Schneier on Security RSS @Schneier_rss@burn.capital

Hiding Malware in ML Models

Interesting research: “EvilModel: Hiding Malware Inside of Neural Network Models”.
Abstract: Delivering malware covertly and detection-evadingly is critical to ad... https://www.schneier.com/blog/archives/2021/07/hiding-malware-in-ml-models.html

#artificialintelligence #machinelearning #academicpapers #Uncategorized #hacking #malware

Disrupting Ransomware by Disrupting Bitcoin

Ransomware isn’t new; the idea dates back to 1986 with the “Brain” computer virus. Now, it’s become the criminal business model of the internet for... https://www.schneier.com/blog/archives/2021/07/disrupting-ransomware-by-disrupting-bitcoin.html

#cryptocurrency #lawenforcement #Uncategorized #cybercrime #ransomware #bitcoin #crime

Friday Squid Blogging: The Evolution of Squid

Good video about the evolutionary history of squid.
As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
Read my b... https://www.schneier.com/blog/archives/2021/07/friday-squid-blogging-the-evolution-of-squid.html

#Uncategorized #squid #video

Commercial Location Data Used to Out Priest

A Catholic priest was outed through commercially available surveillance data. Vice has a good analysis:
The news starkly demonstr... https://www.schneier.com/blog/archives/2021/07/commercial-location-data-used-to-out-priest.html

#de-anonymization #datacollection #Uncategorized #surveillance #geolocation #cellphones #datamining

Nasty Printer Driver Vulnerability

From SentinelLabs, a critical vulnerability in HP pri... https://www.schneier.com/blog/archives/2021/07/nasty-printer-driver-vulnerability.html

#privilegeescalation #vulnerabilities #Uncategorized #cyberattack #printers #HP

NSO Group Hacked

NSO Group, the Israeli cyberweapons arms manufacturer behind the Pegasus spyware — used by authoritarian regimes around the world to spy on dissidents, journalists, human rights workers, and others — was hacked. Or, at least, an enormo... https://www.schneier.com/blog/archives/2021/07/nso-group-hacked.html

#cyberespionage #Uncategorized #cyberweapons #CitizenLab #leaks

Candiru: Another Cyberweapons Arms Manufacturer

Citizen Lab has identified yet another Israeli company that sells spyware to governments around the world: Candiru.
From the report</... https://www.schneier.com/blog/archives/2021/07/candiru-another-cyberweapons-arms-manufacturer.html

#privilegeescalation #cyberespionage #Uncategorized #cyberweapons #spyware #Israel

Friday Squid Blogging: Giant Squid Model

Pretty wooden model.
As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
Read my blog posting gu... https://www.schneier.com/blog/archives/2021/07/friday-squid-blogging-giant-squid-model.html

#Uncategorized #squid

REvil is Off-Line

This is an interesting development:
Just days after President Biden demanded that President Vladimir V. Putin of Russia shut down ... https://www.schneier.com/blog/archives/2021/07/revil-is-off-line.html

#Uncategorized #cybersecurity #cybercrime #ransomware #Russia

Colorado Passes Consumer Privacy Law

First California. Then Virginia. Now Colorado.
<a href="https://www.adlawaccess.com/2021/07/articles/privacy-law-update-colorado-privacy-bill-becomes-law-how-does-it-stack-up-against-cal... https://www.schneier.com/blog/archives/2021/07/colorado-passes-consumer-privacy-law.html

#datacollection #dataprotection #Uncategorized #privacy

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak:

I’m speaking at Norbert Wiener in the 21st Century, a virtual conference ... https://www.schneier.com/blog/archives/2021/07/upcoming-speaking-engagements-10.html

#Uncategorized

China Taking Control of Zero-Day Exploits

China is making sure that all newly discovered zero-day exploits are discl... https://www.schneier.com/blog/archives/2021/07/china-taking-control-of-zero-day-exploits.html

#vulnerabilities #Uncategorized #cybersecurity #cyberweapons #disclosure #zero-day #China

Iranian State-Sponsored Hacking Attempts

Interesting attack:
Masquerading as UK scholars with the University of London’s School of Oriental and African St... https://www.schneier.com/blog/archives/2021/07/iranian-state-sponsored-hacking-attempts.html

#Uncategorized #cybersecurity #phishing #hacking #Iran

Analysis of the FBI’s Anom Phone

Motherboard got its hands on one of those Anom phones that were really FBI honeypots.
The <a href="https://www.vice.com/en/article/n7b4gg/anom-pho... https://www.schneier.com/blog/archives/2021/07/analysis-of-the-fbis-anom-phone.html

#lawenforcement #Uncategorized #cellphones #encryption #backdoors #FBI

Friday Squid Blogging: Squid-Related Game

It’s called “Squid Fishering.”
As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
Read my blog ... https://www.schneier.com/blog/archives/2021/07/friday-squid-blogging-squid-related-game.html

#Uncategorized #games #squid

Details of the REvil Ransomware Attack

ArsTechnica has a good story on the REvil ransomware attack of last weekend, with technical details:
... https://www.schneier.com/blog/archives/2021/07/details-of-the-revil-ransomware-attack.html

#vulnerabilities #Uncategorized #cyberattack #supplychain #ransomware #zero-day #malware #Russia

Vulnerability in the Kaspersky Password Manager

A vulnerability (just patched) in the random number generator used in the Kaspersky Password Manager resulted in easily guessable passwords:
The password genera... https://www.schneier.com/blog/archives/2021/07/vulnerability-in-the-kaspersky-password-manager.html

#vulnerabilities #Uncategorized #randomnumbers #PasswordSafe #passwords

Stealing Xbox Codes

Detailed story of Volodymyr Kvashuk, a Microsoft insider who noticed a bug in the company’s internal systems that allowed him to create unlimited Xbox gift... https://www.schneier.com/blog/archives/2021/07/stealing-xbox-codes.html

#Uncategorized

Friday Squid Blogging: Best Squid-Related Headline

From the New York Times: “When an Eel Climbs a Ramp to Eat Squid From a Clamp, That’s a Moray.” The article is about the eel; the squid is j... https://www.schneier.com/blog/archives/2021/07/friday-squid-blogging-best-squid-related-headline.html

#Uncategorized #squid

More Russian Hacking

Two reports this week. The first is from Microsoft, which wrote:
As part of our investigation into this ongoing activity, we also detected informati... https://www.schneier.com/blog/archives/2021/07/more-russian-hacking.html

#Uncategorized #cybersecurity #Microsoft #hacking #malware #Russia