The Language of AI Could Change How Humans Speak Last week, national security agencies from the Five Eyes—that's the rich, English-language-speaking countries club—jointly released a…... https://www.schneier.com/blog/archives/2026/07/the-language-of-ai-could-change-how-humans-speak.html

Cybersecurity and the Gap Between Skill and Ability Last week, national security agencies from the Five Eyes—that's the rich, English-language-speaking countries club—jointly released a…... https://www.schneier.com/blog/archives/2026/07/cybersecurity-and-the-gap-between-skill-and-ability.html

Google Is Suing Chinese Scammers Who Are Using Gemini Not sure this will have any effect, but I support the effort: According to Google's legal filing, Outsider Enterprise operates through… https://www.schneier.com/blog/archives/2026/07/google-is-suing-chinese-scammers-who-are-using-gemini.html

France to Stop Certifying Non-Quantum-Safe Encryption France is accelerating its transition to post-quantum encryption: France's cybersecurity agency ANSSI said on Tuesday it would stop… https://www.schneier.com/blog/archives/2026/07/france-to-stop-certifying-non-quantum-safe-encryption.html

Flock Cameras Can Surveil Cars Without License Plates This is from a 2024 company presentation: Officers can also tap into data showing a car's decals, bumper stickers, back and top racks --… https://www.schneier.com/blog/archives/2026/07/flock-cameras-can-surveil-cars-without-license-plates.html

Cybersecurity Mission Creep in the US Interesting paper: "Cybersecurity Mission Creep." Abstract: Cybersecurity is experiencing mission creep. Policymakers are casting more and more problems as issues of… https://www.schneier.com/blog/archives/2026/07/cybersecurity-mission-creep-in-the-us.html

Papa Johns Surveillance-Based Advertising Papa Johns is spying on people's buying activities to predict when they are low on food:... https://www.schneier.com/blog/archives/2026/07/papa-johns-surveillance-based-advertising.html

The Realities of AI Video Surveillance The Financial Times has a good article on how AI is changing the capabilities of video surveillance, with information from both Israel/Iran and Russia.... https://www.schneier.com/blog/archives/2026/06/the-realities-of-ai-video-surveillance.html

Factoring RSA Keys with Many Zeros Interesting research on a new class of weak RSA keys: keys with lots of zeros. It turns out that these keys are out in the wild.... https://www.schneier.com/blog/archives/2026/06/factoring-rsa-keys-with-many-zeros.html

Robot Police Officers We've taken one small step towards robot police officers: a drone capable of disarming a suspect:... https://www.schneier.com/blog/archives/2026/06/robot-police-officers.html

The Chinese Control the Majority of Argentina’s Squid Fleet Chinese companies control nearly two-thirds of Argentina’s own squid fleet. https://www.schneier.com/blog/archives/2026/06/the-chinese-control-the-majority-of-argentinas-squid-fleet.html

Meta Is Testing Facial Recognition for Police and Military We know that ICE wants to deploy eyeglasses with facial recognition that can identify people in real time. Turns out Meta is… https://www.schneier.com/blog/archives/2026/06/meta-is-testing-facial-recognition-for-police-and-military.html

One Million Passports Leaked Online A database of almost a million passports from around the world was leaked online. Note what happened.... https://www.schneier.com/blog/archives/2026/06/one-million-passports-leaked-online.html

AI and Liability Earlier this month, a German court ruled that Google is liable for its AI search summaries. Rejecting defenses like "users can check for themselves," and that they generally know "that information generated with… https://www.schneier.com/blog/archives/2026/06/ai-and-liability.html

Interesting Paper Exploring Prompt Injection This is a fascinating explotation of how LLMs fall for prompt injection attacks. It turns out that they learn to recognize the style of text in different… https://www.schneier.com/blog/archives/2026/06/interesting-paper-exploring-prompt-injection.html

Embedding Forbidden Text in Spyware to Discourage AI Analysis At least one malware developer is adding text about nuclear and biological weapons to their spyware, in an effort to… https://www.schneier.com/blog/archives/2026/06/embedding-forbidden-text-in-spyware-to-discourage-ai-analysis-2.html

Anthropic’s Fable 5 Model Jailbroken Within Days Fable 5 is the supposed safe version of Anthropic's Mythos Preview, with guardrails to ensure that it can't be used to create cyberattacks. Well,… https://www.schneier.com/blog/archives/2026/06/anthropics-fable-5-model-jailbroken-within-days.html

Professional Athletes and Wearables I haven't thought about the privacy issues surrounding professional athletes and wearables. Wearables present serious privacy issues…... https://www.schneier.com/blog/archives/2026/06/professional-athletes-and-wearables.html

Friday Squid Blogging: Victims of Unregulated Squid Fishing Dolphins, sharks, turtles, and human workers are all victims of unregulated squid fishing fleets. Another news article. As… https://www.schneier.com/blog/archives/2026/06/friday-squid-blogging-victims-of-unregulated-squid-fishing.html

Anthropic’s Fable and the State of AI On June 9th, Anthropic released its Fable generative AI model. Three days later, the US government…... https://www.schneier.com/blog/archives/2026/06/anthropics-fable-and-the-state-of-ai.html

Embedding Forbidden Text in Spyware to Discourage AI Analysis At least one malware developer is adding text about nuclear and biological weapons to their spyware, in an effort to stop… https://www.schneier.com/blog/archives/2026/06/embedding-forbidden-text-in-spyware-to-discourage-ai-analysis.html

AI Use by the US Government On 14 April, the Trump administration quietly acknowledged the widespread use of AI to automate government processes.... https://www.schneier.com/blog/archives/2026/06/ai-use-by-the-us-government.html

Flock Cameras Are Being Used for Stalking There are over a dozen cases around the country where police officers are using the Flock surveillance camera system to obsessively and illegally stalk people.… https://www.schneier.com/blog/archives/2026/06/flock-cameras-are-being-used-for-stalking.html

The FCC Wants to Eliminate Burner Phones A proposed FCC rule would kill burner phones: phones whose accounts are not attached to a particular person.... https://www.schneier.com/blog/archives/2026/06/the-fcc-wants-to-eliminate-burner-phones.html

Upcoming Speaking Engagements This is a current list of where and when I am scheduled to speak: I’m giving a keynote at…... https://www.schneier.com/blog/archives/2026/06/upcoming-speaking-engagements-57.html

Friday Squid Blogging: Squid-Inspired Fluid Pump This fluid pump was inspired by the way squids propel themselves through the water. As usual, you can also use this squid post to talk about the… https://www.schneier.com/blog/archives/2026/06/friday-squid-blogging-squid-inspired-fluid-pump.html

Bernie Sanders’ AI Sovereign Wealth Fund Plan Let no one accuse Bernie Sanders of ducking the big questions. Writing in the New York Times last week, the senator…... https://www.schneier.com/blog/archives/2026/06/bernie-sanders-ai-sovereign-wealth-fund-plan.html

Enhanced License Plate Tracking The surveillance company Leonardo wants more data: A surveillance company plans to add sensors to automatic license plate readers (ALPRs) that would mean the devices, as well as… https://www.schneier.com/blog/archives/2026/06/enhanced-license-plate-tracking.html

NSO Group Hacking WhatsApp Despite Court Order WhatsApp has caught the NSO Group phishing its users, in violation of a court order. https://www.schneier.com/blog/archives/2026/06/nso-group-hacking-whatsapp-despite-court-order.html

GPS As a Key Distribution Platform This is interesting: The U.S. military has likely been quietly broadcasting codes for its global encryption network using public GPS for nearly 20 years, turning each… https://www.schneier.com/blog/archives/2026/06/gps-as-a-key-distribution-platform.html

Critical Zcash Vulnerability Found and Fixed If you're a user -- owner? -- of this cryptocurrency, this is important: On May 29, the security researcher Taylor Hornby found a critical vulnerability in… https://www.schneier.com/blog/archives/2026/06/critical-zcash-vulnerability-found-and-fixed.html

Anthropic’s Project Glasswing Update In April, Anthropic initated Project Glasswing. The idea was to let companies use their new model to find and fix vulnerabilities in their own software.... https://www.schneier.com/blog/archives/2026/06/anthropics-project-glasswing-update.html

AI Worm Researchers have prototyped an AI-powered internet worm. The coolest thing about the prototype is that it carries its own LLM with it, and runs it on computers that have been broken into. This is the closest to John Brunner's… https://www.schneier.com/blog/archives/2026/06/ai-worm.html

Hacking Meta’s AI Chatbot Hackers are convincing Meta's AI support chatbot to let them take over other peoples' accounts: A…... https://www.schneier.com/blog/archives/2026/06/hacking-metas-ai-chatbot.html

AI Used to Decrypt Medieval Ciphers Researchers are using machine learning algorithms to decrypt historical pencil-and-paper ciphers. https://www.schneier.com/blog/archives/2026/06/ai-used-to-decrypt-medieval-ciphers.html

The Intersection of Encryption and AI As part of their 20th Anniversary celebration, Dark Reading asked five cybersecurity industry leaders who wrote blogs or columns for them over the years to select their… https://www.schneier.com/blog/archives/2026/06/the-intersection-of-encryption-and-ai.html

Microsoft Threatening Security Researcher An anonymous security researcher called "Nightmare Eclipse" has been publishing a series of significant security exploits against Microsoft Windows -- including… https://www.schneier.com/blog/archives/2026/06/microsoft-threatening-security-researcher.html

Vulnerability Disclosure in the Age of AI New article: "Responsible Disclosure in the Age of AI: A Call for Urgent Action," by Melissa Hathaway.... https://www.schneier.com/blog/archives/2026/06/vulnerability-disclosure-in-the-age-of-ai.html

Friday Squid Blogging: Another Squid Someone named "Squid" seems to be a "West Country legend." As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy.

Chilling Effects Younger Americans have soured on the second Donald Trump presidency, but they are not protesting it. Despite an unpopular Iran war and an even more unpopular Trump administration, college campus protests nationwide have gone silent. And at many schools, student activism is…

FBI’s 2025 Internet Crime Report The 2025 Internet Crime Report was published a few weeks ago, but I only just saw it. Lots of interesting statistics. Press release. News articles.

Identifying People Using Wi-Fi Routers Not identifying people based on their use of Wi-Fi routers, but identifying people using Wi-Fi signals. This is accomplished through what is known as WiFi sensing, or the use of WiFi signals to infer information about a physical environment. When radio…

Friday Squid Blogging: Regulating Squid Fishing in the South Pacific The South Pacific Regional Fisheries Management Organization (SPRFMO) needs to regulate squid fishing in the South Pacific. As usual, you can also use this squid post to talk about the security stories in the news that I haven't…

CISA Security Leak Crazy story: Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems.…

macOS Kernel Memory Corruption Exploit A group used Anthropic's Mythos AI model to help find a kernel memory corruption vulnerability and exploit on Apple's M5. News article.

On AI Security Good report: Executive Summary: Let's say you wanted to make sure that your AI is secure. Can you just maximize the security and privacy benchmark and call it a day? Nope, because benchmarks don't actually work for measuring AI capabilities (even when they are NOT emergent systemic…

Laurie Anderson Is Quoting Me Not by name, but Laurie Anderson quotes me in one of the tracks of her new album: My favorite quote is from a cryptologist who said "If you think technology will solve your problems, you don't understand technology and you don't understand your problems." Also in…

Zero-Day Exploit Against Windows BitLocker It's nasty, but it requires physical access to the computer: The exploit, named YellowKey, was published earlier this week by a researcher who goes by the alias Nightmare-Eclipse. It reliably bypasses default Windows 11 deployments of BitLocker, the…

Friday Squid Blogging: Bigfin Squid Article about the bigfin squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy.

Bypassing On-Camera Age-Verification Checks Some AI-based video age-verification checks can be fooled with a fake mustache.