Scam USPS and E-Z Pass Texts and Websites
November 20 2025Google has filed a complaint in court that details the scam:
In a complaint filed Wednesday, the tech giant accused “a cybercriminal group in China” of selling “phishing for...
Read more
Legal Restrictions on Vulnerability Disclosure
November 19 2025Kendra Albert gave an excellent talk at USENIX Security this year, pointing out that the legal agreements surrounding vulnerability disclosure muzzle researchers while allowing companies to not fix...
Read moreAI and Voter Engagement
November 18 2025Social media has been a familiar, even mundane, part of life for nearly two decades. It can be easy to forget it was not always that way.
In 2008, social...
Read moreMore Prompt||GTFO
November 17 2025The next three in this series on online events highlighting interesting uses of AI in cybersecurity are online: #4, #5, and #6. Well worth watching.
Read moreFriday Squid Blogging: Pilot Whales Eat a Lot of Squid
November 15 2025Short-finned pilot wales (Globicephala macrorhynchus) eat at lot of squid:
To figure out a short-finned pilot whale’s caloric intake, Gough says, the team had to combine data from a...
Read more
Upcoming Speaking Engagements
November 15 2025This is a current list of where and when I am scheduled to speak:
- My coauthor Nathan E. Sanders and I are speaking at the Rayburn House Office Building in... Read more
The Role of Humans in an AI-Powered World
November 14 2025As AI capabilities grow, we must delineate the roles that should remain exclusively human. The line seems to be between fact-based decisions and judgment-based decisions.
For example, in a medical...
Read moreBook Review: The Business of Secrets
November 13 2025The Business of Secrets: Adventures in Selling Encryption Around the World by Fred Kinch (May 24, 2024)
From the vantage point of today, it’s surreal reading about the commercial cryptography...
Read moreOn Hacking Back
November 12 2025Former DoJ attorney John Carlin writes about hackback, which he defines thus: “A hack back is a type of cyber response that incorporates a counterattack designed to proactively...
Read morePrompt Injection in AI Browsers
November 11 2025This is why AIs are not ready to be personal assistants:
A new attack called ‘CometJacking’ exploits URL parameters to pass to Perplexity’s Comet AI browser hidden instructions that...
Read more
Recent Comments