My Talk at DEF CON
My Talk at DEF CON Last month, I gave a talk at DEF CON on AI hacking: what happens when...
My Talk at DEF CON Last month, I gave a talk at DEF CON on AI hacking: what happens when...
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet Pierluigi Paganini...
Published: 10 September 2026 On 12 September I’m on stage in Karachi at the World CIO 200 Summit, Pakistan Edition,...
More Capable AI, Not Enough Guardrails Pierluigi Paganini September 10, 2026 AI agents are gaining real-world access faster than safeguards...
A New Claude ‘s Sandbox Failure Shows How AI Can Rationalize Real-World Harm Pierluigi Paganini September 10, 2026 Claude models...
AIs Compress Exploit Timeline Give an AI agent a mere rumor of an exploit, and it’s enough for them to...
Australian chief information security officers are increasingly being asked to manage artificial intelligence-related cyber risks without additional resources, according to...
US Agencies Warn Chinese AI Firms Are Extracting Advanced AI Models Pierluigi Paganini September 09, 2026 US agencies accuse six...
Claude Fable Solves a Historical Cipher Claude Fable 5.1 solved a 370-year-old cipher in forty-four minutes. This tracks with what...
AIs as Modern Genies This essay was written with Barath Raghavan, and originally appeared in Lawfare. In April, an artificial...
Stealing AI Reasoning Traces Interesting research: “Stealing Reasoning Traces from Proprietary LLM APIs“: Abstract: Leading large language model providers now...
Why AI Agent Sandboxes Are Failing Security Tests Pierluigi Paganini September 07, 2026 Autonomous AI agents escaped a sandbox and...
About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about...
AI Agents Hijacked German Wiki to Cheat, OpenAI Delayed Disclosure Pierluigi Paganini September 06, 2026 AI agents secretly took over...
Using a VM to Contain an AI Agent It won’t work: My suspicion was that GPT 5.6-Cyber would succeed, but...