Schneier on Security RSS
Automated toots from the Schneier on Security RSS feed. This account is not affiliated with Bruce Schneier.
Separating AI’s Technological Problems from Its Capitalism Problems
This essay was written with Nathan E. Sanders, and originally appeared in Tech Policy Press.
AI represents the first tim... https://www.schneier.com/blog/archives/2026/08/separating-ais-technological-problems-from-its-capitalism-problems.html
Hacking Public Wi-Fi DNS to Steal Credentials
Criminals are hacking into public Wi-Fi devices—at hotels, conference centers, and so on—around the world and ... https://www.schneier.com/blog/archives/2026/08/hacking-public-wi-fi-dns-to-steal-credentials.html
Criminal Deception in Silicon Valley
Interesting paper:
Abstract: With entrepreneurial fraud cases on the rise, we investigate how entrepreneurs carry out criminal deception... https://www.schneier.com/blog/archives/2026/08/criminal-deception-in-silicon-valley.html
More Incidents of AIs Going Rogue in Cybersecurity Challenges
The AI Security Institute has a new report of AI systems engaging in “unsanctioned behavior”—what I have been calling &#... https://www.schneier.com/blog/archives/2026/08/more-incidents-of-ais-going-rogue-in-cybersecurity-challenges.html
ICE Collecting DNA Samples
ICE collected nearly a million DNA samples last year.... https://www.schneier.com/blog/archives/2026/08/ice-collecting-dna-samples.html
#nationalsecuritypolicy #homelandsecurity #identification #Uncategorized #databases #DNA #FBI
Spyware for Babies
The New York Times has a long article (alt link) on surveillance systems aimed at babies. They are increas... https://www.schneier.com/blog/archives/2026/08/spyware-for-babies.html
#Uncategorized #surveillance #healthcare #children #privacy #spyware #AI
AI Genie in the Wild
When I give talks about AI genies, I use this sort of example as a hypothetical. It’s ... https://www.schneier.com/blog/archives/2026/08/ai-genie-in-the-wild.html
AI Doesn’t Mean the End of Mathematics—at Least Not Yet
This essay was written with Kasra Rafi, and originally appeared in The Guardian.
Earlier this month, about 40 top mathematicians
Detailed Timeline of OpenAI’s Cyberattack on Hugging Face
OpenAI presented details of its AI’s model’s cyberattack on Hugging Face at Black Hat last week. Simon Willison
Police Are Hiding Their Use of Flock Surveillance Cameras
A usage policy for Flock license plate reader cameras tells police not to talk about the cameras:
When cops use ... https://www.schneier.com/blog/archives/2026/08/police-are-hiding-their-use-of-flock-surveillance-cameras.html
LLMs and Contextual Integrity
I have been thinking a lot about AI and integrity. Part of that is contextual integrity. I recently found two papers on the topic.
“CIMemories: A Compositional Benchmark for Contextual Integr... https://www.schneier.com/blog/archives/2026/08/llms-and-contextual-integrity.html
Friday Squid Blogging: Searching for the Colossal Squid
Fascinating video about searching for life undersea. The video basically makes the point that our bright white searchlights are scaring everything away, and that red light is more neutral. ... https://www.schneier.com/blog/archives/2026/08/friday-squid-blogging-searching-for-the-colossal-squid-2.html
How Dangerous Is Anthropic’s Mythos AI?
Last month, Anthropic made a remarkable announcement about its new model, Claude Mythos Preview: it was so good at finding security vulnerabilities in software that the company would not... https://www.schneier.com/blog/archives/2026/05/how-dangerous-is-anthropics-mythos-ai.html
#vulnerabilities #Uncategorized #regulation #patching #hacking #laws #LLM #AI
LLMs and Text-in-Text Steganography
Turns out that LLMs are really good at hiding text messages in other text messages.... https://www.schneier.com/blog/archives/2026/05/llms-and-text-in-text-steganography.html
ICE Uses Graphite Spyware
ICE has admitted that it uses spyware from the Israeli company Graphite.... https://www.schneier.com/blog/archives/2026/04/ice-uses-graphite-spyware.html
#homelandsecurity #Uncategorized #surveillance #privacy #spyware #Israel
Hacking Polymarket
Polymarket is a platform where people can bet on real-world events, political and otherwise. Leaving the ethical considerations of this aside (for one, it facilitates assassination),... https://www.schneier.com/blog/archives/2026/05/hacking-polymarket.html
#assassinations #Uncategorized #cheating #gambling #insiders #hacking
Friday Squid Blogging: How Squid Survived Extinction Events
Science news:
Scientists have finally cracked a long-standing mystery about squid and cuttlefish evolution by analyzing newly sequenced genomes alongsi... https://www.schneier.com/blog/archives/2026/04/friday-squid-blogging-how-squid-survived-extinction-events.html
Is “Satoshi Nakamoto” Really Adam Back?
The New York Times has a long article where the author lays out an impressive array of circumstantial evidence that the inventor of B... https://www.schneier.com/blog/archives/2026/04/is-satoshi-nakamoto-really-adam-back.html
Friday Squid Blogging: Giant Squid Live in the Waters of Western Australia
Evidence of them has been found by a... https://www.schneier.com/blog/archives/2026/05/friday-squid-blogging-giant-squid-live-in-the-waters-of-western-australia.html
Insider Betting on Polymarket
Insider trading is rife on Polymarket:
Analysis by the Anti-Corruption Data Collective, a non-profit research ... https://www.schneier.com/blog/archives/2026/05/insider-betting-on-polymarket.html
Rowhammer Attack Against NVIDIA Chips
A new rowhammer attack gives complete control of NVIDIA CPUs... https://www.schneier.com/blog/archives/2026/05/rowhammer-attack-against-nvidia-chips.html
#academicpapers #Uncategorized #cyberattack #hardware #hacking
A Ransomware Negotiator Was Working for a Ransomware Gang
Someone pleaded guilty to secretly working for a ransomware gang as he negotiated ransomware payments for clients.... https://www.schneier.com/blog/archives/2026/05/a-ransomware-negotiator-was-working-for-a-ransomware-gang.html
Claude Mythos Has Found 271 Zero-Days in Firefox
That’s a lot. No, it’s an extraordinary number:
Since February, the Firefox team has been working around the clock using frontie... https://www.schneier.com/blog/archives/2026/04/claude-mythos-has-found-271-zero-days-in-firefox.html
What Anthropic’s Mythos Means for the Future of Cybersecurity
Two weeks ago, Anthropic announced that its new model, Claude Mythos Preview, can autonomously find and weaponize software vulnerabilities, turning them into working exploits without exp... https://www.schneier.com/blog/archives/2026/04/what-anthropics-mythos-means-for-the-future-of-cybersecurity.html
#vulnerabilities #Uncategorized #cybersecurity #patching #LLM #AI
Medieval Encrypted Letter Decoded
Sent by a Spanish diplomat. Apparently people have been working on it since it was rediscovered in 1860.... https://www.schneier.com/blog/archives/2026/04/medieval-encrypted-letter-decoded.html
Friday Squid Blogging: New Giant Squid Video
Pretty fantastic video from Japan of a giant squid eating another squid.
As usual, you can also use this squid post to talk about the security stories in the news tha... https://www.schneier.com/blog/archives/2026/04/friday-squid-blogging-new-giant-squid-video-2.html
Mythos and Cybersecurity
Last week, Anthropic pulled back the curtain on Claude Mythos Preview, an AI model so capable at finding and exploiting software vulnerabilities that the company
Inventors of Quantum Cryptography Win Turing Award
Charles Bennett and Gilles Brassard have won the 2026 Turing Award for inventing quantum cryptography.
I am incredibly pleased to see... https://www.schneier.com/blog/archives/2026/03/inventors-of-quantum-cryptography-win-turing-award.html
#historyofcryptography #quantumcryptography #quantumcomputing #Uncategorized
Apple’s Camera Indicator Lights
A thoughtful review of Apple’s system to alert users that the camera is on. It’s really well-designed, and important in a world where malware could su... https://www.schneier.com/blog/archives/2026/03/apples-camera-indicator-lights.html
Black Hat State of Security Vendors
Andy Ellis has a roundup of the security vendors at Black Hat this year.
Key Takeaways: We have entered into an AI world. While nearly half of b... https://www.schneier.com/blog/archives/2026/08/black-hat-state-of-security-vendors.html
#securityconferences #Uncategorized #conferences #marketing #AI
A Taxonomy of Cognitive Security
Last week, I listened to a fascinating talk by K. Melton on cognitive security, cognitive hacking, and reality pentesting. The slides from the talk are
If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them
This essay was written with Nathan E. Sanders, and originally appeared in The Guardian.
OpenAI, and then
Hiding Bluetooth Trackers in Mail
It was used to track a D... https://www.schneier.com/blog/archives/2026/04/hiding-bluetooth-trackers-in-mail.html
Fast16 Malware
Researchers have reverse-engineered a piece of malware named Fast16. It’s almost certainly state-sponsored, probably US in origin, and was
Mexican Surveillance Company
Grupo Seguritech is a Mexican surveillance company that is expanding into the US.... https://www.schneier.com/blog/archives/2026/04/mexican-surveillance-company.html
Smart Glasses for the Authorities
ICE is developing its own version of smart glasses, with facial recognition tied to various databases.... https://www.schneier.com/blog/archives/2026/05/smart-glasses-for-the-authorities.html
FBI Extracts Deleted Signal Messages from iPhone Notification Database
404 Media reports (alternate site):
The FBI was able to forensic... https://www.schneier.com/blog/archives/2026/04/fbi-extracts-deleted-signal-messages-from-iphone-notification-database.html
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak:
I’m speaking, signing books, and participating in panel discussions at LAcon V in Anaheim, California, USA. My full schedule is
Friday Squid Blogging: Neon Flying Squid
The neon flying squid can fly in formation.
The shoal of about 100 squid ro... https://www.schneier.com/blog/archives/2026/08/friday-squid-blogging-neon-flying-squid.html
Is “Hackback” Official US Cybersecurity Strategy?
The 2026 US “Cyber Strategy for America” document is mostly the same thing we’ve seen out of the White House for ... https://www.schneier.com/blog/archives/2026/04/is-hackback-official-us-cybersecurity-strategy.html
#nationalsecuritypolicy #Uncategorized #cybersecurity #hackback #hacking
LLM-Based Social Engineering Scams
OpenAI disrupted a social engineering group from Cambodia that used ChatGPT. Its scope is impressive:
The network simultaneously con... https://www.schneier.com/blog/archives/2026/08/llm-based-social-engineering-scams.html
DarkSword Malware
DarkSword is a sophisticated piece of malware—probably government designed—that targets iOS.
Google Threat Intelligen... https://www.schneier.com/blog/archives/2026/05/darksword-malware.html
#vulnerabilities #Uncategorized #cybercrime #exploits #zero-day #malware #Apple #iOS
Prompt Injections for Defense
This seems to work:
Researchers from Tracebit on Monday
AI Is Learning to Write Genetic Code
This sort of research is both exciting and terrifying:
The two models in question were told to generate c... https://www.schneier.com/blog/archives/2026/08/ai-is-learning-to-write-genetic-code.html
Friday Squid Blogging: Truckload of Squid Spills in Rhode Island
Ugh:
A tractor-trailer rollover sent a truckload of squid spilling into a Rhode Island roadway, leaving a stench as they sat... https://www.schneier.com/blog/archives/2026/08/friday-squid-blogging-truckload-of-squid-spills-in-rhode-island.html
Friday Squid Blogging: Bioluminescent Bacteria in Squid
The Hawaiian bobtail squid has bioluminescent bacteria.... https://www.schneier.com/blog/archives/2026/03/friday-squid-blogging-bioluminescent-bacteria-in-squid.html