YubiKeys are vulnerable to unpatchable cloning attacks thanks to newly discovered physical side channel

The YubiKey 5, the most widely used hardware token for two-factor authentication based on the FIDO standard, contains a cryptographic flaw that makes the finger-size device vulnerable to cloning when an attacker gains temporary physical access to it, researchers said Tuesday. The cryptographic flaw, known as a side channel, resides in a small microcontroller used Read more about YubiKeys are vulnerable to unpatchable cloning attacks thanks to newly discovered physical side channel[…]

Balloon-Based Sensor That Pinpoints Location Of Drone Operators Emerges In Ukraine

Ukraine has developed a balloon-carried electronic surveillance system designed to detect enemy drone operators, which can then be targeted, offering a more comprehensive solution than tackling individual drones. While the current status of the system, known as Aero Azimuth, is unclear, its unveiling points to a resurgence in interest in elevated sensors mounted on aerostats. Read more about Balloon-Based Sensor That Pinpoints Location Of Drone Operators Emerges In Ukraine[…]

China’s Connected Car Crashes Are a Warning

[…] What happens when connected cars become disconnected cars? […] The phenomenon was chronicled in Rest of World, which spoke to multiple owners of EVs produced by financially troubled Chinese automakers. China kickstarted its EV industry with aggressive subsidies that lured dozens, if not hundreds of companies to produce cars. When those subsidies ceased, an Read more about China’s Connected Car Crashes Are a Warning[…]

Dutch DPA fines Clearview €30.5 million for violating the GDPR

Clearview AI is back in hot — and expensive — water, with the Dutch Data Protection Authority (DPA) fining the company €30.5 million ($33.6 million) for violating the General Data Protection Regulation (GDPR). The release explains that Clearview created “an illegal database with billions of photos of faces,” including Dutch individuals, and has failed to Read more about Dutch DPA fines Clearview €30.5 million for violating the GDPR[…]