I’m Spending the Year at the Munk School
August 23 2025This academic year, I am taking a sabbatical from the Kennedy School and Harvard University. (It’s not a real sabbatical—I’m just an adjunct—but it’s the same idea.) I will...
Read moreAI Agents Need Data Integrity
August 22 2025Think of the Web as a digital territory with its own social contract. In 2014, Tim Berners-Lee called for a “Magna Carta for the Web” to restore...
Read moreSubverting AIOps Systems Through Poisoned Input Data
August 20 2025In this input integrity attack against an AI system, researchers were able to fool AIOps tools:
AIOps refers to the use of LLM-based agents to gather and analyze application...
Read more
Zero-Day Exploit in WinRAR File
August 19 2025A zero-day vulnerability in WinRAR is being exploited by at least two Russian criminal groups:
The vulnerability seemed to have super Windows powers. It abused alternate data streams,...
Read more
Eavesdropping on Phone Conversations Through Vibrations
August 18 2025Researchers have managed to eavesdrop on cell phone voice conversations by using radar to detect vibrations. It’s more a proof of concept than anything else. The radar detector is...
Read moreFriday Squid Blogging: Squid-Shaped UFO Spotted Over Texas
August 16 2025Here’s the story. The commenters on X (formerly Twitter) are unimpressed. As usual, you can also use this squid post to talk about the security stories in the news that...
Read moreTrojans Embedded in .svg Files
August 15 2025Porn sites are hiding code in .svg files:
Unpacking the attack took work because much of the JavaScript in the .svg images was heavily obscured using a custom version...
Read more
LLM Coding Integrity Breach
August 14 2025Here’s an interesting story about a failure being introduced by LLM-written code. Specifically, the LLM was doing some code refactoring, and when it moved a chunk of code...
Read moreAI Applications in Cybersecurity
August 14 2025There is a really great series of online events highlighting cool uses of AI in cybersecurity, titled Prompt||GTFO. Videos from the first three events are online. And here’s where...
Read more
Recent Comments