Toggle light / dark theme

Spin-orbit torque hardware creates random keys and reveals unauthorized access attempts

The information exchanged by modern devices is typically protected by cryptographic techniques, approaches that convert readable data into scrambled, unreadable code that can only be deciphered by authorized parties or devices. To descramble encrypted data, devices or accounts need access to randomly generated cryptographic keys, unique, randomly generated sequences of binary code, letters or numbers that are essential for encrypting or decrypting data.

To detect cyberattacks, most traditional hardware security systems monitor the power consumption, electrical signals or other changes in devices. However, cyberattackers have devised effective techniques that sometimes allow them to bypass these systems’ defenses.

Researchers at Huazhong University of Science and Technology and Hubei University recently introduced a new hardware security system based on spin-orbit torque (SOC) devices, technologies that operate by leveraging both electrical charge and a quantum property known as electron spin.

Klue OAuth breach linked to ‘Icarus’ Salesforce data theft attacks

Market intelligence platform Klue suffered a OAuth breach that enabled the “Icarus” threat actors to steal Salesforce CRM data from multiple organizations in an ongoing extortion campaign.

Sources told BleepingComputer of the attack yesterday, telling us that numerous organizations had their Salesforce data stolen and were now being extorted by the relatively new extortion group.

Cybersecurity firms ReliaQuest and Huntress have both published reports confirming the security incident, with Huntress stating that their Salesforce data was stolen in the attack.

Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp

International law enforcement agencies cleaned nearly 15,000 malware-infected WordPress websites and took down more than 100 servers linked to the SocGholish botnet and the Evil Corp Russian cybercrime group.

This joint action (supported by Europol and Eurojust) was part of Operation Endgame, a major law enforcement operation targeting cybercrime now aimed at disrupting a key infection chain linked to Evil Corp.

Authorities from the Netherlands (NHCTU), Canada (RCMP), the United States (FBI), and Germany (BKA) cleaned SocGholish malware infections from 14,971 compromised WordPress websites and took 106 servers and domains offline.

ShapedPlugin update flow hacked to infect WordPress sites

Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected releases to paying customers via the vendor’s official update system.

The malware delivered this way installed a fake plugin that impersonates WooCommerce components, steals credentials, and grants operators remote file-writing capabilities.

ShapedPlugin is a WordPress plugin vendor specializing in front-end/UI components and content display plugins, with a total active installation base of more than 400,000 for the free products.

Nintendo confirms data stolen in WebMD subsidiary cyberattack

Nintendo of America has confirmed to BleepingComputer that threat actors stole survey data from the third-party TinyPulse service used internally, but its systems were not compromised.

The company’s statement comes after claims from the Shadowbyt3$ “extortion-as-a-service” threat group that they exfiltrated sensitive data related to Nintendo of America employees.

“We are aware of an issue involving TinyPulse, a third-party service used for internal employee surveys at Nintendo of America,” stated Nintendo.

What AI Reveals About the Brain

Can AI become smarter than humans?

In this episode, I talk to Chris Summerfield about the frontier of artificial intelligence, neuroscience, LLMs, AI agents, memory, and superintelligence.

We discuss why models like ChatGPT and Claude can feel so human, why today’s AI still does not learn like the brain, and why continual learning may be one of the most important unsolved problems in AI. Chris explains how human memory works, why sleep matters for learning, and what AI research is teaching us about intelligence itself.

We also discuss the future of work, education, creativity, and whether AI could lead to a more human world — or a much stranger one.

Topics covered:
• ⁠ ⁠Artificial intelligence and the human brain.
• ⁠ ⁠⁠LLMs, ChatGPT, Claude and AI agents.
• ⁠ ⁠⁠AI memory and continual learning.
• ⁠ AI alignment, safety and misalignment.
• ⁠. Superintelligence and self-improving systems.
• ⁠ Hallucinations, reasoning and intelligence.
• ⁠. Education, jobs and the future of work.
• ⁠. Why AI may change how humans understand themselves.

TIMESTAMPS:

AI, Quantum And The New Cybersecurity Framework Imperative

Understanding these technologies through the lens of resilience, rather than just innovation, is critical for cybersecurity leaders planning for the coming decade.

The key cybersecurity issue of the coming decade will not prevent every breach. It will be about maintaining trust and resilience in an age of increasing digital interdependence.

Organizations that embrace adaptive risk management, quantum preparedness, responsible AI governance, and resilience-by-design will be well-positioned to succeed in the Acceleration Era. The future belongs not only to the most inventive but also to the most trustworthy and resilient businesses.

/* */