NewsSchneier on Security
AI Doesn’t Have to Go Rogue to Break the World
More on Doesn’t
Other advisories
- Not ratedosv:CVE-2023-32198Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks
- Not ratedosv:CVE-2025-23390Fleet doesn’t validate a server’s certificate when connecting through SSH
- MediumCVE-2024-23566HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. It can lead to various security issues like brut…
- Not ratedosv:CVE-2026-3113mmctl export download command doesn’t restrict permissions to created file to file owner
- MediumCVE-2025-23390Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet
- HighCVE-2023-32198Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks in github.com/rancher/stev
- HighCVE-2023-32198Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks
- MediumCVE-2025-23390Fleet doesn’t validate a server’s certificate when connecting through SSH
Other news entries
- New malware doesn’t call home, it turns your Exchange server into its homeNewsCSO Online
- Your enterprise doesn’t need six BOM programs. It needs one evidence graphNewsCSO Online
- CISO thought he had a 'r3@lg00dp@$$w0rd' but forgot to patchNewsThe Register — Security
- Hacker Conversations: Marcus Hutchins and the Journey From the Gray Zone to RedemptionNewsSecurityWeek
- Beyond the screenshot: Why you should verify what you seeNewsESET WeLiveSecurity
- Agentic AI Security: Wrong Context, Wrong Decisions at Machine SpeedNewsSecurityWeek
- 5 new security operations roles the AI-SOC will createNewsCSO Online
- EvilTokens: A phishing attack that doesn’t steal your passwordNewsESET WeLiveSecurity
Source: https://www.schneier.com/blog/archives/2026/11/ai-doesnt-have-to-go-rogue-to-break-the-world.html
ID