Found Liable for Hacking WhatsApp
  7. Criminal Complaint against LockBit Ransomware Writer
  8. Friday Squid Blogging: Squid Sticker
  9. Mailbox Insecurity
  10. New Advances in the Understanding of Prime Numbers
  11. Hacking Digital License Plates
  12. Short-Lived Certificates Coming to Let’s Encrypt
  13. Upcoming Speaking Events
  14. Friday Squid Blogging: Biology and Ecology of the Colossal Squid
  15. Ultralytics Supply-Chain Attack
  16. Jailbreaking LLM-Controlled Robots
  17. Full-Face Masks to Frustrate Identification
  18. Trust Issues in AI
  19. Friday Squid Blogging: Safe Quick Undercarriage Immobilization Device
  20. Detecting Pegasus Infections
  21. AI and the 2024 Elections
  22. Algorithms Are Coming for Democracy—but It’s Not All Bad
  23. Details about the iOS Inactivity Reboot Feature

November 2024

  1. Friday Squid Blogging: Squid-Inspired Needle Technology
  2. Race Condition Attacks against LLMs
  3. NSO Group Spies on People on Behalf of Governments
  4. What Graykey Can and Can’t Unlock
  5. Security Analysis of the MERGE Voting Protocol
  6. Friday Squid Blogging: Transcriptome Analysis of the Indian Squid
  7. The Scale of Geoblocking by Nation
  8. Secret Service Tracking People’s Locations without Warrant
  9. Steve Bellovin’s Retirement Talk
  10. Why Italy Sells So Much Spyware
  11. Most of 2023’s Top Exploited Vulnerabilities Were Zero-Days
  12. Friday Squid Blogging: Female Gonatus Onyx Squid Carrying Her Eggs
  13. Good Essay on the History of Bad Password Policies
  14. New iOS Security Feature Makes It Harder for Police to Unlock Seized Phones
  15. Mapping License Plate Scanners in the US
  16. Criminals Exploiting FBI Emergency Data Requests
  17. Friday Squid Blogging: Squid-A-Rama in Des Moines
  18. AI Industry is Trying to Subvert the Definition of “Open Source AI”
  19. Prompt Injection Defenses Against LLM Cyberattacks
  20. Subverting LLM Coders
  21. IoT Devices in Password-Spraying Botnet
  22. AIs Discovering Vulnerabilities
  23. Sophos Versus the Chinese Hackers
  24. Friday Squid Blogging: Squid Sculpture in Massachusetts Building

October 2024

  1. Roger Grimes on Prioritizing Cybersecurity Advice
  2. Tracking World Leaders Using Strava
  3. Simson Garfinkel on Spooky Cryptographic Action at a Distance
  4. Law Enforcement Deanonymizes Tor Users
  5. Criminals Are Blowing up ATMs in Germany
  6. Friday Squid Blogging: Giant Squid Found on Spanish Beach
  7. Watermark for LLM-Generated Text
  8. Are Automatic License Plate Scanners Constitutional?
  9. No, the Chinese Have Not Broken Modern Encryption Systems with a Quantum Computer
  10. AI and the SEC Whistleblower Program
  11. Friday Squid Blogging: Squid Scarf
  12. Justice Department Indicts Tech CEO for Falsifying Security Certifications
  13. Cheating at Conkers
  14. More Details on Israel Sabotaging Hezbollah Pagers and Walkie-Talkies
  15. Upcoming Speaking Engagements
  16. Perfectl Malware
  17. Indian Fishermen Are Catching Less Squid
  18. More on My AI and Democracy Book
  19. IronNet Has Shut Down
  20. Deebot Robot Vacuums Are Using Photos and Audio to Train Their AI
  21. Auto-Identification Smart Glasses
  22. China Possibly Hacking US “Lawful Access” Backdoor
  23. Largest Recorded DDoS Attack is 3.8 Tbps
  24. Friday Squid Blogging: Map of All Colossal Squid Sightings
  25. Weird Zimbra Vulnerability
  26. California AI Safety Bill Vetoed
  27. Hacking ChatGPT by Planting False Memories into Its Data

September 2024

  1. AI and the 2024 US Elections
  2. Squid Fishing in Japan
  3. NIST Recommends Some Common-Sense Password Rules
  4. An Analysis of the EU’s Cyber Resilience Act
  5. New Windows Malware Locks Computer in Kiosk Mode
  6. Israel’s Pager Attacks and Supply Chain Vulnerabilities
  7. Hacking the “Bike Angels” System for Moving Bikeshares
  8. Friday Squid Blogging: Squid Game Season Two Teaser
  9. Clever Social Engineering Attack Using Captchas
  10. FBI Shuts Down Chinese Botnet
  11. Remotely Exploding Pagers
  12. Python Developers Targeted with Malware During Fake Job Interviews
  13. Legacy Ivanti Cloud Service Appliance Being Exploited
  14. Upcoming Speaking Engagements
  15. Friday Squid Blogging: Squid as a Legislative Negotiating Tactic
  16. My TedXBillings Talk
  17. Microsoft Is Adding New Cryptography Algorithms
  18. Evaluating the Effectiveness of Reward Modeling of Generative AI Systems
  19. New Chrome Zero-Day
  20. Australia Threatens to Force Companies to Break Encryption
  21. Friday Squid Blogging: Live Video of Promachoteuthis Squid
  22. YubiKey Side-Channel Attack
  23. Long Analysis of the M-209
  24. Security Researcher Sued for Disproving Government Statements
  25. List of Old NSA Training Videos
  26. SQL Injection Attack on Airport Security

August 2024

  1. Friday Squid Blogging: Economic Fallout from Falklands Halting Squid Fishing
  2. Adm. Grace Hopper’s 1982 NSA Lecture Has Been Published
  3. Matthew Green on Telegram’s Encryption
  4. The Present and Future of TV Surveillance
  5. US Federal Court Rules Against Geofence Warrants
  6. Friday Squid Blogging: Self-Healing Materials from Squid Teeth
  7. Take a Selfie Using a NY Surveillance Camera
  8. Surveillance Watch
  9. Story of an Undercover CIA Officer who Penetrated Al Qaeda
  10. Hacking Wireless Bicycle Shifters
  11. The State of Ransomware
  12. Friday Squid Blog: The Market for Squid Oil Is Growing
  13. New Windows IPv6 Zero-Click Vulnerability
  14. NIST Releases First Post-Quantum Encryption Algorithms
  15. Upcoming Speaking Engagements
  16. Texas Sues GM for Collecting Driving Data without Consent
  17. On the Voynich Manuscript
  18. Taxonomy of Generative AI Misuse
  19. Friday Squid Blogging: SQUID Is a New Computational Tool for Analyzing Genomic AI
  20. People-Search Site Removal Services Largely Ineffective
  21. Problems with Georgia’s Voter Registration Portal
  22. On the Cyber Safety Review Board
  23. New Patent Application for Car-to-Car Surveillance
  24. Friday Squid Blogging: Treating Squid Parasites
  25. Leaked GitHub Python Token
  26. Education in Secure Software Development

July 2024

  1. Providing Security Updates to Automobile Software
  2. New Research in Detecting AI-Generated Videos
  3. Friday Squid Blogging: Sunscreen from Squid Pigments
  4. Compromising the Secure Boot Process
  5. The CrowdStrike Outage and Market-Driven Brittleness
  6. Data Wallets Using the Solid Protocol
  7. Robot Dog Internet Jammer
  8. 2017 ODNI Memo on Kaspersky Labs
  9. Snake Mimics a Spider
  10. Friday Squid Blogging: Peru Trying to Protect its Squid Fisheries
  11. Brett Solomon on Digital Rights
  12. Criminal Gang Physically Assaulting People for Their Cryptocurrency
  13. Cloudflare Reports that Almost 7% of All Internet Traffic Is Malicious
  14. Hacking Scientific Citations
  15. Upcoming Speaking Engagements
  16. Friday Squid Blogging: 1994 Lair of Squid Game
  17. The NSA Has a Long-Lost Lecture by Adm. Grace Hopper
  18. Apple Is Alerting iPhone Users of Spyware Attacks
  19. RADIUS Vulnerability
  20. Reverse-Engineering Ticketmaster’s Barcode System
  21. On the CSRB’s Non-Investigation of the SolarWinds Attack
  22. Friday Squid Blogging: Newly Discovered Vampire Squid
  23. New Open SSH Vulnerability
  24. Upcoming Book on AI and Democracy
  25. Public Surveillance of Bars
  26. Model Extraction from Neural Networks

June 2024

  1. Friday Squid Blogging: New Squid Species
  2. James Bamford on Section 702 Extension
  3. Security Analysis of the EU’s Digital Wallet
  4. The US Is Banning Kaspersky
  5. Breaking the M-209
  6. Paul Nakasone Joins OpenAI’s Board of Directors
  7. Friday Squid Blogging: Squid Nebula
  8. Ross Anderson’s Memorial Service
  9. Recovering Public Keys from Signatures
  10. New Blog Moderation Policy
  11. The Hacking of Culture and the Creation of Socio-Technical Debt
  12. Rethinking Democracy for the Age of AI
  13. Using LLMs to Exploit Vulnerabilities
  14. Friday Squid Blogging: Squid Cartoon
  15. Upcoming Speaking Engagements
  16. Demo of AES GCM Misuse Problems
  17. AI and the Indian Election
  18. Using AI for Political Polling
  19. LLMs Acting Deceptively
  20. Exploiting Mistyped URLs
  21. Friday Squid Blogging: Squid Catch Quotas in Peru
  22. Security and Human Behavior (SHB) 2024
  23. The Justice Department Took Down the 911 S5 Botnet
  24. Espionage with a Drone
  25. Online Privacy and Overfishing
  26. Breaking a Password Manager
  27. Seeing Like a Data Structure
  28. AI Will Increase the Quantity—and Quality—of Phishing Scams

May 2024

  1. Friday Squid Blogging: Baby Colossal Squid
  2. How AI Will Change Democracy
  3. Supply Chain Attack against Courtroom Software
  4. Privacy Implications of Tracking Wireless Access Points
  5. Lattice-Based Cryptosystems and Quantum Cryptanalysis
  6. Friday Squid Blogging: Dana Squid Attacking Camera
  7. On the Zero-Day Market
  8. Personal AI Assistants and Privacy
  9. Unredacting Pixelated Text
  10. Detecting Malicious Trackers
  11. IBM Sells Cybersecurity Group
  12. Friday Squid Blogging: Emotional Support Squid
  13. FBI Seizes BreachForums Website
  14. Zero-Trust DNS
  15. Upcoming Speaking Engagements
  16. Another Chrome Vulnerability
  17. LLMs’ Data-Control Path Insecurity
  18. Friday Squid Blogging: Squid Mating Strategies
  19. New Attack Against Self-Driving Car AI
  20. How Criminals Are Using Generative AI
  21. New Attack on VPNs
  22. New Lawsuit Attempting to Make Adversarial Interoperability Legal
  23. Friday Squid Blogging: Squid Purses
  24. My TED Talks
  25. Rare Interviews with Enigma Cryptanalyst Marian Rejewski
  26. The UK Bans Default Passwords
  27. AI Voice Scam

April 2024

  1. WhatsApp in India
  2. Whale Song Code
  3. Friday Squid Blogging: Searching for the Colossal Squid
  4. Long Article on GM Spying on Its Cars’ Drivers
  5. The Rise of Large-Language-Model Optimization
  6. Dan Solove on Privacy Regulation
  7. Microsoft and Security Incentives
  8. Using Legitimate GitHub URLs for Malware
  9. Friday Squid Blogging: Squid Trackers
  10. Other Attempts to Take Over Open Source Projects
  11. Using AI-Generated Legislative Amendments as a Delaying Technique
  12. X.com Automatically Changing Link Text but Not URLs
  13. New Lattice Cryptanalytic Technique
  14. Upcoming Speaking Engagements
  15. Friday Squid Blogging: The Awfulness of Squid Fishing Boats
  16. Smuggling Gold by Disguising it as Machine Parts
  17. Backdoor in XZ Utils That Almost Happened
  18. In Memoriam: Ross Anderson, 1956–2024
  19. US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack
  20. Security Vulnerability of HTML Emails
  21. Friday Squid Blogging: SqUID Bots
  22. Maybe the Phone System Surveillance Vulnerabilities Will Be Fixed
  23. Surveillance by the New Microsoft Outlook App
  24. Class-Action Lawsuit against Google’s Incognito Mode
  25. XZ Utils Backdoor
  26. Declassified NSA Newsletters
  27. Magic Security Dust
  28. Ross Anderson

March 2024

  1. Friday Squid Blogging: The Geopolitics of Eating Squid
  2. Lessons from a Ransomware Attack against the British Library
  3. Hardware Vulnerability in Apple’s M-Series Chips
  4. Security Vulnerability in Saflok’s RFID-Based Keycard Locks
  5. On Secure Voting Systems
  6. Licensing AI Engineers
  7. Friday Squid Blogging: New Species of Squid Discovered
  8. Google Pays $10M in Bug Bounties in 2023
  9. Public AI as an Alternative to Corporate AI
  10. Cheating Automatic Toll Booths by Obscuring License Plates
  11. AI and the Evolution of Social Media
  12. Drones and the US Air Force
  13. Friday Squid Blogging: Operation Squid
  14. Improving C++
  15. Automakers Are Sharing Driver Data with Insurers without Consent
  16. Burglars Using Wi-Fi Jammers to Disable Security Cameras
  17. Jailbreaking LLMs with ASCII Art
  18. Using LLMs to Unredact Text
  19. Friday Squid Blogging: New Plant Looks Like a Squid
  20. Essays from the Second IWORD
  21. A Taxonomy of Prompt Injection Attacks
  22. How Public AI Can Strengthen Democracy
  23. Surveillance through Push Notifications
  24. The Insecurity of Video Doorbells
  25. LLM Prompt Injection Worm
  26. Friday Squid Blogging: New Extinct Species of Vampire Squid Discovered
  27. NIST Cybersecurity Framework 2.0

February 2024

  1. How the “Frontier” Became the Slogan of Uncontrolled AI
  2. A Cyber Insurance Backstop
  3. China Surveillance Company Hacked
  4. Apple Announces Post-Quantum Encryption Algorithms for iMessage
  5. Friday Squid Blogging: Illex Squid and Climate Change
  6. AIs Hacking Websites
  7. New Image/Video Prompt Injection Attacks
  8. Details of a Phone Scam
  9. Microsoft Is Spying on Users of Its AI Tools
  10. European Court of Human Rights Rejects Encryption Backdoors
  11. Friday Squid Blogging: Vegan Squid-Ink Pasta
  12. On the Insecurity of Software Bloat
  13. Upcoming Speaking Engagements
  14. Improving the Cryptanalysis of Lattice-Based Public-Key Algorithms
  15. A Hacker’s Mind is Out in Paperback
  16. Molly White Reviews Blockchain Book
  17. On Passkey Usability
  18. Friday Squid Blogging: A Penguin Named “Squid”
  19. No, Toothbrushes Were Not Used in a Massive DDoS Attack
  20. On Software Liabilities
  21. Teaching LLMs to Be Deceptive
  22. Documents about the NSA’s Banning of Furby Toys in the 1990s
  23. Deepfake Fraud
  24. Friday Squid Blogging: Illex Squid in Argentina Waters
  25. David Kahn
  26. A Self-Enforcing Protocol to Solve Gerrymandering
  27. Facebook’s Extensive Surveillance Network

January 2024

  1. CFPB’s Proposed Data Rules
  2. New Images of Colossus Released
  3. NSA Buying Bulk Surveillance Data on Americans without a Warrant
  4. Microsoft Executives Hacked
  5. Friday Squid Blogging: Footage of Black-Eyed Squid Brooding Her Eggs
  6. Chatbots and Human Conversation
  7. Quantum Computing Skeptics
  8. Poisoning AI Models
  9. Side Channels Are Common
  10. AI Bots on X (Twitter)
  11. Friday Squid Blogging: New Foods from Squid Fins
  12. Zelle Is Using My Name and Voice without My Consent
  13. Speaking to the CIA’s Creative Writing Group
  14. Canadian Citizen Gets Phone Back from Police
  15. Code Written with AI Assistants Is Less Secure
  16. The Story of the Mirai Botnet
  17. Voice Cloning with Very Short Samples
  18. Upcoming Speaking Engagements
  19. Friday Squid Blogging: Giant Squid from Newfoundland in the 1800s
  20. On IoT Devices and Software Liability
  21. Pharmacies Giving Patient Records to Police without Warrants
  22. Facial Scanning by Burger King in Brazil
  23. PIN-Stealing Android Malware
  24. Second Interdisciplinary Workshop on Reimagining Democracy
  25. Friday Squid Blogging—18th Anniversary Post: New Species of Pygmy Squid Discovered
  26. Improving Shor’s Algorithm
  27. New iPhone Exploit Uses Four Zero-Days
  28. Facial Recognition Systems in the US
  29. TikTok Editorial Analysis

2023 308

December 2023

  1. Friday Squid Blogging: Sqids
  2. AI Is Scarily Good at Guessing the Location of Random Photos
  3. AI and Lossy Bottlenecks
  4. New iPhone Security Features to Protect Stolen Devices
  5. Google Stops Collecting Location Data from Maps
  6. Friday Squid Blogging: Squid Parts into Fertilizer
  7. Ben Rothke’s Review of A Hacker’s Mind
  8. Data Exfiltration Using Indirect Prompt Injection
  9. Cyberattack on Ukraine’s Kyivstar Seems to Be Russian Hacktivists
  10. GCHQ Christmas Codebreaking Challenge
  11. OpenAI Is Not Training on Your Dropbox Documents—Today
  12. Police Get Medical Records without a Warrant
  13. Friday Squid Blogging: Underwater Sculptures Use Squid Ink for Coloring
  14. Trusted and Trustworthy AI
  15. Surveillance Cameras Disguised as Clothes Hooks
  16. Surveillance by the US Postal Service
  17. New Windows/Linux Firmware Attack
  18. Facebook Enables Messenger End-to-End Encryption by Default
  19. Friday Squid Blogging: Influencer Accidentally Posts Restaurant Table QR Ordering Code
  20. New Bluetooth Attack
  21. Spying through Push Notifications
  22. Security Analysis of a Thirteenth-Century Venetian Election Protocol
  23. AI and Mass Spying
  24. AI and Trust
  25. Friday Squid Blogging: Strawberry Squid in the Galápagos
  26. AI Decides to Engage in Insider Trading

November 2023

  1. Extracting GPT’s Training Data
  2. Breaking Laptop Fingerprint Sensors
  3. Digital Car Keys Are Coming
  4. Secret White House Warrantless Surveillance Program
  5. Friday Squid Blogging: Squid Nebula
  6. Chocolate Swiss Army Knife
  7. LitterDrifter USB Worm
  8. Apple to Add Manual Authentication to iMessage
  9. Email Security Flaw Found in the Wild
  10. Using Generative AI for Surveillance
  11. Friday Squid Blogging: Unpatched Vulnerabilities in the Squid Caching Proxy
  12. Ransomware Gang Files SEC Complaint
  13. FTC’s Voice Cloning Challenge
  14. Leaving Authentication Credentials in Public Code
  15. New SSH Vulnerability
  16. Upcoming Speaking Engagements
  17. How .tk Became a TLD for Scammers
  18. Ten Ways AI Will Change Democracy
  19. Friday Squid Blogging: The History and Morality of US Squid Consumption
  20. The Privacy Disaster of Modern Smart Cars
  21. Online Retail Hack
  22. Decoupling for Security
  23. Spaf on the Morris Worm
  24. Crashing iPhones with a Flipper Zero
  25. Friday Squid Blogging: Eating Dancing Squid
  26. New York Increases Cybersecurity Rules for Financial Companies
  27. Spyware in India

October 2023

  1. The Future of Drone Warfare
  2. Hacking Scandinavian Alcohol Tax
  3. Friday Squid Blogging: On the Ugliness of Squid Fishing
  4. Messaging Service Wiretap Discovered through Expired TLS Cert
  5. New NSA Information from (and about) Snowden
  6. Microsoft is Soft-Launching Security Copilot
  7. EPA Won’t Force Water Utilities to Audit Their Cybersecurity
  8. Child Exploitation and the Crypto Wars
  9. Friday Squid Blogging: Why There Are No Giant Squid in Aquariums
  10. AI and US Election Rules
  11. Former Uber CISO Appealing His Conviction
  12. Analysis of Intellexa’s Predator Spyware
  13. Security Vulnerability of Switzerland’s E-Voting System
  14. Coin Flips Are Biased
  15. Friday Squid Blogging: On Squid Intelligence
  16. Hacking the High School Grading System
  17. Bounty to Recover NIST’s Elliptic Curve Seeds
  18. Cisco Can’t Stop Using Hard-Coded Passwords
  19. Model Extraction Attack on Neural Networks
  20. AI Risks
  21. Deepfake Election Interference in Slovakia
  22. Political Disinformation and AI
  23. Malicious Ads in Bing Chat
  24. Hacking Gas Pumps via Bluetooth
  25. NSA AI Security Center

September 2023

  1. Friday Squid Blogging: Protecting Cephalopods in Medical Research
  2. Critical Vulnerability in libwebp Library
  3. Signal Will Leave the UK Rather Than Add a Backdoor
  4. Friday Squid Blogging: New Squid Species
  5. New Revelations from the Snowden Documents
  6. On the Cybersecurity Jobs Shortage
  7. Detecting AI-Generated Text
  8. Using Hacked LastPass Keys to Steal Cryptocurrency
  9. Friday Squid Blogging: Cleaning Squid
  10. LLM Summary of My Book Beyond Fear
  11. On Technologies for Automatic Facial Recognition
  12. Upcoming Speaking Engagements
  13. Fake Signal and Telegram Apps in the Google Play Store
  14. Zero-Click Exploit in iPhones
  15. Cars Have Terrible Data Privacy
  16. On Robots Killing People
  17. Friday Squid Blogging: Glass Squid Video
  18. LLMs and Tool Use
  19. The Hacker Tool to Get Personal Data from Credit Bureaus
  20. Cryptocurrency Startup Loses Encryption Key for Electronic Wallet
  21. Inconsistencies in the Common Vulnerability Scoring System (CVSS)
  22. Friday Squid Blogging: We’re Genetically Engineering Squid Now
  23. Spyware Vendor Hacked

August 2023

  1. Own Your Own Government Surveillance Van
  2. When Apps Go Rogue
  3. Identity Theft from 1965 Uncovered through Face Recognition
  4. Remotely Stopping Polish Trains
  5. Friday Squid Blogging: China’s Squid Fishing Ban Ineffective
  6. Hacking Food Labeling Laws
  7. Parmesan Anti-Forgery Protection
  8. December’s Reimagining Democracy Workshop
  9. Applying AI to License Plate Surveillance
  10. White House Announces AI Cybersecurity Challenge
  11. Friday Squid Blogging: Squid Brand Fish Sauce
  12. Bots Are Better than Humans at Solving CAPTCHAs
  13. Detecting “Violations of Social Norms” in Text with AI
  14. UK Electoral Commission Hacked
  15. Zoom Can Spy on Your Calls and Use the Conversation to Train AI, But Says That It Won’t
  16. China Hacked Japan’s Military Networks
  17. Friday Squid Blogging: NIWA Annual Squid Survey
  18. The Inability to Simultaneously Verify Sentience, Location, and Identity
  19. Cryptographic Flaw in Libbitcoin Explorer Cryptocurrency Wallet
  20. Using Machine Learning to Detect Keystrokes
  21. You Can’t Rush Post-Quantum-Computing Cryptography Standards
  22. Microsoft Signing Key Stolen by Chinese
  23. Friday Squid Blogging: 2023 Squid Oil Global Market Report
  24. Political Milestones for AI
  25. The Need for Trustworthy AI
  26. New SEC Rules around Cybersecurity Incident Disclosures
  27. Hacking AI Resume Screening with Text in a White Font

July 2023

  1. Automatically Finding Prompt Injection Attacks
  2. Friday Squid Blogging: Zaqistan Flag
  3. Indirect Instruction Injection in Multi-Modal LLMs
  4. Fooling an AI Article Writer
  5. Backdoor in TETRA Police Radios
  6. New York Using AI to Detect Subway Fare Evasion
  7. Google Reportedly Disconnecting Employees from the Internet
  8. Friday Squid Blogging: Chromatophores
  9. AI and Microdirectives
  10. Kevin Mitnick Died
  11. Commentary on the Implementation Plan for the 2023 US National Cybersecurity Strategy
  12. Practice Your Security Prompting Skills
  13. Disabling Self-Driving Cars with a Traffic Cone
  14. Tracking Down a Suspect through Cell Phone Records
  15. Friday Squid Blogging: Balloon Squid
  16. Buying Campaign Contributions as a Hack
  17. French Police Will Be Able to Spy on People through Their Cell Phones
  18. Google Is Using Its Vast Data Stores to Train AI
  19. Privacy of Printing Services
  20. Wisconsin Governor Hacks the Veto Process
  21. Friday Squid Blogging: Giant Squid Nebula
  22. The AI Dividend
  23. Belgian Tax Hack
  24. Class-Action Lawsuit for Scraping Data without Permission
  25. The Password Game
  26. Self-Driving Cars Are Surveillance Cameras on Wheels

June 2023

  1. Friday Squid Blogging: See-Through Squid
  2. The US Is Spying on the UN Secretary General
  3. Redacting Documents with a Black Sharpie Doesn’t Work
  4. Stalkerware Vendor Hacked
  5. Typing Incriminating Evidence in the Memo Field
  6. Excel Data Forensics
  7. Friday Squid Blogging: Giggling Squid
  8. UPS Data Harvested for SMS Phishing Attacks
  9. AI as Sensemaking for Public Comments
  10. Ethical Problems in Computer Security
  11. Power LED Side-Channel Attack
  12. Friday Squid Blogging: Squid Can Edit Their RNA
  13. Security and Human Behavior (SHB) 2023
  14. On the Need for an AI Public Option
  15. Identifying the Idaho Killer
  16. AI-Generated Steganography
  17. Friday Squid Blogging: Light-Emitting Squid
  18. Operation Triangulation: Zero-Click iPhone Malware
  19. Paragon Solutions Spyware: Graphite
  20. How Attorneys Are Harming Cybersecurity Incident Response
  21. Snowden Ten Years Later
  22. The Software-Defined Car
  23. Friday Squid Blogging: Squid Chromolithographs
  24. Open-Source LLMs
  25. On the Catastrophic Risk of AI

May 2023

  1. Chinese Hacking of US Critical Infrastructure
  2. Brute-Forcing a Fingerprint Reader
  3. Friday Squid Blogging: Online Cephalopod Course
  4. Expeditionary Cyberspace Operations
  5. On the Poisoning of LLMs
  6. Indiana, Iowa, and Tennessee Pass Comprehensive Privacy Laws
  7. Credible Handwriting Machine
  8. Google Is Not Deleting Old YouTube Videos
  9. Friday Squid Blogging: Peruvian Squid-Fishing Regulation Drives Chinese Fleets Away
  10. Security Risks of New .zip and .mov Domains
  11. Microsoft Secure Boot Bug
  12. Micro-Star International Signing Key Stolen
  13. Upcoming Speaking Engagements
  14. Friday Squid Blogging: Giant Squid Video
  15. Ted Chiang on the Risks of AI
  16. Building Trustworthy AI
  17. FBI Disables Russian Malware
  18. PIPEDREAM Malware against Industrial Control Systems
  19. AI Hacking Village at DEF CON This Year
  20. Friday Squid Blogging: “Mediterranean Beef Squid” Hoax
  21. Large Language Models and Elections
  22. SolarWinds Detected Six Months Earlier
  23. NIST Draft Document on Post-Quantum Cryptography Guidance

April 2023

  1. Friday Squid Blogging: More Squid Camouflage Research
  2. Hacking the Layoff Process
  3. Security Risks of AI
  4. AI to Aid Democracy
  5. Cyberweapons Manufacturer QuaDream Shuts Down
  6. UK Threatens End-to-End Encryption
  7. Friday Squid Blogging: More on Squid Fishing
  8. Hacking Pickleball
  9. Using the iPhone Recovery Key to Lock Owners Out of Their iPhones
  10. New Zero-Click Exploits against iOS
  11. EFF on the UN Cybercrime Treaty
  12. Using LLMs to Create Bioweapons
  13. Swatting as a Service
  14. Friday Squid Blogging: Colossal Squid
  15. Upcoming Speaking Engagements
  16. Hacking Suicide
  17. Gaining an Advantage in Roulette
  18. Bypassing a Theft Threat Model
  19. FBI Advising People to Avoid Public Charging Stations
  20. Car Thieves Hacking the CAN Bus
  21. LLMs and Phishing
  22. Friday Squid Blogging: Squid Food Poisoning
  23. Research on AI in Adversarial Settings
  24. FBI (and Others) Shut Down Genesis Market
  25. North Korea Hacking Cryptocurrency Sites with 3CX Exploit
  26. UK Runs Fake DDoS-for-Hire Sites

March 2023

  1. Friday Squid Blogging: Giant Squid vs. Blue Marlin
  2. Russian Cyberwarfare Documents Leaked
  3. The Security Vulnerabilities of Message Interoperability
  4. Security Vulnerabilities in Snipping Tools
  5. Hacks at Pwn2Own Vancouver 2023
  6. Friday Squid Blogging: Creating Batteries Out of Squid Cells
  7. A Hacker’s Mind News
  8. Exploding USB Sticks
  9. Mass Ransomware Attack
  10. ChatGPT Privacy Flaw
  11. US Citizen Hacked by Spyware
  12. Friday Squid Blogging: New Species of Vampire Squid Lives 3,000 Feet below Sea Level
  13. Upcoming Speaking Engagements
  14. How AI Could Write Our Laws
  15. NetWire Remote Access Trojan Maker Arrested
  16. Friday Squid Blogging: Chinese Squid Fishing in the Southeast Pacific
  17. Elephant Hackers
  18. Another Malware with Persistence
  19. BlackLotus Malware Hijacks Windows Secure Boot Process
  20. Prompt Injection Attacks on Large Language Models
  21. New National Cybersecurity Strategy
  22. Friday Squid Blogging: We’re Almost at Flying Squid Drones
  23. Nick Weaver on Regulating Cryptocurrency
  24. Dumb Password Rules
  25. Fooling a Voice Authentication System with an AI-Generated Voice

February 2023

  1. Side-Channel Attack against CRYSTALS-Kyber
  2. Banning TikTok
  3. Friday Squid Blogging: Squid Processing Facility
  4. Putting Undetectable Backdoors in Machine Learning Models
  5. Cyberwar Lessons from the War in Ukraine
  6. A Device to Turn Traffic Lights Green
  7. The Insecurity of Photo Cropping
  8. Fines as a Security System
  9. Friday Squid Blogging: Thermal Batteries from Squid Proteins
  10. Defending against AI Lobbyists
  11. ChatGPT Is Ingesting Corporate Secrets
  12. Camera the Size of a Grain of Salt
  13. Upcoming Speaking Engagements
  14. What Will It Take?
  15. On Pig Butchering Scams
  16. Friday Squid Blogging: Squid Is a Blockchain Thingy
  17. A Hacker’s Mind Is Now Published
  18. Hacking the Tax Code
  19. Mary Queen of Scots Letters Decrypted
  20. SolarWinds and Market Incentives
  21. Malware Delivered through Google Search
  22. Attacking Machine Learning Systems
  23. Friday Squid Blogging: Studying the Colossal Squid
  24. A Hacker’s Mind News
  25. Manipulating Weights in Face-Recognition AI Systems
  26. AIs as Computer Hackers
  27. Passwords Are Terrible (Surprising No One)

January 2023

  1. Ransomware Payments Are Down
  2. NIST Is Updating Its Cybersecurity Framework
  3. Friday Squid Blogging: Squid-Inspired Hydrogel
  4. Kevin Mitnick Hacked California Law in 1983
  5. A Guide to Phishing Attacks
  6. On Alec Baldwin’s Shooting
  7. US Cyber Command Operations During the 2022 Midterm Elections
  8. Bulk Surveillance of Money Transfers
  9. No-Fly List Exposed
  10. Publisher’s Weekly Review of A Hacker’s Mind
  11. Friday Squid Blogging: Another Giant Squid Captured on Video
  12. Real-World Steganography
  13. Security Analysis of Threema
  14. AI and Political Lobbying
  15. The FBI Identified a Tor User
  16. Hacked Cellebrite and MSAB Software Released
  17. Upcoming Speaking Engagements
  18. Booklist Review of A Hacker’s Mind
  19. Friday Squid Blogging: How to Buy Fresh or Frozen Squid
  20. Threats of Machine-Generated Text
  21. Experian Privacy Vulnerability
  22. ChatGPT-Written Malware
  23. Identifying People Using Cell Phone Location Data
  24. Friday Squid Blogging: Squid Fetish
  25. Schneier on Security Audiobook Sale
  26. Remote Vulnerabilities in Automobiles
  27. Decarbonizing Cryptocurrencies through Taxation
  28. Breaking RSA with a Quantum Computer

← 2019–2022