1. Fujitsu confirms malware infection without ransomware behavior; 2. Potential data leakage involving personal and customer-related information; 3. Implemented measures include isolating and initializing affected PCs, blocking connections to the source server, enhancing security monitoring rules, and updating virus detection software.
Recent #cybersecurity news in the semiconductor industry
1. The urgency to implement Post-Quantum Cryptography (PQC) is driven by potential future decryption capabilities of quantum computers. 2. NIST and NSA have initiated PQC algorithm selections and recommendations, targeting full PQC implementation by 2033. 3. Secure-IC addresses practical challenges in PQC implementation, including performance, hybridization, and certification complexities.
1. Google to offer Dark Web Monitoring for free to all users; 2. Dark Web Report feature scans for personal info on the dark web; 3. Integration with 'About You' search results for removal requests.
1. Ransomware group LockBit hacked the US Federal Reserve, stealing 33TB of sensitive financial data. 2. The group is negotiating ransom with the Federal Reserve, threatening to leak the data if not paid. 3. The incident highlights the vulnerability of private organizations like the Federal Reserve to cyber attacks.
1. The webinar discusses the historical context of cryptographic algorithms like McEliece and RSA, highlighting the shift towards Post-Quantum Cryptography (PQC) due to quantum computing threats. 2. It emphasizes the importance of PQC in maintaining long-term security against quantum adversaries. 3. Secure-IC, with its expertise in PQC, will explore the challenges of PQC implementation, including performance, security, and certification, in an upcoming webinar.
➀ A student at the University of Applied Sciences in Hagen, Melanie Welp, has developed a contactless timing system for Paralympic swimming to prevent injury from head impacts.
➁ The prototype uses an ultrasonic sensor to measure the time at six meters and 50 centimeters before the edge of the pool.
➂ The system has been tested and shown to be possible without causing injury to swimmers.
➀ A hidden feature in ESP32 microcontrollers, widely used in IoT devices, poses potential security risks including device spoofing, data theft, and malware installation.
➁ This vulnerability stems from the undocumented commands in the Bluetooth Host Controller Interface (HCI) protocol, which could allow attackers to bypass standard security checks and compromise critical systems.
➂ Recommendations to mitigate risks include auditing firmware, disabling unused Bluetooth services, ensuring secure firmware updates, and implementing strong authentication mechanisms.
➀ The Fraunhofer IOSB-AST introduces a new training program, 'Hack the Grid: Mission OT-Sicherheit für Energie- und Wasserversorgung', aimed at improving cybersecurity in the energy sector.
➁ The program uses a gamification approach, allowing participants to switch roles between attackers (RED-Team) and defenders (BLUE-Team) to identify vulnerabilities and develop defense strategies.
➂ The training involves working on a mobile IT/OT hardware demonstrator that integrates common automation technology and network components, providing a practical learning experience.
➀ Wiz, a cybersecurity provider for cloud-based businesses, has been acquired by Google for $32 billion after rejecting a $23 billion offer last July.
➁ Wiz offers cloud-agnostic security solutions by supporting multiple cloud providers including AWS, Azure, Google Cloud, and Oracle Cloud.
➂ Wiz was founded by a team that previously sold a company, Adallom, to Microsoft for $320 million.
➀ A trawler caught 7 1/2 times as much fish as with conventional driftnet methods using new electronic fish-finding equipment developed by Kelvin and Hughes (Marine) limited;
➁ The story dates back to 65 years ago, when CERES (Combined Echo Ranging Echo Sounding) equipment was introduced;
➂ CERES combined echo-ranging and echo-sounding to improve fishing efficiency.
1. Alphabet's $32 billion acquisition of Wiz in cybersecurity is seen as expensive but won't significantly impact the business. 2. Despite heavy capex spending, Google's strong cash flows and balance sheet can handle the Wiz deal without dipping into cash reserves. 3. Google's stock has dropped over 20%, presenting a buying opportunity as it trades at historically low multiples despite rising EPS estimates.
➀ Ed向他的日记透露，执政不到一年的工党政府正在削减福利预算；
➁ 总理认为Ed是一个多面手，经常找他解决问题，Ed成了他的跑腿；
➂ 总理希望Ed帮助解决长期病假人员的问题，以减少福利预算开支，并避免政府形象受损。
➀ Softbank has acquired Ampere, an Arm-based server chip designer, for $6.5 billion.
➁ Ampere's technology originates from the Arm-based server processors of Applied Micro Circuit Corp (AMCC), which was acquired by MACOM in 2016.
➂ Softbank's acquisition of Ampere aligns with its mission to build AI chips and its recent purchase of Graphcore to enhance IC design expertise.
➀ Nvidia的年度GPU技术大会（GTC）正在举行，黄仁勋将发表主题演讲。
➁ 预计黄仁勋将宣布Blackwell 300 AI GPU和更多产品。
➂ B300系列AI GPU预计将在今年下半年推出，下一代Rubin AI GPU预计将于2026年推出。
➀ Espressif宣布其ESP32-C6 RISC-V MCU获得PSA Level 2认证；
➁ 该认证符合即将实施的法规，包括欧盟的网络安全韧性法案、美国网络安全改进法案、欧盟无线电设备指令和英国产品安全和电信基础设施制度；
➂ ESP32-C6的安全特性包括物理内存保护、内存隔离和权限管理、板载私钥生成、安全启动、闪存加密、AES、SHA、RSA和ECC的硬件加速器以及安全的JTAG模式。
➀ Researchers developed lipid nanoparticles (LNPs) to deliver mRNA encoding the KRAS G12D neoantigen and cGAMP to reprogram the liver's immune environment and generate an antitumor response against metastatic pancreatic cancer.
➁ The LNPs successfully activated the type I interferon pathway, leading to the generation of CD8+ cytotoxic T cells capable of recognizing and attacking metastatic cancer cells.
➂ The study suggests that combining KRAS mRNA with a STING agonist strengthens the immune response against PDAC and offers a more effective approach than traditional immunotherapies.
➀ Ed reflects on the sources of €1trn and his strategy to secure a share of it;
➁ Ed discusses the possibility of the US raising €800 billion for 'ReArm Europe' and €200 billion for 'InvestAI';
➂ Ed's assignment to the EU as 'Digital Envoy' and his plan to spend on meals and indulgences to identify influential figures in the spending of the funds.
➀ A research team led by Professor Kyu-Young Park from POSTECH has developed technology to significantly increase the lifespan and energy density of electric vehicle (EV) batteries;
➁ The technology involves a 'nano-spring coating' technique that improves battery stability and performance;
➂ The research is published in ACS Nano and has the potential to revolutionize EV battery technology.
➀ A new type of miniaturized pumps and valves using ultra-thin silicon films is presented at the Hannover Messe, developed by researchers at Saarland University. These pumps and valves operate without air pressure, motors, and lubricants, and can be operated in clean rooms. The team demonstrates a prototype of a new vacuum pump that can draw a vacuum up to 300 millibars.
➁ The technology is cost-effective, lightweight, and energy-efficient compared to current methods, with a 400 times lower energy consumption compared to conventional air-driven valves.
➂ The researchers have developed a novel actuator and pump technology that can be used in various applications, including robotic grippers, speakers, smart textiles, and haptic feedback.
The Fraunhofer Heinrich-Hertz-Institut (HHI) is developing networked quantum repeaters for secure communication networks, part of the QR.N project. Quantum networks use quantum mechanics principles to ensure secure communication. The project aims to extend data transmission range and connect quantum computers securely. QR.N is coordinated by Saarland University and involves various research and industry partners.