Schneier on Security

In this issue:

1. Micro-Star International Signing Key Stolen
2. Microsoft Secure Boot Bug
3. Security Risks of New .zip and .mov Domains
4. Google Is Not Deleting Old YouTube Videos
5. Credible Handwriting Machine
6. Indiana, Iowa, and Tennessee Pass Comprehensive Privacy Laws
7. On the Poisoning of LLMs
8. Expeditionary Cyberspace Operations
9. Brute-Forcing a Fingerprint Reader
10. Chinese Hacking of US Critical Infrastructure
11. On the Catastrophic Risk of AI
12. Open-Source LLMs
13. The Software-Defined Car
14. Snowden Ten Years Later
15. How Attorneys Are Harming Cybersecurity Incident Response
16. Paragon Solutions Spyware: Graphite
17. Operation Triangulation: Zero-Click iPhone Malware
18. AI-Generated Steganography
19. Identifying the Idaho Killer
20. On the Need for an AI Public Option

In this issue:

1. Swatting as a Service
2. Using LLMs to Create Bioweapons
3. EFF on the UN Cybercrime Treaty
4. New Zero-Click Exploits against iOS
5. Using the iPhone Recovery Key to Lock Owners Out of Their iPhones
6. Hacking Pickleball
7. UK Threatens End-to-End Encryption
8. Cyberweapons Manufacturer QuaDream Shuts Down
9. AI to Aid Democracy
10. Security Risks of AI
11. Hacking the Layoff Process
12. NIST Draft Document on Post-Quantum Cryptography Guidance
13. SolarWinds Detected Six Months Earlier
14. Large Language Models and Elections
15. AI Hacking Village at DEF CON This Year
16. PIPEDREAM Malware against Industrial Control Systems
17. FBI Disables Russian Malware
18. Building Trustworthy AI
19. Ted Chiang on the Risks of AI
20. Upcoming Speaking Engagements

In this issue:

1. NetWire Remote Access Trojan Maker Arrested
2. How AI Could Write Our Laws
3. Upcoming Speaking Engagements
4. US Citizen Hacked by Spyware
5. ChatGPT Privacy Flaw
6. Mass Ransomware Attack
7. Exploding USB Sticks
8. A Hacker’s Mind News
9. Hacks at Pwn2Own Vancouver 2023
10. Security Vulnerabilities in Snipping Tools
11. The Security Vulnerabilities of Message Interoperability
12. Russian Cyberwarfare Documents Leaked
13. UK Runs Fake DDoS-for-Hire Sites
14. North Korea Hacking Cryptocurrency Sites with 3CX Exploit
15. FBI (and Others) Shut Down Genesis Market
16. Research on AI in Adversarial Settings
17. LLMs and Phishing
18. Car Thieves Hacking the CAN Bus
19. FBI Advising People to Avoid Public Charging Stations
20. Bypassing a Theft Threat Model
21. Gaining an Advantage in Roulette
22. Hacking Suicide
23. Upcoming Speaking Engagements

In this issue:

1. Camera the Size of a Grain of Salt
2. ChatGPT Is Ingesting Corporate Secrets
3. Defending against AI Lobbyists
4. Fines as a Security System
5. The Insecurity of Photo Cropping
6. A Device to Turn Traffic Lights Green
7. Cyberwar Lessons from the War in Ukraine
8. Putting Undetectable Backdoors in Machine Learning Models
9. Banning TikTok
10. Side-Channel Attack against CRYSTALS-Kyber
11. Fooling a Voice Authentication System with an AI-Generated Voice
12. Dumb Password Rules
13. Nick Weaver on Regulating Cryptocurrency
14. New National Cybersecurity Strategy
15. Prompt Injection Attacks on Large Language Models
16. BlackLotus Malware Hijacks Windows Secure Boot Process
17. Another Malware with Persistence
18. Elephant Hackers
19. NetWire Remote Access Trojan Maker Arrested
20. How AI Could Write Our Laws
21. Upcoming Speaking Engagements

In this issue:

1. Hacked Cellebrite and MSAB Software Released
2. The FBI Identified a Tor User
3. AI and Political Lobbying
4. Security Analysis of Threema
5. Real-World Steganography
6. Publisher’s Weekly Review of A Hacker’s Mind
7. No-Fly List Exposed
8. Bulk Surveillance of Money Transfers
9. US Cyber Command Operations During the 2022 Midterm Elections
10. On Alec Baldwin’s Shooting
11. A Guide to Phishing Attacks
12. Kevin Mitnick Hacked California Law in 1983
13. NIST Is Updating Its Cybersecurity Framework
14. Ransomware Payments Are Down
15. Passwords Are Terrible (Surprising No One)
16. AIs as Computer Hackers
17. Manipulating Weights in Face-Recognition AI Systems
18. A Hacker’s Mind News
19. Attacking Machine Learning Systems
20. Malware Delivered through Google Search
21. SolarWinds and Market Incentives
22. Mary Queen of Scots Letters Decrypted
23. Hacking the Tax Code
24. A Hacker’s Mind Is Now Published
25. On Pig Butchering Scams
26. What Will It Take?
27. Upcoming Speaking Engagements

In this issue:

1. A Security Vulnerability in the KmsdBot Botnet
2. Apple Patches iPhone Zero-Day
3. As Long as We’re on the Subject of CAPTCHAs
4. How to Surrender to a Drone
5. Trojaned Windows Installer Targets Ukraine
6. Ukraine Intercepting Russian Soldiers’ Cell Phone Calls
7. Critical Microsoft Code-Execution Vulnerability
8. Hacking the JFK Airport Taxi Dispatch System
9. LastPass Breach
10. Arresting IT Administrators
11. QR Code Scam
12. Recovering Smartphone Voice from the Accelerometer
13. Breaking RSA with a Quantum Computer
14. Decarbonizing Cryptocurrencies through Taxation
15. Remote Vulnerabilities in Automobiles
16. Schneier on Security Audiobook Sale
17. Identifying People Using Cell Phone Location Data
18. ChatGPT-Written Malware
19. Experian Privacy Vulnerability
20. Threats of Machine-Generated Text
21. Booklist Review of A Hacker’s Mind
22. Upcoming Speaking Engagements

In this issue:

1. Another Event-Related Spyware App
2. Russian Software Company Pretending to Be American
3. Failures in Twitter’s Two-Factor Authentication System
4. Successful Hack of Time-Triggered Ethernet
5. First Review of A Hacker’s Mind
6. Breaking the Zeppelin Ransomware Encryption Scheme
7. Apple’s Device Analytics Can Identify iCloud Users
8. The US Has a Shortage of Bomb-Sniffing Dogs
9. Computer Repair Technicians Are Stealing Your Data
10. Charles V of Spain Secret Code Cracked
11. Facebook Fined $276M under GDPR
12. Sirius XM Software Vulnerability
13. LastPass Security Breach
14. Existential Risk and the Fermi Paradox
15. CAPTCHA
16. CryWiper Data Wiper Targeting Russian Sites
17. The Decoupling Principle
18. Leaked Signing Keys Are Being Used to Sign Malware
19. Security Vulnerabilities in Eufy Cameras
20. Hacking Trespass Law
21. Apple Is Finally Encrypting iCloud Backups
22. Obligatory ChatGPT Post
23. Hacking Boston’s CharlieCard
24. Recreating Democracy

In this issue:

1. New Book: A Hacker’s Mind
2. Hacking Automobile Keyless Entry Systems
3. Qatar Spyware
4. Museum Security
5. Interview with Signal’s New President
6. Adversarial ML Attack that Secretly Gives a Language Model a Point of View
7. On the Randomness of Automatic Card Shufflers
8. Australia Increases Fines for Massive Data Breaches
9. Critical Vulnerability in Open SSL
10. Apple Only Commits to Patching Latest OS Version
11. Iran’s Digital Surveillance Tools Leaked
12. NSA on Supply Chain Security
13. The Conviction of Uber’s Chief Security Officer
14. Using Wi-FI to See through Walls
15. Defeating Phishing-Resistant Multifactor Authentication
16. An Untrustworthy TLS Certificate in Browsers
17. NSA Over-surveillance
18. A Digital Red Cross
19. Upcoming Speaking Engagements

In this issue:

1. Relay Attack against Teslas
2. Massive Data Breach at Uber
3. Large-Scale Collection of Cell Phone Data at US Borders
4. Credit Card Fraud That Bypasses 2FA
5. Automatic Cheating Detection in Human Racing
6. Prompt Injection/Extraction Attacks against AI Systems
7. Leaking Screen Information on Zoom Calls through Reflections in Eyeglasses
8. Leaking Passwords through the Spellchecker
9. New Report on IoT Security
10. Cold War Bugging of Soviet Facilities
11. Differences in App Security/Privacy Based on Country
12. Security Vulnerabilities in Covert CIA Websites
13. Detecting Deepfake Audio by Modeling the Human Acoustic Tract
14. NSA Employee Charged with Espionage
15. October Is Cybersecurity Awareness Month
16. Spyware Maker Intellexa Sued by Journalist
17. Complex Impersonation Story
18. Inserting a Backdoor into a Machine-Learning System
19. Recovering Passwords by Measuring Residual Heat
20. Digital License Plates
21. Regulating DAOs
22. Upcoming Speaking Engagements

In this issue:

1. $23 Million YouTube Royalties Scam
2. Remotely Controlling Touchscreens
3. Zoom Exploit on MacOS
4. USB “Rubber Ducky” Attack Tool
5. Hyundai Uses Example Keys for Encryption System
6. Signal Phone Numbers Exposed in Twilio Hack
7. Mudge Files Whistleblower Complaint against Twitter
8. Man-in-the-Middle Phishing Attack
9. Security and Cheap Complexity
10. Levels of Assurance for DoD Microelectronics
11. FTC Sues Data Broker
12. High-School Graduation Prank Hack
13. Clever Phishing Scam Uses Legitimate PayPal Messages
14. Montenegro Is the Victim of a Cyberattack
15. The LockBit Ransomware Gang Is Surprisingly Professional
16. Facebook Has No Idea What Data It Has
17. Responsible Disclosure for Cryptocurrency Security
18. New Linux Cryptomining Malware
19. FBI Seizes Stolen Cryptocurrencies
20. Weird Fallout from Peiter Zatko’s Twitter Whistleblowing
21. Upcoming Speaking Engagements