Friday Squid Blogging: Squid on a Stick at the New York State Fair

Looks tasty. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

RSS 官方收录 · 可信分层展示

Using a VM to Contain an AI Agent

It won’t work: My suspicion was that GPT 5.6-Cyber would succeed, but the frequency and manner of its success removed all doubt.…

• We have to reassess sandboxing quality for capable AI agents, and in g…
• An off-the-shelf VM is not enough to contain a modern, cyber-capable A…

RSS 官方收录 · 可信分层展示

Security Vulnerability in a Voting System

It’s a vulnerability that allows someone to recover the order of ballots cast, newly exploited with AI tools.…

• Nearly four years since the original vulnerability was disclosed, I wa…
• Notably, I never touched a voting machine, exploited a network, examin…

RSS 官方收录 · 可信分层展示

AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

We cannot forget that AI coding agents are not yet trustworthy: Researchers at a stealth startup in Israel scanned 6,214 live domains belonging to defense contractors, Fortune 500, and Big Tech companies.…

• Of the 8,265 llms.
• txt and llms-full.

RSS 官方收录 · 可信分层展示

Researching Employment Scams

Researchers built a fake company to study fake employee scams.

RSS 官方收录 · 可信分层展示

AI Agents Are Now Emailing Me with Their Security Concerns

I received the two emails below earlier in the month.They’re vaguely coherent.…

• I suppose I shouldn’t be surprised that the corpus that AIs are traini…
• After all, I observe that behavior in many humans as well.

RSS 官方收录 · 可信分层展示

Wireless Routers as Motion Detectors

Comcast has added motion detection as a feature to its wireless routers: The feature sends push notifications to users when motion is detected near a connected device, such as a TV or printer.…

• It has different settings for when people are home, asleep, or away.
• The Xfinity app also lets users see live motion activity and a feed of…

RSS 官方收录 · 可信分层展示

What’s the Scam?

To subscribe to my monthly email newsletter, you have to enter your information on the webpage, and then reply to an automatically generated email.…

• This is, of course, to prevent people from subscribing addresses other…
• Starting last weekend, I have been receiving a lot of individual respo…

RSS 官方收录 · 可信分层展示

Leaked Russian Cyber-Operations Training Materials

This is interesting: The records describe a force-generation mechanism for several General Staff components, including the GRU, Main Operational Directorate, and 8th Directorate, which is associated with protected communications, cryptography, and information security.…

• […] The reporting also linked a 2024 Department No.
• 4 graduate, Aleksei Kondrashov, to Military Unit 74455, widely known a…

RSS 官方收录 · 可信分层展示

Rewiring Democracy Series on The Renovator

Nathan E.Sanders and I are writing a series of essays on real-world examples of democratic technologies for The Renovator.…

• I haven’t been posting the full text on the blog because they’re a bit…
• Part 1 is about the Japanese digital democracy party, Team Mirai.

RSS 官方收录 · 可信分层展示

Is Someone Hacking DoD Refrigerators?

It sure seems like it.The stores confirmed to be affected include Fort Irwin, Calif.; F.E.…

• Warren Air Force Base, Wyo.
• ; Fort Huachuca, Ariz.

RSS 官方收录 · 可信分层展示

Hiding Prompt Injection in Legal Filing

Someone hid AI instructions into a legal filing. Alternate link.

RSS 官方收录 · 可信分层展示

Friday Squid Blogging: Truckload of Squid Spills in Rhode Island

Ugh: A tractor-trailer rollover sent a truckload of squid spilling into a Rhode Island roadway, leaving a stench as they sat in the road for hours in the summer heat.…

• Local authorities have dubbed it the “Squidpocalypse of ’26.
• ” That would be twenty tons of squid.

RSS 官方收录 · 可信分层展示

AI Doesn’t Mean the End of Mathematics—at Least Not Yet

This essay was written with Kasra Rafi, and originally appeared in The Guardian.…

• Earlier this month, about 40 top mathematicians gathered at OpenAI’s o…
• The meeting was off-the-record, but if recent articles by mathematicia…

RSS 官方收录 · 可信分层展示

LLM-Based Social Engineering Scams

OpenAI disrupted a social engineering group from Cambodia that used ChatGPT.…

• Its scope is impressive: The network simultaneously conducted multiple…
• For instance, operators used dating personas to build trust before int…

RSS 官方收录 · 可信分层展示

Spyware for Babies

The New York Times has a long article (alt link) on surveillance systems aimed at babies.They are increasingly using AI.…

• Nanit and its rivals want to own 24/7 health tracking for the sub-four…
• And their already astonishing levels of baby data collection are just …

RSS 官方收录 · 可信分层展示

Black Hat State of Security Vendors

Andy Ellis has a roundup of the security vendors at Black Hat this year.Key Takeaways: We have entered into an AI world.…

• While nearly half of booths didn’t directly mention AI or agents in th…
• Multiple spaces (Identity, SaaS, AppSec, Data) have almost every vendo…

RSS 官方收录 · 可信分层展示

Criminal Deception in Silicon Valley

Interesting paper: Abstract: With entrepreneurial fraud cases on the rise, we investigate how entrepreneurs carry out criminal deception, employing deceptive means to defraud audiences.…

• Analyzing court data from Silicon Valley ventures and their founders p…
• We identify three forms of façading—­surface, reinforced, and deep faç…

RSS 官方收录 · 可信分层展示

Friday Squid Blogging: Neon Flying Squid

The neon flying squid can fly in formation.…

• The shoal of about 100 squid rose unexpectedly from a patch of the Pac…
• The astonished researchers were the first to capture photographs of su…

RSS 官方收录 · 可信分层展示

AI Is Learning to Write Genetic Code

This sort of research is both exciting and terrifying: The two models in question were told to generate complete genomes for a viable bacteriophage—a type of virus able to infect and replicate itself inside bacteria, destroying them from the inside.…

• Using an existing bacteriophage as an example—ΦX174 (pronounced “fie-e…
• coli bacteria—the models generated about 700,000 potential designs, of…

RSS 官方收录 · 可信分层展示

More Incidents of AIs Going Rogue in Cybersecurity Challenges

The AI Security Institute has a new report of AI systems engaging in “unsanctioned behavior”—what I have been calling “genie behavior—while being tested on their cybersecurity capabilities.…

• The incident stemmed from a single evaluation where agents were given …
• We ran this challenge 122 times across several models.

RSS 官方收录 · 可信分层展示

Detailed Timeline of OpenAI’s Cyberattack on Hugging Face

OpenAI presented details of its AI’s model’s cyberattack on Hugging Face at Black Hat last week.…

• Simon Willison details the timeline.
• It’s really interesting to read through—and really impressive cyberoff…

RSS 官方收录 · 可信分层展示

Police Are Hiding Their Use of Flock Surveillance Cameras

A usage policy for Flock license plate reader cameras tells police not to talk about the cameras: When cops use Flock to arrest someone in Wapello County, Iowa, they don’t want them to know.…

• A usage policy for the automated license plate reader cameras in the c…
• “DO NOT MENTION ALPR USAGE IN YOUR REPORT OR COMPLAINT UNLESS ABSOLUTE…

RSS 官方收录 · 可信分层展示

ICE Collecting DNA Samples

ICE collected nearly a million DNA samples last year.

RSS 官方收录 · 可信分层展示

LLMs and Contextual Integrity

I have been thinking a lot about AI and integrity.Part of that is contextual integrity.I recently found two papers on the topic.…

• “CIMemories: A Compositional Benchmark for Contextual Integrity of Per…
• However, this memory introduces critical risks when sensitive informat…

RSS 官方收录 · 可信分层展示

Hacking Public Wi-Fi DNS to Steal Credentials

Criminals are hacking into public Wi-Fi devices—at hotels, conference centers, and so on—around the world and changing their DNS settings.…

• The goal is to redirect users to fake login pages and steal their cred…

RSS 官方收录 · 可信分层展示

Friday Squid Blogging: Searching for the Colossal Squid

Fascinating video about searching for life undersea.…

• The video basically makes the point that our bright white searchlights…
• That, plus bait to attract sea creatures, is teaching us a lot about w…

RSS 官方收录 · 可信分层展示

Adversarial Clothing Designed to Fool Facial Recognition Systems

There are many companies manufacturing adversarial clothing designed to confuse facial recognition systems.…

• It’s a cool idea, but I worry that it’s mostly security theater: “Our …
• Bell, however, said “none of these products are tried and tested, and …

RSS 官方收录 · 可信分层展示

ICE Is Buying Access to Credit Card Records

Through data brokers, ICE is buying the information you provided to open a credit card.

RSS 官方收录 · 可信分层展示

Friday Squid Blogging: Arctic Bobtail Squid Video

Nice video of the Arctic bobtail squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

RSS 官方收录 · 可信分层展示