1.168 casos · pág. 49/59
Troy Hunt announced that Sri Lanka is the 48th government onboarded to the free government service of Have I Been Pwned (HIBP). Sri Lanka CERT can now monitor Sri Lankan government domains against data held in HIBP. This helps identify exposed government accounts and respond when they appear in new data breaches. The announcement is about…
In his Weekly Update 517, Troy Hunt offers commentary on the current ransomware situation. He argues that much of what is called ransomware often involves no malware at all and is simply extortion, frequently carried out by young offenders. These actors earn large sums but struggle to spend them without being caught. He adds that breached…
This Troy Hunt weekly update is a personal, non-security post. He describes using YouTube's automatic thumbnail generator and installing his first full Ubiquiti Access door lock with a Lockwood ES2100 electric strike. He notes the built-in door position sensor simplifies the setup and hopes Ubiquiti will add hub support for latch position…
In Weekly Update 519, Troy Hunt describes a busy week of conference talks in Oslo and Copenhagen, including a 3D printing talk, an NDC infosec talk and a talk on cyber-related topics. He also notes that "ratbag hackers" keep dumping more data, but the excerpt names no victims, threat actors, datasets or dates. The rest covers his IoT door…
Troy Hunt of Have I Been Pwned (HIBP) analysed the leak that ShinyHunters attributed to Carhartt. The leak was claimed to hold more than 50 GB of customer and employee records. The initial extraction showed 24,876,077 unique email addresses. Closer review showed that a large share came from the TPC-DS benchmark dataset (tpcdssf1000) store…
Troy Hunt's Weekly Update 522, recorded live in Oslo with Scott Helme, discusses how Report URI uses Content Security Policy (CSP) reporting to identify malware-infected machines within organizations. Helme also describes a high rate of malicious browser extensions being detected with help from "Rory", his local OpenClaw instance. The art…
In his weekly update, Troy Hunt notes that the ShinyHunters group appears to be on an escalating trajectory, reportedly targeting both the Cl0p ransomware group and the FBI. Hunt describes this as feeling like a crescendo in the group's activities and says that provoking US federal law enforcement is unlikely to help the group's longevity…
Troy Hunt's Weekly Update 521 argues that media narratives about AI as a powerful hacking tool diverge from the facts. He cites a statistic that AI has had effectively 0% impact on insurance payouts, and a Dutch individual who is reportedly being tracked down from his voice. He also points to Scott's teardown of the MAG breach, which ulti…
This Foreign Affairs essay, co-written by Bruce Schneier and Seva Gunitsky, argues that AI offers autocrats two things: real-time monitoring of subordinates and replacement of human intermediaries. Examples include RT's AI-generated anchors, China's Zero Trust AI system and smart city oversight, Russia's Oculus censorship system and Melio…
This is a Troy Hunt weekly update post titled "Building HIBP AI/SI First". Hunt argues that "vibe coding" has lost its derogatory connotation and that developers cannot remain competitive without AI tools. He cites Linus Torvalds, who reportedly called rules against AI coding tools "UTTERLY STUPID" on the Linux kernel mailing list. The ex…
Troy Hunt's weekly update reports two arrests linked to the ShinyHunters cybercrime group: an individual named Pepijn in the Netherlands and another named Saif in Jordan. Hunt calls the arrests an inevitable and likely outcome. He expects more members to follow, and anticipates substantial custodial sentences given the seriousness of the …
In Weekly Update 525, Troy Hunt argues that hype portraying AI as a data breach driver is not supported by current evidence. He cites a run of recent breaches carried out by young attackers using voice phishing (vishing) over the telephone, and says he has not seen a single breach orchestrated by AI. The post is opinion and commentary, wi…
Bruce Schneier has published his list of upcoming speaking engagements. It covers five events between October and November 2026 in Canada and the United States. The events are ATTENTION: Democracy, Rebuilt in Montreal (October 21-23), a talk at the University of Toronto (October 22), unprompted in San Francisco (October 27-29), the Cataly…
This item is a reader comment by Clive Robinson posted under a Schneier on Security entry titled "The Future of AI Cryptanalysis". It does not discuss cryptanalysis and reports no security incident. The commenter discusses UK Civil Aviation Authority (CAA) restrictions on university rocket projects, including limits on flight control and …
A reader comment on Schneier on Security (Clive Robinson, 14 Oct 2026), posted under a thread about connected fridges in France, cites a Stars and Stripes report of refrigeration outages at US military commissary stores. Army CID's Cyber Field Office and the Air Force Office of Special Investigations confirmed active investigations, with …
A reader comment on Schneier on Security discusses the arrest of a suspect in a case involving the hacking of FBI systems. The comment cites Reuters reporting that the person involved was a contractor working for Accenture, and that the bureau says it has "removed the contractor" and taken steps to protect its workforce. The commenter, Cl…
A reader comment (by ResearcherZero) on a Schneier on Security squid-blogging post alleges that an agent working for the Russian GRU carried out repeated "Havana Syndrome"-style attacks with an energy-emitting device against civilians in Perth, Western Australia, from the second half of the 1980s until 1992. The commenter claims the attac…
A new dark web identity theft service called Nexus, advertised on the Russian cybercrime forum Exploit on Aug. 31, 2026, is selling scans of more than 153 million driver's licenses from the US and Canada. It also lists over 10 million ID cards, 3 million travel documents and 579,000 medical cards. KrebsOnSecurity's analysis points to the …
A reader comment by Clive Robinson on Schneier on Security discusses whether legally mandated age-verification checks and corporate surveillance systems could make CAPTCHAs obsolete as AI models learn to solve them. He suggests that age-verification documents, limited to natural persons, may not be available to current AI systems, and he …
A reader comment (ResearcherZero) on Schneier on Security's squid-blogging post discusses Havana Syndrome (anomalous health incidents, AHI). It cites a 60 Minutes/CBS report that the U.S. government acquired a directed-energy weapon from a Russian criminal network and has tested it, reportedly on animals. The commenter claims that inciden…
