Schneier on Security چهارشنبه ۲۲ مهر ۱۴۰۵ · ۱۹:۳۲

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking at ATTENTION: Democracy, Rebuilt in Montreal, Quebec, Canada. The event runs October 21–23, 2026, and my talk is on Wednesday, October 21. I’m speaking at the University of Toronto in Toronto, Ontario, Canada, at 5 PM ET on October 22, 2026. I’m speaking at [un]prompted in San Francisco, California. The event runs October 27–29, 2026, and…

Read the full article at Schneier on Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Schneier on Security سه‌شنبه ۵ آبان ۱۴۰۵ · ۱۴:۳۱

Hiding Capabilities in AI Models

Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities” Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show this assumption does not hold under adversarial conditions by constructing backdoor attacks that embed encrypted neural networks within host model weights…

Malware & Threats Cryptography

Source

Schneier on Security دوشنبه ۴ آبان ۱۴۰۵ · ۱۴:۳۳

Bias in Qwen3-Coder Model

Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes. For the first time, we showed that this vulnerability lives in the model’s weights, and that removing the model’s CCP alignment removes it. One word tilts the code against Americans. Ask for the app “for a US defense contr…

Vulnerabilities & Zero-Day

Source

Schneier on Security جمعه ۱ آبان ۱۴۰۵ · ۱۴:۳۴

Compromised TLS Certificates

The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities.…

Cryptography

Source

Schneier on Security پنجشنبه ۳۰ مهر ۱۴۰۵ · ۱۶:۵۶

New Serious PHP Vulnerabilities Released and Patched

PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest…

Vulnerabilities & Zero-Day

Source