Schneier on Security

In this issue:

1. Undetectable Backdoors in Machine-Learning Models
2. Clever Cryptocurrency Theft
3. Long Article on NSO Group
4. Java Cryptography Implementation Mistake Allows Digital-Signature Forgeries
5. SMS Phishing Attacks are on the Rise
6. Zero-Day Vulnerabilities Are on the Rise
7. Microsoft Issues Report of Russian Cyberattacks against Ukraine
8. Video Conferencing Apps Sometimes Ignore the Mute Button
9. Using Pupil Reflection in Smartphone Camera Selfies
10. New Sophisticated Malware
11. 15.3 Million Request-Per-Second DDoS Attack
12. Corporate Involvement in International Cybersecurity Treaties
13. Apple Mail Now Blocks Email Trackers
14. ICE Is a Domestic Surveillance Agency
15. Surveillance by Driverless Car
16. Upcoming Speaking Engagements

In this issue:

1. US Critical Infrastructure Companies Will Have to Report When They Are Hacked
2. Breaking RSA through Insufficiently Random Primes
3. “Change Password”
4. Why Vaccine Cards Are So Easily Forged
5. Developer Sabotages Open-Source Software Package
6. White House Warns of Possible Russian Cyberattacks
7. NASA’s Insider Threat Program
8. Linux Improves Its Random Number Generator
9. Gus Simmons’s Memoir
10. A Detailed Look at the Conti Ransomware Gang
11. Stalking with an Apple Watch
12. Chrome Zero-Day from North Korea
13. Bypassing Two-Factor Authentication
14. Wyze Camera Vulnerability
15. Hackers Using Fake Police Data Requests against Tech Companies
16. Cyberweapons Arms Manufacturer FinFisher Shuts Down
17. US Disrupts Russian Botnet
18. AirTags Are Used for Stalking Far More than Previously Reported
19. De-anonymizing Bitcoin
20. John Oliver on Data Brokers
21. Russian Cyberattack against Ukrainian Power Grid Prevented
22. Industrial Control System Malware Discovered
23. Upcoming Speaking Engagements

In this issue:

1. Secret CIA Data Collection Program
2. Vendors are Fixing Security Flaws Faster
3. Possible Government Surveillance of the Otter.ai Transcription App
4. Stealing Bicycles by Swapping QR Codes
5. A New Cybersecurity “Social Contract”
6. Bypassing Apple’s AirTag Security
7. An Elaborate Employment Con in the Internet Age
8. Privacy Violating COVID Tests
9. Insurance Coverage for NotPetya Losses
10. Decrypting Hive Ransomware Data
11. Vulnerability in Stalkerware Apps
12. Details of an NSA Hacking Operation
13. Samsung Encryption Flaw
14. Hacking Alexa through Alexa’s Speech
15. Using Radar to Read Body Language
16. Fraud on Zelle
17. Where’s the Russia-Ukraine Cyberwar?
18. Leak of Russian Censorship Data
19. Upcoming Speaking Events

In this issue:

1. An Examination of the Bug Bounty Marketplace
2. UK Government to Launch PR Campaign Undermining End-to-End Encryption
3. Are Fake COVID Testing Sites Harvesting Data?
4. San Francisco Police Illegally Spying on Protesters
5. China’s Olympics App Is Horribly Insecure
6. Linux-Targeted Malware Increased by 35%
7. Merck Wins Insurance Lawsuit re NotPetya Attack
8. New DeadBolt Ransomware Targets NAS Devices
9. Tracking Secret German Organizations with Apple AirTags
10. Twelve-Year-Old Linux Vulnerability Discovered and Patched
11. Me on App Store Monopolies and Security
12. Finding Vulnerabilities in Open Source Projects
13. Interview with the Head of the NSA’s Research Directorate
14. The EARN IT Act Is Back
15. Amy Zegart on Spycraft in the Internet Age
16. Breaking 256-bit Elliptic Curve Encryption with a Quantum Computer
17. Bunnie Huang’s Plausibly Deniable Database
18. On the Irish Health Services Executive Hack
19. Upcoming Speaking Engagements

In this issue:

1. More Log4j News
2. More on NSO Group and Cytrox: Two Cyberweapons Arms Manufacturers
3. Stolen Bitcoins Returned
4. Apple AirTags Are Being Used to Track People and Cars
5. More Russian Cyber Operations against Ukraine
6. People Are Increasingly Choosing Private Web Search
7. Norton’s Antivirus Product Now Includes an Ethereum Miner
8. Fake QR Codes on Parking Meters
9. Apple’s Private Relay Is Being Blocked
10. Faking an iPhone Reboot
11. Using Foreign Nationals to Bypass US Surveillance Restrictions
12. Using EM Waves to Detect Malware
13. Upcoming Speaking Engagements