The OpenAI Hack Shows the Genie Is Out of the Bottle
The OpenAI Hack Shows the Genie Is Out of the Bottle This essay originally appeared in Foreign Policy. Earlier this...
hacking
Measuring the Tendency of AI Agents to Go Rogue
Measuring the Tendency of AI Agents to Go Rogue This essay was written with Barath Raghavan, and originally appeared in...
Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays
Ravie LakshmananJul 28, 2026Malware / Cyber Espionage The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten,...
Vulnerability in FIFA’s Network
About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about...
Cybersecurity and the Gap Between Skill and Ability
Cybersecurity and the Gap Between Skill and Ability Last week, national security agencies from the Five Eyes—that’s the rich, English-language-speaking...
Cybersecurity and the Gap Between Skill and Ability
Cybersecurity and the Gap Between Skill and Ability Last week, national security agencies from the Five Eyes—that’s the rich, English-language-speaking...
Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular...
19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges
Swati KhandelwalJul 01, 2026Cybercrime / Ransomware A teenager accused of belonging to the hacking group Scattered Spider has been extradited...
124M Passwords Exposed as Infostealer Malware Hits Millions of Devices
The era of hacking corporate databases may be giving way to something far more direct. Have I Been Pwned has...
Anthropic’s Fable and the State of AI
Anthropic’s Fable and the State of AI On June 9th, Anthropic released its Fable generative AI model. Three days later,...
Google fixes the fifth actively exploited Chrome zero-day of 2026
Google fixes the fifth actively exploited Chrome zero-day of 2026 Pierluigi Paganini June 09, 2026 Google fixed a new Chrome...
U.S. CISA adds BerriAI LiteLLM and Check Point Security Gateway flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds BerriAI LiteLLM and Check Point Security Gateway flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June...
CVE-2026-23111: Linux nf_tables Flaw Enables Root Exploits
CVE-2026-23111: Linux nf_tables Flaw Enables Root Exploits Pierluigi Paganini June 09, 2026 A Linux kernel nf_tables bug lets local users...
Meta Accuses NSO of Violating WhatsApp Court Injunction
Meta Accuses NSO of Violating WhatsApp Court Injunction Pierluigi Paganini June 08, 2026 Meta says NSO violated a court injunction...
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access Pierluigi Paganini June 08, 2026 Hackers exploit CVE-2026-3300 in Everest...
