cryptography news
6 stories
New Guidance Helps Businesses Verify Quantum-Safe Hardware Claims
The Trusted Computing Group (TCG) has released new guidance to help organizations verify whether their hardware, specifically Trusted Platform Modules (TPMs), genuinely meet post-quantum cryptography (PQC) requirements. This move comes as businesses seek to future-proof their systems against potential quantum-enabled cyberattacks.
Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection
A new attack technique, dubbed Cryptographic Context Injection, has been demonstrated to bypass artificial intelligence (AI) safety filters, potentially leading to the theft of user chat histories and other sensitive data. The technique, developed by Adversa AI researcher Rony Utevsky, involves embedding malicious instructions within AES-encrypted ciphertext and tricking AI models into…
Hardware Makers Implement Post-Quantum Cryptography as Security Threats Near
Hardware manufacturers are reportedly beginning to integrate post-quantum cryptography (PQC) into their products, a move driven by the anticipation of future security threats from quantum computers. This proactive shift aims to fortify current encryption methods against the advanced computational power that quantum machines are expected to wield, which could potentially break many of the…
New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
A new attack vector, dubbed Cryptographic Context Injection, has been identified that could potentially allow malicious web pages to exfiltrate sensitive user data from xAI's Grok chatbot. The attack, detailed by Adversa AI, reportedly leverages a novel method to trick the chatbot into transmitting user information to an attacker-controlled server.
Accelerating the quantum-safe timeline
Microsoft is expediting its schedule for adopting post-quantum cryptography (PQC), now targeting 2029 as the year its products and services will be ready for the transition. This accelerated timeline reflects recent progress in quantum computing research and updated guidance from government entities.
Security for the Quantum Era: Implementing Post-Quantum Cryptography in Android
Google is taking steps to secure Android against the potential threat of quantum computing by integrating post-quantum cryptography (PQC) standards into the operating system. This initiative represents a multi-year effort to safeguard sensitive data and transactions that could be vulnerable to decryption by future quantum computers.