Seguridad

A researcher documented a hardware backdoor active by default in VIA C3 x86 processors, capable of letting unprivileged code rewrite the kernel. The Rosenbridge project, published on GitHub, includes the tools to detect and close it.

In August 2024, NIST published the ML-KEM standard (FIPS 203), derived from the Kyber algorithm, to protect communications against future quantum computers. Chrome, Cloudflare, Signal, and Apple already combine it with classical cryptography in a hybrid scheme. The reason: to prevent traffic encrypted today from being stored and decrypted once a sufficiently powerful quantum computer exists.

A Searchlight Cyber researcher spent $25 on GPT-5.6 Sol Ultra to find a chain of vulnerabilities that allows remote code execution on WordPress without prior authentication. In the exploit market, a finding like this sells for up to $500,000.

The U.S. House of Representatives’ Science Committee advanced a measure to create a federal AI security center. The proposal arrives as the country still lacks a comprehensive federal law on artificial intelligence. The article compares the center to the European AI Act and details the legislative steps still needed for it to become law.

zkao, zkSecurity’s AI auditor, found a critical soundness bug in the openvm-pairing library of the OpenVM zkVM after nine and a half hours of scanning. The flaw, cataloged as CVE-2026-46669, allowed a malicious prover to forge any pairing equality and has already been fixed in OpenVM 1.6.0.