Crypto-Gram Newsletter - Schneier on Security

Crypto-Gram Newsletter

Crypto-Gram is a free monthly e-mail digest of posts from Bruce Schneier’s Schneier on Security blog.

Recent Issues

March 15, 2025

In this issue:

  1. Atlas of Surveillance
  2. Story About Medical Device Security
  3. Device Code Phishing
  4. An LLM Trained to Create Backdoors in Code
  5. Implementing Cryptography in AI Systems
  6. More Research Showing AI Breaking the Rules
  7. North Korean Hackers Steal $1.5B in Cryptocurrency
  8. UK Demanded Apple Add a Backdoor to iCloud
  9. "Emergent Misalignment" in LLMs
  10. Trojaned AI Tool Leads to Disney Hack
  11. CISA Identifies Five New Vulnerabilities Currently Being Exploited
  12. The Combined Cipher Machine
  13. Rayhunter: Device to Detect Cellular Surveillance
  14. Thousands of WordPress Websites Infected with Malware
  15. Silk Typhoon Hackers Indicted
  16. China, Russia, Iran, and North Korea Intelligence Sharing
  17. RIP Mark Klein
  18. TP-Link Router Botnet
  19. Upcoming Speaking Engagements

Read This Issue →

February 15, 2025

In this issue:

  1. Phishing False Alarm
  2. FBI Deletes PlugX Malware from Thousands of Computers
  3. Social Engineering to Disable iMessage Protections
  4. Biden Signs New Cybersecurity Order
  5. AI Mistakes Are Very Different from Human Mistakes
  6. AI Will Write Complex Laws
  7. Third Interdisciplinary Workshop on Reimagining Democracy (IWORD 2024)
  8. New VPN Backdoor
  9. CISA Under Trump
  10. ExxonMobil Lobbyist Caught Hacking Climate Activists
  11. Fake Reddit and WeTransfer Sites Are Pushing Malware
  12. Journalists and Civil Society Members Using WhatsApp Targeted by Paragon Spyware
  13. Deepfakes and the 2024 US Election
  14. On Generative AI Security
  15. AIs and Robots Should Sound Robotic
  16. Screenshot-Reading Malware
  17. UK Is Ordering Apple to Break Its Own Encryption
  18. Pairwise Authentication of Humans
  19. Trusted Execution Environments
  20. Delivering Malware Through Abandoned Amazon S3 Buckets
  21. DOGE as a National Cyberattack
  22. AI and Civil Service Purges
  23. Upcoming Speaking Engagements

Read This Issue →

January 15, 2025

In this issue:

  1. Short-Lived Certificates Coming to Let’s Encrypt
  2. Hacking Digital License Plates
  3. New Advances in the Understanding of Prime Numbers
  4. Mailbox Insecurity
  5. Criminal Complaint against LockBit Ransomware Writer
  6. Spyware Maker NSO Group Found Liable for Hacking WhatsApp
  7. Scams Based on Fake Google Emails
  8. Casino Players Using Hidden Cameras for Cheating
  9. Salt Typhoon’s Reach Continues to Grow
  10. Gift Card Fraud
  11. Google Is Allowing Device Fingerprinting
  12. ShredOS
  13. Privacy of Photos.app’s Enhanced Visual Search
  14. US Treasury Department Sanctions Chinese Company Over Cyberattacks
  15. Zero-Day Vulnerability in Ivanti VPN
  16. Apps That Are Spying on Your Location
  17. Microsoft Takes Legal Action Against AI "Hacking as a Service" Scheme
  18. The First Password on the Internet
  19. Upcoming Speaking Engagements

Read This Issue →

More Issues →

Sidebar photo of Bruce Schneier by Joe MacInnis.