Poor Password Choices
August 25 2025Look at this: McDonald’s chose the password “123456” for a major corporate system.
Read moreFriday Squid Blogging: Bobtail Squid
August 23 2025Nice short article on the bobtail squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation...
Read moreI’m Spending the Year at the Munk School
August 23 2025This academic year, I am taking a sabbatical from the Kennedy School and Harvard University. (It’s not a real sabbatical—I’m just an adjunct—but it’s the same idea.) I will...
Read moreAI Agents Need Data Integrity
August 22 2025Think of the Web as a digital territory with its own social contract. In 2014, Tim Berners-Lee called for a “Magna Carta for the Web” to restore...
Read moreSubverting AIOps Systems Through Poisoned Input Data
August 20 2025In this input integrity attack against an AI system, researchers were able to fool AIOps tools:
AIOps refers to the use of LLM-based agents to gather and analyze application...
Read more
Zero-Day Exploit in WinRAR File
August 19 2025A zero-day vulnerability in WinRAR is being exploited by at least two Russian criminal groups:
The vulnerability seemed to have super Windows powers. It abused alternate data streams,...
Read more
Eavesdropping on Phone Conversations Through Vibrations
August 18 2025Researchers have managed to eavesdrop on cell phone voice conversations by using radar to detect vibrations. It’s more a proof of concept than anything else. The radar detector is...
Read moreFriday Squid Blogging: Squid-Shaped UFO Spotted Over Texas
August 16 2025Here’s the story. The commenters on X (formerly Twitter) are unimpressed. As usual, you can also use this squid post to talk about the security stories in the news that...
Read more
Recent Comments