New OpenSSH Vulnerability

It’s a bad one, and it’s been in the code for a decade: A newly disclosed flaw involving OpenSSH and musl, dubbed “*sshole,” allows attackers to…

Schneier on Security

Proudly nonprofit

A few times a year, Signal broadcasts in-app fundraising messages, inviting everyone who uses Signal to make a donation. You may have seen these messages and…

Signal Blog

New Release: Tor Browser 16.0.1

Tor Browser 16.0.1 is now available from the Tor Browser download page and also from our distribution directory. This version includes important security updates to Firefox.…

Tor Project Blog

AI Security

Two weeks ago, I attended the [un]prompted AI security conference in San Francisco. It was an excellent event: three days of very dense talks about all…

Schneier on Security

AIs Hacking the Law

In both a 2021 essay and my 2022 book, A Hacker’s Mind, I talk about AIs finding vulnerabilities and exploits—hacking—the legal system. Here’s some demonstrations of…

Schneier on Security