Crypto-Gram Newsletter
Crypto-Gram is a free monthly e-mail digest of posts from Bruce Schneier’s Schneier on Security blog.
Recent Issues
February 15, 2025
In this issue:
- Phishing False Alarm
- FBI Deletes PlugX Malware from Thousands of Computers
- Social Engineering to Disable iMessage Protections
- Biden Signs New Cybersecurity Order
- AI Mistakes Are Very Different from Human Mistakes
- AI Will Write Complex Laws
- Third Interdisciplinary Workshop on Reimagining Democracy (IWORD 2024)
- New VPN Backdoor
- CISA Under Trump
- ExxonMobil Lobbyist Caught Hacking Climate Activists
- Fake Reddit and WeTransfer Sites Are Pushing Malware
- Journalists and Civil Society Members Using WhatsApp Targeted by Paragon Spyware
- Deepfakes and the 2024 US Election
- On Generative AI Security
- AIs and Robots Should Sound Robotic
- Screenshot-Reading Malware
- UK Is Ordering Apple to Break Its Own Encryption
- Pairwise Authentication of Humans
- Trusted Execution Environments
- Delivering Malware Through Abandoned Amazon S3 Buckets
- DOGE as a National Cyberattack
- AI and Civil Service Purges
- Upcoming Speaking Engagements
January 15, 2025
In this issue:
- Short-Lived Certificates Coming to Let’s Encrypt
- Hacking Digital License Plates
- New Advances in the Understanding of Prime Numbers
- Mailbox Insecurity
- Criminal Complaint against LockBit Ransomware Writer
- Spyware Maker NSO Group Found Liable for Hacking WhatsApp
- Scams Based on Fake Google Emails
- Casino Players Using Hidden Cameras for Cheating
- Salt Typhoon’s Reach Continues to Grow
- Gift Card Fraud
- Google Is Allowing Device Fingerprinting
- ShredOS
- Privacy of Photos.app’s Enhanced Visual Search
- US Treasury Department Sanctions Chinese Company Over Cyberattacks
- Zero-Day Vulnerability in Ivanti VPN
- Apps That Are Spying on Your Location
- Microsoft Takes Legal Action Against AI "Hacking as a Service" Scheme
- The First Password on the Internet
- Upcoming Speaking Engagements
December 15, 2024
In this issue:
- Good Essay on the History of Bad Password Policies
- Most of 2023’s Top Exploited Vulnerabilities Were Zero-Days
- Why Italy Sells So Much Spyware
- Steve Bellovin’s Retirement Talk
- Secret Service Tracking People’s Locations without Warrant
- The Scale of Geoblocking by Nation
- Security Analysis of the MERGE Voting Protocol
- What Graykey Can and Can’t Unlock
- NSO Group Spies on People on Behalf of Governments
- Race Condition Attacks against LLMs
- Details about the iOS Inactivity Reboot Feature
- Algorithms Are Coming for Democracy—but It’s Not All Bad
- AI and the 2024 Elections
- Detecting Pegasus Infections
- Trust Issues in AI
- Full-Face Masks to Frustrate Identification
- Jailbreaking LLM-Controlled Robots
- Ultralytics Supply-Chain Attack
- Upcoming Speaking Events
Sidebar photo of Bruce Schneier by Joe MacInnis.