ZeroHour

Source: Schneier on Security

2 stories in the last 3d

25 Years of Mass Surveillance Is Enough

Bruce Schneier and Cindy Cohn argue post-9/11 mass surveillance expanded far beyond its counterterrorism justification and should be reevaluated for costs to rights.

An essay by Bruce Schneier and Cindy Cohn (originally in Lawfare) traces the post-9/11 shift from targeted surveillance to mass collection of telephone and internet metadata. It cites the Section 215 bulk phone records program, struck down in interpretation by the Second Circuit in 2015 and curtailed by the USA Freedom Act, and the NSA's Upstream program under Section 702 of the 2008 FISA Amendments Act, which ended content searches in 2017. The authors note mass surveillance now serves routine law enforcement and immigration actions, with FBI Director Kash Patel confirming purchases of Americans' data from brokers, and private systems like Flock license plate readers and venue facial recognition feeding government access.

Microsoft’s Patching

Microsoft's September Patch Tuesday fixes a record 972 vulnerabilities, 112 rated critical, amid AI-accelerated vulnerability discovery.

Microsoft's September 2026 Patch Tuesday patches a record ~972 vulnerabilities, 112 rated critical, following records of 570 two months ago and ~620 last month. Schneier attributes the surge to AI-powered vulnerability finding, citing an open letter from OpenAI, Anthropic, AWS, Google, Microsoft and roughly 100 organizations warning of an AI-enabled attack tsunami. He predicts AIs will reverse-engineer exploits from patches, weaponizing flaws immediately upon release and shrinking the patch window to 'immediately.'

Schneier on Security · 1d agoVulnerability1