➀ CAST is releasing a new IP core, KiviPQC™-KEM, implementing the ML-KEM as per NIST FIPS; ➁ The company invites early adopters for product evaluations; ➂ The announcement highlights the importance of post-quantum cryptography in semiconductor IP core development.

➀ Hacker Aedan Cullen gains access to the OTP secret by glitching the RISC-V cores of the RP2350; ➁ The RP2350 was introduced as a successor to the RP2040 with added security features; ➂ The hacking challenge was to uncover a secret hidden in the RP2350's OTP memory.

1. Homeland security is in focus following a pair of attacks over New Year's 2025; 2. The FBI is investigating connections between the incidents, including shared military links and rental vehicles; 3. There is a potential for increased investment in law enforcement and prison operators due to the heightened security concerns.

➀ Google warns Gmail users to be cautious of scams and spam during the holiday season; ➁ Reports a significant increase in fraudulent emails since mid-November; ➂ Describes three types of scams: invoice scams, celebrity scams, and extortion scams; ➃ Google implements AI-powered measures to enhance Gmail's defenses and provides tips for users to stay safe.

➀ Apple is exploring the smart doorbell market; ➁ The device is said to feature advanced facial recognition; ➂ Apple is targeting 2026 for release.

➀ Crypto Quantique enhances its QDID PUF with a TRNG, making it resilient against side-channel attacks due to quantum entropy source; ➁ The TRNG generates new, unpredictable random numbers for cryptographic operations; ➂ QDID provides a secure foundation for root-of-trust in IoT devices without storing identities and keys in memory.

➀ Security researchers at Check Point warn of a Google Calendar security threat affecting over 500 million users; ➁ Cybercriminals are exploiting user-friendly features to trick victims into clicking malicious links; ➂ The attack is evolving to align with Google Drawings capabilities.

➀ SK Telecom plans to invest $3 million in Twelve Labs, a video understanding company; ➁ Twelve Labs develops multimodal video foundation models capable of understanding video content like humans; ➂ The partnership aims to develop technologies for implementing multimodal AI in security and public safety applications.

➀ As more sites and services require login accounts, users are overwhelmed with managing multiple passwords, leading to poor choices like reusing passwords. ➁ Microsoft is promoting passkeys as a replacement for passwords and has been working to integrate this authentication method into its services. ➂ The company aims to make passkeys the default method of account authentication, simplifying user management and enhancing security.

➀ The FTC warns of a significant increase in online job scams, known as 'task scams,' which ask applicants to perform fake tasks to defraud them of money. ➁ The scams often involve receiving vague messages about online work and being asked to complete tasks like 'app optimization' or 'product boosting.' ➂ The FTC reports that these scams have quadrupled in the first half of 2024, with reported losses exceeding $220 million in the first six months.

➀ Crypto Quantique has upgraded its QuarkLink IoT platform with a hybrid post-quantum cryptographic algorithm; ➁ The platform reduces the time and expense of implementing security functions in embedded devices by up to 10X; ➂ The hybrid key encapsulation mechanism combines X25519 with Kyber (ML-KEM) for both current and future security.

➀ NATO plans to deploy sea drones to monitor and protect undersea cables; ➁ The project is expected to begin from June 2025; ➂ The aim is to enhance security and surveillance around Europe's major water bodies.

➀ The MAXREFDES9001 is an IoT security reference design from Analog Devices that provides a solution for secure, low-power sensor networks; ➁ It features a LoRa-based temperature sensor node, secured by the DS28S60 cryptographic coprocessor, and includes a LoRa gateway and a cloud application hosted on AWS infrastructure; ➂ The design allows for secure data transmission and ensures integrity, confidentiality, and authentication.

➀ The OpenWrt One router has been released at a price of $89; ➁ The router is designed for hacking enthusiasts and features dual Ethernet ports, three USB ports, and dual-band Wi-Fi 6; ➂ OpenWrt One is built with open-source OpenWrt firmware pre-installed and is considered unbrickable.

➀ Riot has launched a bug bounty program for Vanguard, its anti-cheat system for Valorant and League of Legends; ➁ The program is managed by HackerOne and offers rewards up to $100,000 for reported exploits; ➂ The highest reward is for exploits that can attack the network without user interaction.

➀ Early Black Friday deals on security cameras up to 50% off; ➁ Reolink Atlas PT Ultra with solar panel offers 96 hours of recording and 500 days of battery life; ➂ Blink Video Doorbell + 3 indoor/outdoor cameras allows remote door viewing and 1080p HD live feed; ➃ Arlo Essential Security Camera 2K provides real-time notifications and live video streaming.

➀ The CHERI Alliance has been launched by a group of founding members including Chevin Technology, Google, and others to establish CHERI as a new standard for memory safety and software compartmentalization. ➁ The alliance aims to protect against memory-related vulnerabilities, which account for about 70% of cyberattack vulnerabilities. ➂ CHERI technology, developed since 2010, offers protection against memory safety issues like buffer overflows and heap use-after-free vulnerabilities.

➀ lowRISC CIC and SCI Semiconductor collaborate to tape out the Sonata design; ➁ The collaboration aims to move CHERI technology to commercial adoption; ➂ The project is funded by UKRI and focuses on the ICENI device family for OT applications.