Encryption

BleepingComputer reports that the DarkBit ransomware operation had its encryptors used in a ransomware attack aimed at VMware ESXi servers two years ago cracked by Profero researchers.

The court found that the use of spyware for investigations into less severe crimes posed a significant intrusion into privacy. 

The attack chain begins with phishing emails containing TAR, RAR or 7Z attachments.

CyberScoop reports imminent threats posed by quantum computing have prompted Sens. Gary Peters, D-Mich., and Marsha Blackburn, R-Tenn., to introduce new legislation that would mandate the development of a federal quantum cybersecurity strategy, as well as the implementation of quantum-safe encryption pilot programs.

Congress scraps a federal AI mandate but unleashes over $1 billion for military AI, quantum research, and cryptography as Musk’s xAI lines up for a slice of the action.

Exposed APP_KEYs threaten widespread Laravel app compromise More than 600 apps in the open-source PHP web framework Laravel could be subjected to remote code execution attacks using APP_KEYs for data encryption that have been exposed on GitHub, according to The Hacker News.

While there was still no evidence of exploitation, Trend Micro advises customers to patch right away.