Crypto ??Chrome ? ML-Science

Lazarus Group Launches First Open Source Supply Chain Attacks Targeting Crypto Sector | by Yehuda Gelb | checkmarx-security | Medium (August 2, 2023)

• Checkmarx Security details how a hacking group affiliated with North Korea targeted developers associated with blockchain, cryptocurrency, and online gambling.
• “Once contact was established, the attacker would invite the target to collaborate on a GitHub repository, containing malicious npm package dependencies which would then be used to compromise the victim.”
• The malware was a two-stage attack in which the booby-trapped software fetched additional components while running, making it harder to find through simple scanning.?
• The article provides a nice description of how sophisticated attackers combine targeted social engineering with technical capabilities.
• https://medium.com/checkmarx-security/lazarus-group-launches-first-open-source-supply-chain-attacks-targeting-crypto-sector-cabc626e404e ?

?

Google Chrome Protects Against Quantum Attacks | Enter Quantum (August 16, 2023)??

• Google’s Chrome Browser version 116 and above now includes support for X25519Kyber768, an encryption algorithm that is supposed to be resistant to attacks by quantum computers.
• X25519Kyber768 was deployed by Cloudflare back in October 2022. The company wrote a great blog article at the time explaining why it is important to upgrade now to algorithms that will be quantum-safe.
• You can find the technical details of X25519Kyber768 in the IETF draft . This use combines the existing X25519 ( an elliptic curve Diffie-Hellman key exchange using Curve25519) and Kyber768 (a post-quantum public key algorithm working its way through the NIST standardization process). The combination assures a security unless both of the algorithms are broken.?
• https://www.quantumbusinessnews.com/applications/google-chrome-to-protect-against-quantum-attacks ?

Introducing the REFORMS checklist for ML-based science (August 16, 2023)?

• Sayash Kapoor and Arvind Narayanan have proposed REFORMS: Reporting Standards for ML-based Science.?
• “The REFORMS checklist consists of 32 items across 8 sections. It is based on an extensive review of the pitfalls and best practices in adopting ML methods. We created an accompanying set of guidelines for each item in the checklist. We include expectations about what it means to address the item sufficiently. To aid researchers new to ML-based science, we identify resources and relevant past literature.”
• https://reforms.cs.princeton.edu/ ?

Subscription information

Google Group: https://groups.google.com/g/icymi-ai ? [subscribe]

LinkedIn: Database Nation