MEDIUMVulnerability
Global

Workshop on Economics and Information Security (WEIS) Archive

·Source: Schneier on Security

Updated:

Executive Summary

There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Really nice resource. It’s fun to reread my 2002 essay on the economics of information security.

Analysis

There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Really nice resource. It’s fun to reread my 2002 essay on the economics of information security.
Source Attribution

Originally published by Schneier on Security on Oct 21, 2026.

Related Threats

HIGHRansomware

Hospital Ransomware Attacker Receives 70 Month Jail Term

A Ukrainian affiliate of the Nefilim & Hive ransomware operations who attacked hospitals, government entities, and businesses over a three-year […] The post Hospital Ransomware Attacker Receives 70 Month Jail Term appeared first on The HIPAA Journal .

HIPAA Journal
CRITICALVulnerability

NVD CRITICAL: CVE-2026-118690 — Signal K Server before 2.33.0 contains a missing authentication vulnerability th...

Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to download log archives via the /skServer/ziplogs endpoint. Attackers can extract the JWT secretKey from security.json in the ZIP, forge administrator tokens, and create persistent admin accounts for full server control.

CVE-2026-118690
NIST NVD
HIGHRansomware

Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems

A Ukrainian man who carried out ransomware attacks for both the Nefilim and Hive gangs, including attacks on law firms and a healthcare provider during the COVID-19 pandemic, has been sentenced to 70 months in a US prison. Read more in my article on the Hot for Security blog.

Graham Cluley