Details of a Scam
September 30 2025Longtime Crypto-Gram readers know that I collect personal experiences of people being scammed. Here’s an almost:
Then he added, “Here at Chase, we’ll never ask for your personal...
Read more
Abusing Notion’s AI Agent for Data Theft
September 29 2025Notion just released version 3.0, complete with AI agents. Because the system contains Simon Willson’s lethal trifecta, it’s vulnerable to data theft though prompt injection.
First, the trifecta:
The...
Read more
Digital Threat Modeling Under Authoritarianism
September 26 2025Today’s world requires us to make complex and nuanced decisions about our digital security. Evaluating when to use a secure messaging app like Signal or WhatsApp, which passwords to...
Read moreMalicious-Looking URL Creation Service
September 25 2025This site turns your URL into something sketchy-looking. For example, www.schneier.com becomes https://cheap-bitcoin.online/firewall-snatcher/cipher-injector/phishing_sniffer_tool.html?form=inject&host=spoof&id=bb1bc121¶meter=inject&payload=%28func...
Read moreUS Disrupts Massive Cell Phone Array in New York
September 24 2025This is a weird story:
The US Secret Service disrupted a network of telecommunications devices that could have shut down cellular systems as leaders gather for the United Nations...
Read more
Apple’s New Memory Integrity Enforcement
September 23 2025Apple has introduced a new hardware/software security feature in the iPhone 17: “Memory Integrity Enforcement,” targeting the memory safety vulnerabilities that spyware products like Pegasus tend to use...
Read moreDetails About Chinese Surveillance and Propaganda Companies
September 22 2025Details from leaked documents:
While people often look at China’s Great Firewall as a single, all-powerful government system unique to China, the actual process of developing and maintaining it...
Read more
Friday Squid Blogging: Giant Squid vs. Blue Whale
September 20 2025A comparison aimed at kids.
Read moreSurveying the Global Spyware Market
September 19 2025The Atlantic Council has published its second annual report: “Mythical Beasts: Diving into the depths of the global spyware market.”
Too much good detail to summarize, but here are...
Read more
Recent Comments