🦜 Schneier on Security -
@schneier.com@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline!
Brought to you by the RSS Parrot.
---
Your feed and you don't want it here? Just
e-mail the birb.
Claude Mythos Has Found 271 Zero-Days in Firefox
https://www.schneier.com/blog/archives/2026/04/claude-mythos-has-found-271-zero-days-in-firefox.html
Published: April 29, 2026 10:12
That’s a lot. No, it’s an extraordinary number:
Since February, the Firefox team has been working around the clock using frontier AI models to find and fix latent security vulnerabilities in the browser. We wrote previously about our collaboration with…
What Anthropic’s Mythos Means for the Future of Cybersecurity
https://www.schneier.com/blog/archives/2026/04/what-anthropics-mythos-means-for-the-future-of-cybersecurity.html
Published: April 28, 2026 11:06
Two weeks ago, Anthropic announced that its new model, Claude Mythos Preview, can autonomously find and weaponize software vulnerabilities, turning them into working exploits without expert guidance. These were vulnerabilities in key software like…
Medieval Encrypted Letter Decoded
https://www.schneier.com/blog/archives/2026/04/medieval-encrypted-letter-decoded.html
Published: April 27, 2026 11:04
Sent by a Spanish diplomat. Apparently people have been working on it since it was rediscovered in 1860.
Friday Squid Blogging: How Squid Survived Extinction Events
https://www.schneier.com/blog/archives/2026/04/friday-squid-blogging-how-squid-survived-extinction-events.html
Published: April 24, 2026 21:03
Science news:
Scientists have finally cracked a long-standing mystery about squid and cuttlefish evolution by analyzing newly sequenced genomes alongside global datasets. The research reveals that these bizarre, intelligent creatures likely originated deep…
Hiding Bluetooth Trackers in Mail
https://www.schneier.com/blog/archives/2026/04/hiding-bluetooth-trackers-in-mail.html
Published: April 24, 2026 11:01
It was used to track a Dutch naval ship:
Dutch journalist Just Vervaart, working for regional media network Omroep Gelderland, followed the directions posted on the Dutch government website and mailed a postcard with a hidden tracker inside. Because of…
FBI Extracts Deleted Signal Messages from iPhone Notification Database
https://www.schneier.com/blog/archives/2026/04/fbi-extracts-deleted-signal-messages-from-iphone-notification-database.html
Published: April 23, 2026 11:05
404 Media reports (alternate site):
The FBI was able to forensically extract copies of incoming Signal messages from a defendant’s iPhone, even after the app was deleted, because copies of the content were saved in the device’s push notification database….…
ICE Uses Graphite Spyware
https://www.schneier.com/blog/archives/2026/04/ice-uses-graphite-spyware.html
Published: April 22, 2026 11:02
ICE has admitted that it uses spyware from the Israeli company Graphite.
Mexican Surveillance Company
https://www.schneier.com/blog/archives/2026/04/mexican-surveillance-company.html
Published: April 21, 2026 11:04
Grupo Seguritech is a Mexican surveillance company that is expanding into the US.
Is “Satoshi Nakamoto” Really Adam Back?
https://www.schneier.com/blog/archives/2026/04/is-satoshi-nakamoto-really-adam-back.html
Published: April 20, 2026 11:07
The New York Times has a long article where the author lays out an impressive array of circumstantial evidence that the inventor of Bitcoin is the cypherpunk Adam Back.
I don’t know. The article is convincing, but it’s written to be convincing.
I can’t…
Friday Squid Blogging: New Giant Squid Video
https://www.schneier.com/blog/archives/2026/04/friday-squid-blogging-new-giant-squid-video-2.html
Published: April 17, 2026 21:05
Pretty fantastic video from Japan of a giant squid eating another squid.
As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
Blog moderation policy.
Mythos and Cybersecurity
https://www.schneier.com/blog/archives/2026/04/mythos-and-cybersecurity.html
Published: April 17, 2026 11:02
Last week, Anthropic pulled back the curtain on Claude Mythos Preview, an AI model so capable at finding and exploiting software vulnerabilities that the company decided it was too dangerous to release to the public. Instead, access has been restricted to…
Human Trust of AI Agents
https://www.schneier.com/blog/archives/2026/04/human-trust-of-ai-agents.html
Published: April 16, 2026 09:41
Interesting research: “Humans expect rationality and cooperation from LLM opponents in strategic games.”
Abstract: As Large Language Models (LLMs) integrate into our social and economic interactions, we need to deepen our understanding of how humans…
Defense in Depth, Medieval Style
https://www.schneier.com/blog/archives/2026/04/defense-in-depth-medieval-style.html
Published: April 15, 2026 10:47
This article on the walls of Constantinople is fascinating.
The system comprised four defensive lines arranged in formidable layers:
The brick-lined ditch, divided by bulkheads and often flooded, 15Â20 meters wide and up to 7 meters deep.
A low…