Crypto-Gram Newsletter

Crypto-Gram is a free monthly e-mail digest of posts from Bruce Schneier's Schneier on Security blog.

Recent Issues

January 15, 2019

In this issue:

  1. New Shamoon Variant
  2. Teaching Cybersecurity Policy
  3. Congressional Report on the 2017 Equifax Data Breach
  4. Fraudulent Tactics on Amazon Marketplace
  5. Drone Denial-of-Service Attack against Gatwick Airport
  6. MD5 and SHA-1 Still Used in 2018
  7. Glitter Bomb against Package Thieves
  8. Human Rights by Design
  9. Stealing Nativity Displays
  10. Massive Ad Fraud Scheme Relied on BGP Hijacking
  11. Click Here to Kill Everybody Available as an Audiobook
  12. China's APT10
  13. Long-Range Familial Searching Forensics
  14. Podcast Interview with Eva Galperin
  15. New Attack Against Electrum Bitcoin Wallets
  16. Machine Learning to Detect Software Vulnerabilities
  17. EU Offering Bug Bounties on Critical Open-Source Software
  18. Security Vulnerabilities in Cell Phone Systems
  19. Using a Fake Hand to Defeat Hand-Vein Biometrics
  20. Why Internet Security Is So Bad
  21. Upcoming Speaking Engagements

Read This Issue →

December 15, 2018

In this issue:

  1. Chip Cards Fail to Reduce Credit Card Fraud in the US
  2. Hidden Cameras in Streetlights
  3. Mailing Tech Support a Bomb
  4. Israeli Surveillance Gear
  5. Worst-Case Thinking Breeds Fear and Irrationality
  6. What Happened to Cyber 9/11?
  7. The PCLOB Needs a Director
  8. Information Attacks against Democracies
  9. Using Machine Learning to Create Fake Fingerprints
  10. How Surveillance Inhibits Freedom of Expression
  11. Propaganda and the Weakening of Trust in Government
  12. Distributing Malware By Becoming an Admin on an Open-Source Project
  13. FBI Takes Down a Massive Advertising Fraud Ring
  14. That Bloomberg Supply-Chain-Hack Story
  15. Three-Rotor Enigma Machine Up for Auction Today
  16. Click Here to Kill Everybody News
  17. The DoJ's Secret Legal Arguments to Break Cryptography
  18. Bad Consumer Security Advice
  19. Security Risks of Chatbots
  20. Your Personal Data is Already Stolen
  21. Banks Attacked through Malicious Hardware Connected to the Local Network
  22. Back Issues of the NSA's Cryptolog
  23. 2018 Annual Report from AI Now
  24. New Australian Backdoor Law
  25. Marriott Hack Reported as Chinese State-Sponsored
  26. Real-Time Attacks Against Two-Factor Authentication

Read This Issue →

November 15, 2018

In this issue:

  1. How DNA Databases Violate Everyone's Privacy
  2. Privacy for Tigers
  3. Government Perspective on Supply Chain Security
  4. West Virginia Using Internet Voting
  5. Are the Police Using Smart-Home IoT Devices to Spy on People?
  6. On Disguise
  7. China's Hacking of the Border Gateway Protocol
  8. Android Ad-Fraud Scheme
  9. Detecting Fake Videos
  10. Security Vulnerability in Internet-Connected Construction Cranes
  11. More on the Supermicro Spying Story
  12. Cell Phone Security and Heads of State
  13. ID Systems Throughout the 50 States
  14. Was the Triton Malware Attack Russian in Origin?
  15. Buying Used Voting Machines on eBay
  16. How to Punish Cybercriminals
  17. Troy Hunt on Passwords
  18. Security of Solid-State-Drive Encryption
  19. Consumer Reports Reviews Wireless Home-Security Cameras
  20. iOS 12.1 Vulnerability
  21. Privacy and Security of Data at Universities
  22. The Pentagon Is Publishing Foreign Nation-State Malware
  23. Hiding Secret Messages in Fingerprints
  24. New IoT Security Regulations
  25. Oracle and "Responsible Disclosure"
  26. More Spectre/Meltdown-Like Attacks
  27. Upcoming Speaking Engagements

Read This Issue →

More Issues →

Photo of Bruce Schneier by Per Ervland.

Schneier on Security is a personal website. Opinions expressed are not necessarily those of IBM Resilient.