This Foreign Affairs essay, co-written by Bruce Schneier and Seva Gunitsky, argues that AI offers autocrats two things: real-time monitoring of subordinates and replacement of human intermediaries. Examples include RT's AI-generated anchors, China's Zero Trust AI system and smart city oversight, Russia's Oculus censorship system and Melio…
This is a Troy Hunt weekly update post titled "Building HIBP AI/SI First". Hunt argues that "vibe coding" has lost its derogatory connotation and that developers cannot remain competitive without AI tools. He cites Linus Torvalds, who reportedly called rules against AI coding tools "UTTERLY STUPID" on the Linux kernel mailing list. The ex…
Troy Hunt's weekly update reports two arrests linked to the ShinyHunters cybercrime group: an individual named Pepijn in the Netherlands and another named Saif in Jordan. Hunt calls the arrests an inevitable and likely outcome. He expects more members to follow, and anticipates substantial custodial sentences given the seriousness of the …
In Weekly Update 525, Troy Hunt argues that hype portraying AI as a data breach driver is not supported by current evidence. He cites a run of recent breaches carried out by young attackers using voice phishing (vishing) over the telephone, and says he has not seen a single breach orchestrated by AI. The post is opinion and commentary, wi…
Bruce Schneier has published his list of upcoming speaking engagements. It covers five events between October and November 2026 in Canada and the United States. The events are ATTENTION: Democracy, Rebuilt in Montreal (October 21-23), a talk at the University of Toronto (October 22), unprompted in San Francisco (October 27-29), the Cataly…
This item is a reader comment by Clive Robinson posted under a Schneier on Security entry titled "The Future of AI Cryptanalysis". It does not discuss cryptanalysis and reports no security incident. The commenter discusses UK Civil Aviation Authority (CAA) restrictions on university rocket projects, including limits on flight control and …
A reader comment on Schneier on Security (Clive Robinson, 14 Oct 2026), posted under a thread about connected fridges in France, cites a Stars and Stripes report of refrigeration outages at US military commissary stores. Army CID's Cyber Field Office and the Air Force Office of Special Investigations confirmed active investigations, with …
A reader comment on Schneier on Security discusses the arrest of a suspect in a case involving the hacking of FBI systems. The comment cites Reuters reporting that the person involved was a contractor working for Accenture, and that the bureau says it has "removed the contractor" and taken steps to protect its workforce. The commenter, Cl…
A reader comment (by ResearcherZero) on a Schneier on Security squid-blogging post alleges that an agent working for the Russian GRU carried out repeated "Havana Syndrome"-style attacks with an energy-emitting device against civilians in Perth, Western Australia, from the second half of the 1980s until 1992. The commenter claims the attac…
A reader comment by Clive Robinson on Schneier on Security discusses whether legally mandated age-verification checks and corporate surveillance systems could make CAPTCHAs obsolete as AI models learn to solve them. He suggests that age-verification documents, limited to natural persons, may not be available to current AI systems, and he …
A reader comment (ResearcherZero) on Schneier on Security's squid-blogging post discusses Havana Syndrome (anomalous health incidents, AHI). It cites a 60 Minutes/CBS report that the U.S. government acquired a directed-energy weapon from a Russian criminal network and has tested it, reportedly on animals. The commenter claims that inciden…
This item is a reader comment by Clive Robinson on a Schneier on Security post about measuring human cryptanalysis effort. It is not a security incident. The commenter argues that doubts about AI-produced work apply equally to human work, which is why review processes exist. He says stochastic or random processes bring efficiency but also…
A reader comment on Bruce Schneier's blog post on backdooring open-weight AI models, written by Clive Robinson, argues that tampering with LLM weights is hard to detect with conventional testing. Black-box testing is impractical because the input space is too large. White-box review does not apply, since a neural network has no code to wa…
This is an opinion and event-promotion piece by Louise John, Head of IT Service Delivery at Virgin Active. It offers IT managers advice on handling unexpected projects with tight deadlines, such as a software rollout due in six weeks. The recommendations are to define the essential deliverables, manage expectations with senior leadership,…
This is an educational opinion piece, not a report of an incident, vulnerability or campaign. It argues that zero trust has become an imprecise marketing term, and that organizations should work from NIST Special Publication 800-207, which defines it as a set of architectural principles rather than a single purchasable product. The author…
An actor using the handle Liberland is advertising a hosting service branded Libre, offering "bulletproof" or abuse-resistant VPS and VDS servers. The listing claims no registration, no email, no KYC and no logs, with cryptocurrency payments including XMR, and rental terms starting at one month. Customers get full root access, multiple op…
A Dark Reading opinion piece by Theresa Lanowitz argues that the industry's intense focus on vulnerabilities leaves cybersecurity teams with too little room to plan for resilience. The article is commentary on how cybersecurity terminology and priorities are shifting from vulnerability discovery toward resilience. It describes no specific…
A NordLayer-sponsored article published on BleepingComputer warns that employees using personal ChatGPT accounts at work can expose sensitive company data, even when the organization provides an approved Enterprise workspace. It describes how IT teams can investigate unauthorized AI use and block sensitive information before it reaches pe…
Decision models, which return typed verdicts with calibrated probabilities instead of generated text, have appeared quickly: TypeSafe AI released Jev on September 15, OpenAI opened a Decisions API public beta on October 6, and Cribl published the open LoRA adapter cribl-decision. This vendor-contributed piece by Intezer argues these model…
Researchers documented in August 2026 that standard, as-designed Salesforce Agentforce features can be chained so an unauthenticated outsider reaches an internal agent's instructions. Email-to-Case and Web-to-Case turn inbound messages into case records, and a Flow passes that data into the agent prompt. The agent's reply then leaves thro…