China Surveillance Company Hacked
February 27 2024Last week, someone posted something like 570 files, images and chat logs from a Chinese company called I-Soon. I-Soon sells hacking and espionage services to Chinese national and local...
Read moreApple Announces Post-Quantum Encryption Algorithms for iMessage
February 26 2024Apple announced PQ3, its post-quantum encryption standard based on the Kyber secure key-encapsulation protocol, one of the post-quantum algorithms selected by NIST in 2022.
There’s a lot...
Read moreFriday Squid Blogging: Illex Squid and Climate Change
February 24 2024There are correlations between the populations of the Illex Argentines squid and water temperatures. As usual, you can also use this squid post to talk about the security stories in...
Read moreAIs Hacking Websites
February 24 2024New research:
LLM Agents can Autonomously Hack Websites
Abstract: In recent years, large language models (LLMs) have become increasingly capable and can now interact with tools (i.e., call functions), read...
Read more
New Image/Video Prompt Injection Attacks
February 23 2024Simon Willison has been playing with the video processing capabilities of the new Gemini Pro 1.5 model from Google, and it’s really impressive. Which means a lot of scary new...
Read moreDetails of a Phone Scam
February 21 2024First-person account of someone who fell for a scam, that started as a fake Amazon service rep and ended with a fake CIA agent, and lost $50,000 cash. And...
Read moreMicrosoft Is Spying on Users of Its AI Tools
February 20 2024Microsoft announced that it caught Chinese, Russian, and Iranian hackers using its AI tools—presumably coding tools—to improve their hacking abilities.
From their report:
In collaboration with OpenAI, we are...
Read more
EU Court of Human Rights Rejects Encryption Backdoors
February 20 2024The European Court of Human Rights has ruled that breaking end-to-end encryption by adding backdoors violates human rights:
Seemingly most critically, the [Russian] government told the ECHR that...
Read more
Friday Squid Blogging: Vegan Squid-Ink Pasta
February 17 2024It uses black beans for color and seaweed for flavor. As usual, you can also use this squid post to talk about the security stories in the news that I...
Read moreOn the Insecurity of Software Bloat
February 15 2024Good essay on software bloat and the insecurities it causes.
The world ships too much code, most of it by third parties, sometimes unintended, most of it uninspected. Because...
Read more
Recent Comments