RSSAmplifier

Blog

Claudiu's Bad Security Blog

Expert commentary on critical cybersecurity issues. Claudiu Popa brings you the latest, most important discussions.

badsecurity.caRSS feed ↗15 posts

Latest posts

Choose Happy: A Journey Through Absurdist Security Theatre

Have you ever come across a site that takes great pains to tell you exactly the kind of password you should be using, with what seems to be a potpourri of creative ideas for arriving at a string of characters guaranteed to be impossible to memorize? This is not a

The Cybersafety Manifesto

The new role of Big Tech has created the urgent need for ethical companies to take a clear stand In J.R.R. Tolkien's "The Lord of the Rings", the Palantir refers to 7 magical, indestructible "seeing stones" used to watch events in other

Canadian Education Sector Data Breaches are Nothing New

Despite the natural impulse to treat them as a lost cause, there's still a lot we can do to limit, reduce, or even prevent the damage. When a university gets breached in Canada, I (and just about any other Canadian who has been paying attention) can usually predict

Will Canadians Finally Get a Break from Cyberfraud in 2026?

As we saw last year by simply perusing headlines, fraud in Canada is no longer a sideshow, it’s a full-blown epidemic. As I discussed on BNN Bloomberg’s Trading Day , financial cybercrime in Canada is growing faster than in the U.S. and Europe, the statistics

Do The 10 Immutable Rules of AI Cybersecurity Resonate in 2026?

Way back at the turn of the century, Microsoft’s “10 Immutable Laws of IT Security” became a cornerstone of cybersecurity education, at least for nerds. The list included such zingers as: " If a bad guy can persuade you to run his program on your computer,

What the Paralyzing Cyberattack Against Jaguar Land Rover Means for the Future of Everyday Cybersecurity

Over the past few months, we’ve witnessed two major cybersecurity incidents: first at CDK Global , and more recently, at Jaguar Land Rover (JLR) . Close inspection reveals something critical: cyberattacks are no longer limited to stolen passwords or locked-up files, particularly in industrial and manufacturing settings. Because they

So, Your Data’s Been Breached. Now What?

When your data leaks through the fingers of companies that should have known better, they send letters. Not alerts - those come later - but letters. That's because by law, they have to. They also have to be clear, helpful and transparent, but not all companies read the legislative fine

Digital Promises, Analog Pitfalls: The Risks and Rewards of a Canadian Children’s Privacy Code

Canada’s Children’s Privacy Code aims to protect kids online. Claudiu Popa explores its promise—and pitfalls—for regulators, families, and schools.

Google's AI Says Its Own Technology Is Being Used To Harm Palestinians

Instead of exhibiting AI Bias, Google's latest tools demonstrate brutal honesty when asked about their military weaponization against people.

When Does Automotive Convenience Turn Into A Safety, Security and Surveillance Concern?

Modern cars promise safety but double as surveillance tools, collecting and sharing vast amounts of data. Has 'convenience' become synonymous with 'surveillance'?

Have our "good" habits fostered bad security?

The access we grant to technology gives it unprecedented influence on our work and personal lives. Should we tolerate the normalization of data-driven business models?

Can Disruptive Tech Innovation Help or Hinder the Environment?

We’re living in an era of technological wonder, where AI can write your emails, cryptocurrency can fuel entire economies, and quantum computing is set to rewrite what we thought was possible. But at what cost?

13 Terrifying and Buzzwordy Cybersecurity Predictions for 2025

Every year, pundits, experts and marketers take a crack at creating forecasts that leverage fear, uncertainty and doubt (FUD) to get attention and exposure.

Delaying the Release of Data Breach Details Helps Neither the Victims Nor the Business Sector

The LifeLabs breach, one of Canada's largest data breaches, offers a cautionary tale of the harm caused by delaying transparency and accountability.

What are the business risks of trusting AI?

As we remain fascinated at the breakneck evolution of AI and its uses in business, it is easy to fall prey to various cognitive biases during the decision cycle. Claudiu Popa reveals a few ways to cut through the mysticism around AI.