US Edition
News from schneier.com
If you want to know if schneier.com is credible or reliable, look no further. We rank schneier.com as Unknown factuality. Find out more about our methodology here.
Media Bias Ratings
Do you disagree?
Edit bias
Learn more about Media Bias Ratings.
Factuality
Learn more about Factuality Ratings
Reveal Factuality Ratings by upgrading to a Premium account.
Tap Upgrade to explore subscription options to meet all your reading needs.
Ownership
Learn more about Ownership categories
Reveal Ownership Data by upgrading to a Vantage account.
Tap Upgrade to explore subscription options to meet all your reading needs.
Top schneier.com News
Security · TexasLongtime Crypto-Gram readers know that I collect personal experiences of people being scammed. Here’s an almost:
Then he added, “Here at Chase, we’ll never ask for your personal information or passwords.” On the contrary, he gave me more information—two “cancellation codes” and a long case number with four letters and 10 digits. That’s when he offered to transfer me to his supervisor. That simple phrase, familiar from countless customer-service…See the Story
Details of a Scam
Artificial Intelligence · United StatesNotion just released version 3.0, complete with AI agents. Because the system contains Simon Willson’s lethal trifecta, it’s vulnerable to data theft though prompt injection. First, the trifecta:
The lethal trifecta of capabilities is:
Access to your private data—one of the most common purposes of tools in the first place!
Exposure to untrusted content—any mechanism by which text (or images) controlled by a malicious attacker could become avai…See the Story
Abusing Notion’s AI Agent for Data Theft
SecurityApple has introduced a new hardware/software security feature in the iPhone 17: “Memory Integrity Enforcement,” targeting the memory safety vulnerabilities that spyware products like Pegasus tend to use to get unauthorized system access. From Wired:
In recent years, a movement has been steadily growing across the global tech industry to address a ubiquitous and insidious type of bugs known as memory-safety vulnerabilities. A computer’s memory i…See the Story
