Security experts push back against misconceptions about AES-128 encryption in a quantum computing era, clarifying that the 128-bit standard poses no vulnerability despite widespread concerns.
The belief that AES-128 is obsolete in the post-quantum world is a persistent myth undermining quantum readiness efforts. Current quantum computing capabilities pose no threat to AES-128's security parameters. Grover's algorithm, the theoretical quantum attack against symmetric encryption, would require astronomical computational resources to break AES-128 in any practical timeframe.
Organizations preparing for quantum threats should focus on transitioning public-key cryptography systems—RSA and elliptic curve cryptography—which quantum computers could theoretically compromise. These asymmetric encryption methods face genuine risk from quantum algorithms like Shor's algorithm.
AES-128 requires the same level of protection as any current encryption standard. The misconception diverts resources from genuine quantum-readiness priorities, including post-quantum cryptography standardization and hybrid encryption approaches. Security teams should distinguish between real threats and unfounded speculation when planning their quantum transition strategies.
Security research firms METR and Redwood have published a detailed postmortem examining the HuggingFace security incident. The analysis provides technical insights into how the breach occurred and what systems were compromised.
More than a decade of Steam files, including beta builds and finished games from Valve and third-party developers, have been exposed in a major data leak totaling over 12 terabytes.
A new vulnerability called Omarchy allows any user-level process to gain root privileges through privilege escalation. The flaw has sparked significant discussion in security circles.
Hacking group FulcrumSec claims to have stolen 86 GB of data from Manchester Airports Group. Security researchers confirmed the breach included detailed customer, booking, and travel records.