“As paradoxical as it may seem, AI, including agentic AI, is becoming essential to protecting privacy.”

In a column for the @acm.org, Norman Sadeh, Co-Director of the Privacy Engineering program at @cmu.edu, argues that without #AI, adequate #privacy has become simply out of reach.

Cognitive Warfare, AI, and Security: Insights from East Asia • Stimson Center Cognitive warfare powered by AI – including the spread of disinformation to leaders, militaries, and the general public – is growing in East Asia. AI also can be tool to respond to such attacks.

Hideto Tomabechi, CyLab Fellow and CEO of Cognitive Research Labs, will give talk on the evolution and future of cognitive warfare at the Stimson Center in Washington, D.C. on April 22 at 3 pm ET. See below for full details & to register to attend online or in-person. www.stimson.org/event/cognit...

Paper abstract

Beyond Fake Reviews: Exploring Superficially Benign Practices That May Distort Online Reviews
(@jcalandrino.bsky.social - @cylab.bsky.social) #ConPro26 [13/15]
conpro26.ieee-security.org/papers/calan...

Paper abstract

Measuring User Responses to Online Age Verification Mechanisms through a Deceptive Experiment
(Lin, Zhang, @madelyne.github.io, @lorriecranor.bsky.social, Scheffler - @cylab.bsky.social, @princetoncitp.bsky.social) #ConPro26 [9/15]
conpro26.ieee-security.org/papers/lin-c...

New CMU, Anaxi Labs collaboration explores how AI ecosystems create and share value A new collaboration between Carnegie Mellon University and Anaxi Labs aims to tackle one of the biggest unanswered questions in artificial intelligence: how the rapidly expanding AI ecosystem should d...

A new collaboration between @cmu.edu and Anaxi Labs aims to tackle one of the biggest unanswered questions in artificial intelligence: how the rapidly expanding #AI ecosystem should distribute the economic value it creates.

CyLab researchers to present at ACM CHI 2026 CyLab researchers are set to present four papers, serve on one panel, and lead three workshops at the upcoming Association for Computing Machinery (ACM) Conference on Human Factors in Computing System...

. @cylab.bsky.social researchers are set to present four papers, serve on one panel, and lead three workshops at the upcoming @acm.org @chi.acm.org Conference. #CHI2026

To Scale AI Agents Successfully, Think of Them Like Team Members Generative AI agents can reason, plan, and take actions across enterprise systems, which means deploying them is not just a software installation but a change to how work gets done. When agents gain t...

“To cross that threshold and effectively integrate AI agents at scale, you will need to stop treating them as turnkey software that simply needs to be installed.”

In a Harvard Business Review column, Rahul Telang of @cmuheinzcollege.bsky.social identifies recurring frictions in scaling agentic #AI:

CyLab announces Cyber Autonomy Initiative to advance AI-driven cyber defense As artificial intelligence rapidly transforms both cyberattacks and cybersecurity defenses, Carnegie Mellon University’s CyLab Security and Privacy Institute has announced a new research initiative ai...

As artificial intelligence rapidly transforms both cyberattacks and cybersecurity defenses, @cylab.bsky.social has announced a new research initiative aimed at reshaping how digital systems protect themselves. #AI

CyLab faculty and alumni to present research and innovations at RSAC 2026 CyLab faculty members Lorrie Cranor, CyLab director, and Vyas Sekar, Tan family professor of Electrical and Computer Engineering (ECE), will serve as panelists at next week’s RSAC 2026 Conference.

CyLab faculty members and alumni will present research and innovative startups at next week’s @rsaconference.bsky.social. See full details on contributions by @cylab.bsky.social faculty members @lorriecranor.bsky.social and Vyas Sekar, and alumni Saurabh Shintre, Brian Singer, & Mark Dong: #RSAC2026

CMU to host Cyber Startup Expo during RSA Conference 2026 On Monday, March 23, the Cyber Startup Expo 2026 will bring together early-stage cybersecurity companies, investors, and industry executives for a full day of startup demos, expert panels, and network...

On March 23, the Cyber Startup Expo 2026 will bring together early-stage cybersecurity companies, investors, and industry executives for a full day of startup demos, expert panels, and networking. Learn more about the event, and meet some of our participating CyLab Venture Network Startup Partners:

Lorrie Cranor receives 2026 ACM SIGCHI Lifetime Research Award Lorrie Cranor, director of Carnegie Mellon University’s CyLab Security and Privacy Institute, has been named a recipient of the 2026 ACM SIGCHI Lifetime Research Award, one of the highest honors in th...

Congratulations to Prof. Lorrie Cranor (@lorriecranor.bsky.social), @cylab.bsky.social Director, on being named a recipient of the 2026 @acm.org @acm-sigchi.bsky.social Lifetime Research Award, one of the highest honors in the field of human-computer interaction. www.cylab.cmu.edu/news/2026/02...

Photo of Professor Jonathan Aldrich giving a lecture at Carnegie Mellon University

Photo of Professor Jonathan Aldrich giving a lecture at Carnegie Mellon University

Many thanks to Prof. @jonathanaldrich.bsky.social, Professor in the @cmus3d.bsky.social and Director of the Software Engineering Ph.D. program, for stopping by CyLab today to share his research on (sub)-structural information flow: a simple, scalable, and general foundation for security reasoning.

Foresight Institute announces 2025 Norm Hardy Prize winners for advances in usable security Foresight Institute is proud to announce the winners of the 2025 Norm Hardy Prize: Dr. Pardis Emami-Naeini, Dr. Lorrie Faith Cranor, and Dr. Yuvraj Agarwal, for their contributions to advancing usable...

Congratulations to Profs. Pardis Emami-Naeini, Lorrie Cranor (@lorriecranor.bsky.social), & Yuvraj Agarwal on being honored w/ Foresight Institute’s Norm Hardy Prize for their contributions to advancing usable security through the development of a layered cybersecurity label for smart home devices!

Photo of David Kohlbrenner giving a classroom lecture at Carnegie Mellon University

Photo of David Kohlbrenner giving a classroom lecture at Carnegie Mellon University

Photo of David Kohlbrenner giving a classroom lecture at Carnegie Mellon University

Many thanks to Professor David Kohlbrenner of the University of Washington for visiting CyLab today to share his research on software #security and transistor physics in aging computer systems.

Data Privacy Day 2026 is underway at the Heinz History Center! Stop by the first floor Great Hall between 10 a.m. and 2 p.m. for a full day of programming. Details and schedule: privacy.cs.cmu.edu/cmu-privacy-...

Security Reasoning via Substructural Dependency Tracking (POPL 2026 - POPL Research Papers) - POPL 2026 /!\ We are aware of a scam travel company reaching out to participants. They are in no way affiliated to POPL, please be careful and always contact the organizers in case of doubt. /!\ Welcome to the ...

Congratulations to CyLab researchers Hemant Gouni, @fpfenning.bsky.social, and @jonathanaldrich.bsky.social on being recognized w/ a Distinguished Paper Award at the 53rd @acm.org SIGPLAN Symposium on Principles of Programming Languages (#POPL2026) in Rennes, France. Read their winning paper below:

CyLab study uncovers 270 million crypto phishing attempts A new study by researchers at Carnegie Mellon University reveals that a little-known but highly effective cryptocurrency scam known as “blockchain address poisoning” has quietly become one of the largest phishing schemes operating on public blockchains today.

Carnegie Mellon researchers analyzed Ethereum and Binance Smart Chain transaction data representing two years of crypto wallet transfers to track a simple but extremely effective phishing scam.

Carnegie Mellon launches summer undergraduate research program to expand pathways into security and privacy Carnegie Mellon University’s Software and Societal Systems Department is inviting undergraduate students from across the country to take part in its Security and Privacy Undergraduate Research (SPUR) ...

. @cmus3d.bsky.social is inviting undergrad students from across the country to take part in its Security & Privacy Undergraduate Research (SPUR) Scholars program, a 10-week immersive experience designed to introduce students to the world of #security & #privacy while helping them explore research:

CyLab’s Sarah Scheffler to discuss new research on age verification technologies at FTC workshop CyLab faculty member Sarah Scheffler, assistant professor in Carnegie Mellon’s Departments of Engineering and Public Policy and Software and Societal Systems, will participate as a panelist at the Fed...

CyLab faculty member Sarah Scheffler will participate as a panelist at the Federal Trade Commission's public, virtual Age Verification Workshop tomorrow, January 28. See full details of Professor Scheffler’s recent age verification research & learn how to register to attend the free workshop below:

Children’s Privacy in a Digital World - National Cybersecurity Alliance We'll take a deep dive into the privacy challenges facing kids, teens, and parents as technology becomes woven into learning, communication, and self-expression

Join Lorrie Cranor (@lorriecranor.bsky.social), CyLab Director, on Tuesday, January 27 at 2:30 p.m. ET for a Data Privacy Week webinar sponsored by the National Cybersecurity Alliance, on the topic of children’s #privacy in a digital world. See full details and register to attend below:

UPDATE: due to the anticipated winter storm, Data Privacy Day is being postponed one week to Sunday, February 1 from 10 a.m. to 2 p.m. at the Heinz History Center's first floor Great Hall. Please see full details below:

Bauer named 2025 ACM Fellow Lujo Bauer, professor of electrical and computer engineering and of computer science, has been named a 2025 Association for Computing Machinery (ACM) Fellow for contributions to access control, usable...

Professor @lujobauer.bsky.social of @cmu-ece.bsky.social and @cmus3d.bsky.social has been named a 2025 @acm.org ACM Fellow for contributions to access control, usable #security and #privacy, and the security of machine learning.

Carnegie Mellon brings International Data Privacy Day to the Heinz History Center on January 25 On January 25, Carnegie Mellon University’s Privacy Engineering program will take its annual celebration of International Privacy Day beyond campus and into the heart of the city, hosting a free, fami...

Join @cmus3d.bsky.social’s Privacy Engineering program and the Heinz History Center for Data Privacy Day on Sunday, January 25 from 10 a.m. to 2 p.m. at the Heinz History Center’s first floor Great Hall. See full details below: www.cylab.cmu.edu/news/2026/01...

Check out the latest @anthropic.com updates on CyLab Venture Network Startup Partner Incalmo:

Rahul Telang, Professor at Heinz College, spoke with the @huffpost.com about why everyday users should take digital privacy more seriously. The article explains how VPNs create encrypted connections that hide IP addresses and protect online activity. www.huffpost.com/entry/proton...

Teaching kids about privacy The book "Privacy Please" starts the conversation about phones and technology with kids.

#ICYMI: Watch Professor Lorrie Cranor (@lorriecranor.bsky.social), @cylab.bsky.social Director, chat with Mikey Hood and Heather Abraham of KDKA’s TALK PITTSBURGH about her new children’s book “Privacy, Please!” and share strategies for teaching kids about #privacy:

The book that could change how kids learn about digital privacy 'Privacy, Please!' offers a 4-year-old-friendly take on avoiding surveillance from grown-ups—or your annoying sibling.

“It’s okay to say you don’t want your picture taken, and this is a struggle for parents.”

@lorriecranor.bsky.social, @cylab.bsky.social Director, talks to @robpegoraro.com of @fastcompany.com about some of the takeaways for parents and educators from her new children's book, “Privacy Please!”

Decorative image of a New Year's greeting featuring the CyLab logo

Happy New Year from all of us at CyLab!

Lorrie Cranor: Why Security Fails Real People Dr. Lorrie Cranor⁠, Director of the CyLab Security and Privacy Institute at Carnegie Mellon University joins Ann Johnson, Corporate Vice President, Microsoft, on this week's episode of Afternoon Cyber Tea to discuss the critical gap between security design and real-world usability. They explore why security tools often fail users, the ongoing challenges with passwords and password less authentication, and how privacy expectations have evolved in an era of constant data collection. Dr. Cranor emphasizes the importance of user-centered design, practical research, behavioral insights, and simpler, more transparent systems to help CISOs build security programs that truly work for people.

Professor @lorriecranor.bsky.social, @cylab.bsky.social Director, chats with @ajohnsocyber.bsky.social, Corporate Vice President of @microsoft.com, about the critical gap between #security design and real-world #usability for @security.microsoft.com's #AfternoonCyberTea podcast:

Carnegie Mellon University earns top national rankings in cybersecurity education Carnegie Mellon University has been recognized as a national leader in cybersecurity education, earning the No. 1 ranking for undergraduate cybersecurity programs in the 2026 U.S. News & World Report ...

.@usnews.com and @fortune.com have ranked @cmu.edu number 1 on their lists of the best #cybersecurity academic programs. See full details below and learn more about CMU's #security and #privacy undergraduate and graduate offerings: