Schneier on Security RSS

How Dangerous Is Anthropic’s Mythos AI?

Last month, Anthropic made a remarkable announcement about its new model, Claude Mythos Preview: it was so good at finding security vulnerabilities in software that the company would not... https://www.schneier.com/blog/archives/2026/05/how-dangerous-is-anthropics-mythos-ai.html

#vulnerabilities #Uncategorized #regulation #patching #hacking #laws #LLM #AI

LLMs and Text-in-Text Steganography

Turns out that LLMs are really good at hiding text messages in other text messages.... https://www.schneier.com/blog/archives/2026/05/llms-and-text-in-text-steganography.html

#academicpapers #Uncategorized #steganography #LLM

Friday Squid Blogging: Giant Squid Live in the Waters of Western Australia

Evidence of them has been found by a... https://www.schneier.com/blog/archives/2026/05/friday-squid-blogging-giant-squid-live-in-the-waters-of-western-australia.html

#Uncategorized #squid

Insider Betting on Polymarket

Insider trading is rife on Polymarket:
Analysis by the Anti-Corruption Data Collective, a non-profit research ... https://www.schneier.com/blog/archives/2026/05/insider-betting-on-polymarket.html

#Uncategorized #gambling #insiders

Smart Glasses for the Authorities

ICE is developing its own version of smart glasses, with facial recognition tied to various databases.... https://www.schneier.com/blog/archives/2026/05/smart-glasses-for-the-authorities.html

#facerecognition #Uncategorized #biometrics #DHS

Rowhammer Attack Against NVIDIA Chips

A new rowhammer attack gives complete control of NVIDIA CPUs... https://www.schneier.com/blog/archives/2026/05/rowhammer-attack-against-nvidia-chips.html

#academicpapers #Uncategorized #cyberattack #hardware #hacking

DarkSword Malware

DarkSword is a sophisticated piece of malware—probably government designed—that targets iOS.
Google Threat Intelligen... https://www.schneier.com/blog/archives/2026/05/darksword-malware.html

#vulnerabilities #Uncategorized #cybercrime #exploits #zero-day #malware #Apple #iOS

Hacking Polymarket

Polymarket is a platform where people can bet on real-world events, political and otherwise. Leaving the ethical considerations of this aside (for one, it facilitates assassination),... https://www.schneier.com/blog/archives/2026/05/hacking-polymarket.html

#assassinations #Uncategorized #cheating #gambling #insiders #hacking

A Ransomware Negotiator Was Working for a Ransomware Gang

Someone pleaded guilty to secretly working for a ransomware gang as he negotiated ransomware payments for clients.... https://www.schneier.com/blog/archives/2026/05/a-ransomware-negotiator-was-working-for-a-ransomware-gang.html

#Uncategorized #cybercrime #ransomware

Fast16 Malware

Researchers have reverse-engineered a piece of malware named Fast16. It’s almost certainly state-sponsored, probably US in origin, and was

Claude Mythos Has Found 271 Zero-Days in Firefox

That’s a lot. No, it’s an extraordinary number:
Since February, the Firefox team has been working around the clock using frontie... https://www.schneier.com/blog/archives/2026/04/claude-mythos-has-found-271-zero-days-in-firefox.html

#Uncategorized #zero-day #Firefox #AI

What Anthropic’s Mythos Means for the Future of Cybersecurity

Two weeks ago, Anthropic announced that its new model, Claude Mythos Preview, can autonomously find and weaponize software vulnerabilities, turning them into working exploits without exp... https://www.schneier.com/blog/archives/2026/04/what-anthropics-mythos-means-for-the-future-of-cybersecurity.html

#vulnerabilities #Uncategorized #cybersecurity #patching #LLM #AI

Medieval Encrypted Letter Decoded

Sent by a Spanish diplomat. Apparently people have been working on it since it was rediscovered in 1860.... https://www.schneier.com/blog/archives/2026/04/medieval-encrypted-letter-decoded.html

#historyofcryptography #Uncategorized

Friday Squid Blogging: How Squid Survived Extinction Events

Science news:
Scientists have finally cracked a long-standing mystery about squid and cuttlefish evolution by analyzing newly sequenced genomes alongsi... https://www.schneier.com/blog/archives/2026/04/friday-squid-blogging-how-squid-survived-extinction-events.html

#Uncategorized #squid

Hiding Bluetooth Trackers in Mail

It was used to track a D... https://www.schneier.com/blog/archives/2026/04/hiding-bluetooth-trackers-in-mail.html

#Uncategorized #Bluetooth #tracking

FBI Extracts Deleted Signal Messages from iPhone Notification Database

404 Media reports (alternate site):
The FBI was able to forensic... https://www.schneier.com/blog/archives/2026/04/fbi-extracts-deleted-signal-messages-from-iphone-notification-database.html

#Uncategorized #databases #terrorism #iPhone #FBI

ICE Uses Graphite Spyware

ICE has admitted that it uses spyware from the Israeli company Graphite.... https://www.schneier.com/blog/archives/2026/04/ice-uses-graphite-spyware.html

#homelandsecurity #Uncategorized #surveillance #privacy #spyware #Israel

Mexican Surveillance Company

Grupo Seguritech is a Mexican surveillance company that is expanding into the US.... https://www.schneier.com/blog/archives/2026/04/mexican-surveillance-company.html

#Uncategorized #surveillance #privacy #Mexico

Is “Satoshi Nakamoto” Really Adam Back?

The New York Times has a long article where the author lays out an impressive array of circumstantial evidence that the inventor of B... https://www.schneier.com/blog/archives/2026/04/is-satoshi-nakamoto-really-adam-back.html

#cryptocurrency #Uncategorized #pseudonymity #bitcoin

Friday Squid Blogging: New Giant Squid Video

Pretty fantastic video from Japan of a giant squid eating another squid.
As usual, you can also use this squid post to talk about the security stories in the news tha... https://www.schneier.com/blog/archives/2026/04/friday-squid-blogging-new-giant-squid-video-2.html

#Uncategorized #squid #video

Mythos and Cybersecurity

Last week, Anthropic pulled back the curtain on Claude Mythos Preview, an AI model so capable at finding and exploiting software vulnerabilities that the company

Is “Hackback” Official US Cybersecurity Strategy?

The 2026 US “Cyber Strategy for America” document is mostly the same thing we’ve seen out of the White House for ... https://www.schneier.com/blog/archives/2026/04/is-hackback-official-us-cybersecurity-strategy.html

#nationalsecuritypolicy #Uncategorized #cybersecurity #hackback #hacking

A Taxonomy of Cognitive Security

Last week, I listened to a fascinating talk by K. Melton on cognitive security, cognitive hacking, and reality pentesting. The slides from the talk are

Inventors of Quantum Cryptography Win Turing Award

Charles Bennett and Gilles Brassard have won the 2026 Turing Award for inventing quantum cryptography.
I am incredibly pleased to see... https://www.schneier.com/blog/archives/2026/03/inventors-of-quantum-cryptography-win-turing-award.html

#historyofcryptography #quantumcryptography #quantumcomputing #Uncategorized

Apple’s Camera Indicator Lights

A thoughtful review of Apple’s system to alert users that the camera is on. It’s really well-designed, and important in a world where malware could su... https://www.schneier.com/blog/archives/2026/03/apples-camera-indicator-lights.html

#Uncategorized #cameras #malware #Apple

Friday Squid Blogging: Bioluminescent Bacteria in Squid

The Hawaiian bobtail squid has bioluminescent bacteria.... https://www.schneier.com/blog/archives/2026/03/friday-squid-blogging-bioluminescent-bacteria-in-squid.html

#Uncategorized

As the US Midterms Approach, AI Is Going to Emerge as a Key Issue Concerning Voters

In December, the Trump administration signed an executive order that neutered states’ ability to regulate AI by ordering his administration to both sue... https://www.schneier.com/blog/archives/2026/03/as-the-us-midterms-approach-ai-is-going-to-emerge-as-a-key-issue-concerning-voters.html

#Uncategorized #LLM #AI

Sen. Wyden Warns of Another Section 702 Abuse

Sen. Ron Wyden is warning us of an abuse of Section 702:
Wyden took to the Senate floor... https://www.schneier.com/blog/archives/2026/03/sen-wyden-warns-of-another-section-702-abuse.html

#Uncategorized #surveillance #privacy #NSA

Team Mirai and Democracy

Japan’s election last month and the rise of the country’s newest and most innovative pol... https://www.schneier.com/blog/archives/2026/03/team-mirai-and-democracy.html

#Uncategorized #democracy #Japan #LLM #AI

Microsoft Xbox One Hacked

It’s an impress... https://www.schneier.com/blog/archives/2026/03/microsoft-xbox-hacked.html

#Uncategorized #Microsoft #hacking

Friday Squid Blogging: Jumbo Flying Squid in the South Pacific

The population needs better conservation.
As usual, you can also use this squid post to talk about the security stori... https://www.schneier.com/blog/archives/2026/03/friday-squid-blogging-jumbo-flying-squid-in-the-south-pacific.html

#Uncategorized #squid

Proton Mail Shared User Information with the Police

404 Media has a story about Proton Mail giving subscriber data to the Swiss government, who passed the information to the FBI.
It’s... https://www.schneier.com/blog/archives/2026/03/proton-mail-shared-user-information-with-the-police.html

#de-anonymization #Uncategorized #Switzerland #privacy #police #crime #email #FBI

Hacking a Robot Vacuum

Someone tries to remote control his own DJI Romo vacuum, and ends up controlling 7,000 of them from all around the world.
The I... https://www.schneier.com/blog/archives/2026/03/hacking-a-robot-vacuum.html

#InternetofThings #vulnerabilities #Uncategorized

Meta’s AI Glasses and Privacy

Surprising no one, Meta’s new AI glasses are a privacy disaster.
I’m not sure what can be done here. This is ... https://www.schneier.com/blog/archives/2026/03/metas-ai-glasses-and-privacy.html

#Uncategorized #privacy #Meta #AI

South Korean Police Accidentally Post Cryptocurrency Wallet Password

An expensive mistake:

Someone jumped at the opportunity to steal $4.4 million in crypto assets after... https://www.schneier.com/blog/archives/2026/03/south-korean-police-accidentally-post-cryptocurrency-wallet-password.html

#operationalsecurity #cryptocurrency #Uncategorized

Possible New Result in Quantum Factorization

I’m skeptical about—and not qualified to review—this new result in factorization with a quantum computer, but if it’s true it’s a

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak:

I’m giving the Ross Anderson Lecture at the University of Cambridge’s Churchill College at ... https://www.schneier.com/blog/archives/2026/03/upcoming-speaking-engagements-54.html

#Uncategorized #Schneiernews

Friday Squid Blogging: Increased Squid Population in the Falklands

Some good news: squid stocks seem to be recovering in the waters off the Falkland Islands.
As usual, you ... https://www.schneier.com/blog/archives/2026/03/friday-squid-blogging-increased-squid-population-in-the-falklands.html

#Uncategorized #squid

Academia and the “AI Brain Drain”

In 2025, Google, Amazon, Microsoft and Meta collectively spent US$380 billion on building artificial-intelligence tools. That number is expected to surge still higher this year, to $650 billion, to fund the building of physical infrastructure, suc... https://www.schneier.com/blog/archives/2026/03/academia-and-the-ai-brain-drain.html

#Uncategorized #LLM #AI

iPhones and iPads Approved for NATO Classified Data

Apple announcement:
…iPhone and iPad are the first and only consumer devices in compliance with the infor... https://www.schneier.com/blog/archives/2026/03/iphones-and-ipads-approved-for-nato-classified-data.html

#cyberespionage #dataprotection #Uncategorized #smartphones #iPhone #Apple #iPad

Canada Needs Nationalized, Public AI

Canada has a choice to make about its artificial intelligence future. The Carney administration is investing $2-billion over five years in its Sovereign AI C... https://www.schneier.com/blog/archives/2026/03/canada-needs-nationalized-public-ai.html

#Uncategorized #Canada #LLM #AI

Jailbreaking the F-35 Fighter Jet

Countries around the world are becoming increasingly concerned about their dependencies on the US. If you’ve purchase US-made F-35 fighter jets, you are dependent on the US for software maintenance.
The Dutch Defense Secretary recentl... https://www.schneier.com/blog/archives/2026/03/jailbreaking-the-f-35-fighter-jet.html

#nationalsecuritypolicy #Uncategorized #Netherlands #DRM

New Attack Against Wi-Fi

It’s called AirSnitch:
Unlike previous Wi-Fi attacks, AirSnitch exploits core features i... https://www.schneier.com/blog/archives/2026/03/new-attack-against-wi-fi.html

#man-in-the-middleattacks #academicpapers #Uncategorized #cyberattack #Wi-Fi

Friday Squid Blogging: Squid in Byzantine Monk Cooking

This is a very weird story about how squid stayed on the menu of Byzantine monks by falling betwee... https://www.schneier.com/blog/archives/2026/03/friday-squid-blogging-squid-in-byzantine-monk-cooking.html

#Uncategorized #squid

Anthropic and the Pentagon

OpenAI is in and Anthropic is out as a supplier of AI techn... https://www.schneier.com/blog/archives/2026/03/anthropic-and-the-pentagon.html

#DepartmentofDefense #Uncategorized #defense #LLM #AI

Claude Used to Hack Mexican Government

An unknown hacker used Anthropic’s LLM to hack the Mexican government:
The unknown Claude user... https://www.schneier.com/blog/archives/2026/03/claude-used-to-hack-mexican-government.html

#Uncategorized #chatbots #hacking #Mexico #LLM #AI

Israel Hacked Traffic Cameras in Iran

Multiple news