encryption

New BitUnlocker Downgrade Attack on Windows 11 Allows Access to Encrypted Disks in 5 Minutes

, , ,

A new tool called BitUnlocker exploits a vulnerability in Windows 11's BitLocker encryption, allowing attackers with physical access to decrypt protected volumes in under five minutes by using a downgrade attack on the boot manager. The attack leverages an unrevoked legacy signing certificate, enabling a pre-patch vulnerable boot manager to pass Secure Boot validation, but Microsoft mitigations like enabling TPM+PIN authentication and deploying update KB5025885 can protect systems against this exploit.

https://cybersecuritynews.com/bitunlocker-downgrade-attack-on-windows-11/

Cultivating a Robust and Efficient Quantum-safe HTTPS

, , , ,

Google's Chrome team is rolling out a program to implement quantum-safe HTTPS certificates using Merkle Tree Certificates (MTCs), which increase efficiency and transparency without compromising security. MTCs replace traditional certificate chains, reducing bandwidth usage while adopting post-quantum cryptography. The rollout has three phases: testing MTCs with existing certificates, inviting log operators for public MTCs, and establishing a new root store for MTCs. This initiative aims to ensure a robust, efficient, and scalable approach to enhanced web security amid evolving quantum threats.

https://security.googleblog.com/2026/02/cultivating-robust-and-efficient.html

New AirSnitch Attack Bypasses Wi-Fi Encryption in Homes, Offices, and Enterprises

, , ,

New research reveals a series of attacks, named AirSnitch, that bypass Wi-Fi encryption and client isolation, allowing attackers to intercept and manipulate data between connected clients. The attacks exploit vulnerabilities in the lowest levels of the network stack, specifically targeting the interaction between Layers 1 and 2. AirSnitch enables bidirectional man-in-the-middle attacks, potentially compromising sensitive data and enabling advanced cyberattacks.

https://arstechnica.com/security/2026/02/new-airsnitch-attack-breaks-wi-fi-encryption-in-homes-offices-and-enterprises/

Future of Quantum-Safe Networks Rests on Interoperable Standards

, ,

The article emphasizes cybersecurity advancements, particularly quantum key distribution (QKD), which is vital for secure, future-proof communications as quantum computing evolves. Establishing interoperable standards is essential for QKD's successful deployment, ensuring security across various industries and maintaining trust in digital infrastructure.

https://www.darkreading.com/endpoint-security/securing-future-building-quantum-safe-networks-today

Scientists Use AI to Encrypt Secret Messages That Are Invisible to Cybersecurity Systems

,

Scientists have developed a method using AI to encrypt messages within fake text, rendering them invisible to cybersecurity systems. This technique allows secure communication, particularly for journalists and citizens in oppressive regimes, by embedding secret messages that can only be accessed with a password. Dubbed EmbedderLLM, the method acts like digital invisible ink, but the ethics of its use remain a concern. The encryption is designed to resist future quantum computing decryption threats.

https://www.livescience.com/technology/artificial-intelligence/scientists-use-ai-to-encrypt-secret-messages-that-are-invisible-to-cybersecurity-systems

How Signal, WhatsApp, Apple, and Google Handle Encrypted Chat Backups

Comparing encrypted chat apps, Signal has no cloud backup, prioritizing privacy; WhatsApp allows backups with optional end-to-end encryption; Apple's iMessages are encrypted but not in backups by default, unless users enable Advanced Data Protection; Google Messages provides encrypted backups with passcodes. Users must ensure all chat participants enable encryption for maximal security, and weigh the necessity of saving conversations against potential privacy risks.

https://www.eff.org/deeplinks/2025/05/back-it-back-it-let-us-begin-explain-encrypted-chat-backups

Breaking Encryption: How to Prepare for Tomorrow’s Quantum Risk Today

,

Quantum computing threatens current encryption methods, risking sensitive data security. Organizations must prepare now by upgrading encryption to new post-quantum standards. Key steps include assessing exposure, adopting new encryption practices, remaining adaptable to evolving standards, and increasing awareness of quantum risks. This proactive approach helps safeguard data against future quantum capabilities.

Breaking Encryption: How To Prepare For Tomorrow's Quantum Risk Today

Scroll to Top