Schneier on Security
- Posts
- 9,557 from 1 Oct 2004 to 6 Nov 2026
- Posting
- about daily (343 in the last year)
- Kind
- personal blog
- Feed
- https://www.schneier.com/feed/
Latest
November 2026
- Friday Squid Blogging: New Jurassic Squid Predecessors
- Pinpointing Location of Videos from Background Airplane Sounds
- AIs Hacking the Law
- AI Vulnerability Finding
October 2026
- Friday Squid Blogging: Bigfin Squid Off California Coast
- Bloatware in Aftermarket Auto Parts
- Studying Fraudulent North Korean IT Workers
- Hiding Capabilities in AI Models
- Bias in Qwen3-Coder Model
- Friday Squid Blogging: Increasing Squid Populations
- Compromised TLS Certificates
- New Serious PHP Vulnerabilities Released and Patched
- Workshop on Economics and Information Security (WEIS) Archive
- Possible new Cellebrite iPhone Radio Zero-Day
- Training AIs to Solve CAPTCHAs
- Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
- Backdooring Open-Weight AI Models
- Measuring Human Cryptanalysis Effort
- Upcoming Speaking Engagements
- The Future of AI Cryptanalysis
- Cyberattack on Connected Fridges in France
- FBI Arrests Suspect in FBI-Hacking Case
- Friday Squid Blogging: I Caught a Squid
- How Technology Empowers—and Imperils—Dictators
- Apple’s Verified Photography System
- Possible Vulnerability in Apple’s Automatic Reboot
- Another Historic Cipher Falls to AI
- Friday Squid Blogging: EU is Trying to Fight Unregulated Squid Fishing
- Unidentified Flock Cameras in Florida
- How American Political Campaigns Are Using AI—and What They’re Spending on the Tools
- Connected Cars Are a Surveillance Platform
September 2026
- I Want Better Reporting on AI Genie Behavior
- Using Device Linking to Eavesdrop on WhatsApp and Signal
- New Attack Against RSA
- Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee
- On Anthropic’s AI Misuse Report
- Malicious npm Packages That Evade Defenses
- Research on Models Engaging in Genie-Like Behavior
- GPT-6 Astra Breaks an Old Enigma Message
- Reverse-Engineering Flock Cameras
- Friday Squid Blogging: On Squid Egg Sacs
- Are AIs Still Struggling with CAPTCHAs?
- How Candidates Could Use AI for Good
- Fake CAPTCHA Scams
- 25 Years of Mass Surveillance Is Enough
- On the NSA’s Supercomputer from the 1960s
- Upcoming Speaking Engagements
- Using AI for Weapons Development
- Microsoft’s Patching
- Friday Squid Blogging: Rotting Squid on a Beached California Boat
- My Talk at DEF CON
- Cliff Stoll’s DEF CON Talk
- AIs Compress Exploit Timeline
- Driver’s License Data for Sale
- Claude Fable Solves a Historical Cipher
- AIs as Modern Genies
- Stealing AI Reasoning Traces
- Automobile Camouflage to Hide from Flock Cameras
- Friday Squid Blogging: Squid on a Stick at the New York State Fair
- Using a VM to Contain an AI Agent
- Security Vulnerability in a Voting System
- AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks
- Researching Employment Scams
- AI Agents Are Now Emailing Me with Their Security Concerns
- Wireless Routers as Motion Detectors
- What’s the Scam?
- Leaked Russian Cyber-Operations Training Materials
- Rewiring Democracy Series on The Renovator
August 2026
- Is Someone Hacking DoD Refrigerators?
- Hiding Prompt Injection in Legal Filing
- Friday Squid Blogging: Truckload of Squid Spills in Rhode Island
- AI Doesn’t Mean the End of Mathematics—at Least Not Yet
- LLM-Based Social Engineering Scams
- Spyware for Babies
- Black Hat State of Security Vendors
- Criminal Deception in Silicon Valley
- Friday Squid Blogging: Neon Flying Squid
- AI Is Learning to Write Genetic Code
- More Incidents of AIs Going Rogue in Cybersecurity Challenges
- Detailed Timeline of OpenAI’s Cyberattack on Hugging Face
- Police Are Hiding Their Use of Flock Surveillance Cameras
- ICE Collecting DNA Samples
- LLMs and Contextual Integrity
- Hacking Public Wi-Fi DNS to Steal Credentials
- Friday Squid Blogging: Searching for the Colossal Squid
- Upcoming Speaking Engagements
- If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them
- Separating AI’s Technological Problems from Its Capitalism Problems
- Prompt Injections for Defense
- AI Genie in the Wild
- AI for Military Support
- Python Now Has a Post-Quantum Encryption Library
- Friday Squid Blogging: Arctic Bobtail Squid Video
- ICE Is Buying Access to Credit Card Records
- Adversarial Clothing Designed to Fool Facial Recognition Systems
- Vulnerabilities in Car Anti-Theft Device
- Iran Cyberattacks Against Minnesota Water Systems
- Some Claude Chats Are Searchable on Google
- More on the OpenAI Agent’s Attack on Hugging Face
- The OpenAI Hack Shows the Genie Is Out of the Bottle
July 2026
- Friday Squid Blogging: Squid Helps Discover New Marine Species
- Anthropic’s Opus 5 Is Better at Resisting Prompt Injection
- Facial Recognition at Madison Square Garden
- American Being Prosecuted for Wiping His Phone Before Handing It Over to Border Officials
- Should You Use AI for a Task? Here’s a Simple Way to Decide
- Measuring the Tendency of AI Agents to Go Rogue
- Long-Lived Vulnerability in Microsoft Secure Boot
- Measuring LLMs’ Ability to Perform Cryptanalysis
- Axon Is Another License Plate Surveillance Company
- Cognyte Sells a Mobile Cell Surveillance Van
- Friday Squid Blogging: Illex Squid Catch in the Falklands
- Why AI Needs a “Genie Coefficient”
- End-to-End Encryption and “Going Dark”
- First-Person Identity Theft Story
- MIT to Become Hotbed of AI Video Surveillance
- On Flock License Plate Tracking Cameras
- Friday Squid Blogging: Squid Washing Up on Cape Cod Beach
- Details of Alan Turing’s Voice Encryption System
- Protecting Privacy in an AI Era
- A Video Screen That Is Also a Camera
- Upcoming Speaking Engagements
- Vulnerability in FIFA’s Network
- AI Data Centers and the Concentration of Wealth
- Friday Squid Blogging: “Squidbleed” Vulnerability
- AI Surveillance and Social Progress
- The Language of AI Could Change How Humans Speak
- Cybersecurity and the Gap Between Skill and Ability
- Google Is Suing Chinese Scammers Who Are Using Gemini
- France to Stop Certifying Non-Quantum-Safe Encryption
- Flock Cameras Can Surveil Cars Without License Plates
- Cybersecurity Mission Creep in the US
- Papa Johns Surveillance-Based Advertising
June 2026
- The Realities of AI Video Surveillance
- Factoring RSA Keys with Many Zeros
- Robot Police Officers
- Friday Squid Blogging: The Chinese Control the Majority of Argentina’s Squid Fleet
- Meta Is Testing Facial Recognition for Police and Military
- One Million Passports Leaked Online
- AI and Liability
- Interesting Paper Exploring Prompt Injection
- Embedding Forbidden Text in Spyware to Discourage AI Analysis
- Anthropic’s Fable 5 Model Jailbroken Within Days
- Professional Athletes and Wearables
- Friday Squid Blogging: Victims of Unregulated Squid Fishing
- Anthropic’s Fable and the State of AI
- Embedding Forbidden Text in Spyware to Discourage AI Analysis
- AI Use by the US Government
- Flock Cameras Are Being Used for Stalking
- The FCC Wants to Eliminate Burner Phones
- Upcoming Speaking Engagements
Every year
2026 2982025 3072024 3182023 3082022 2962021 2992020 3242019 3472018 3512017 3732016 4342015 4532014 4532013 4942012 4512011 4472010 5152009 5382008 6272007 6862006 6352005 5352004 68