Cryptography
The latest Cryptography coverage — news, analysis, and updates from the WindowsNews.AI desk.
Cardano Midnight's Hyperscaler Strategy: Decentralization Debate Heats Up
Charles Hoskinson's recent defense of Cardano's decision to rely on hyperscalers for its upcoming Midnight mainnet has ignited a fierce debate about the fundamental nature of decentralization in...
AWS-LC PKCS#7 Vulnerability: Critical Crypto Library Patch Impacts Windows Security
A critical vulnerability in AWS's open-source cryptographic library, AWS-LC, has been patched after researchers discovered that the library's PKCS7_verify() routine could incorrectly validate...
Password Manager Zero-Knowledge Promise Broken: ETH Zurich Research Exposes Critical Flaws
A groundbreaking research paper from cryptographers at ETH Zurich and the Università della Svizzera italiana has shattered one of the most fundamental security promises in the password management...
CVE-2025-7394: Critical wolfSSL Fork Safety Bug Exposes Cryptographic Keys
A subtle but critical vulnerability in wolfSSL's cryptographic library has exposed a classic fork-safety failure that could lead to predictable cryptographic output and potentially compromised...
CVE-2016-3959: How a Forgotten Go DSA Bug Can Still Freeze Your Windows Services
In April 2016, the Go project shipped emergency releases 1.5.4 and 1.6.1 to slam the door on a denial-of-service hole in the standard library’s DSA signature verification routine. The bug, tagged...
GRUB2 CVE-2024-56738: Critical Bootloader Vulnerability Threatens Windows Dual-Boot Systems
A newly disclosed vulnerability in the GNU GRUB2 bootloader has sent shockwaves through the cybersecurity community, revealing a critical timing side-channel flaw that could allow attackers to bypass...
GnuPG Clearsign Vulnerability CVE-2025-68972: How Form-Feed Bug Bypasses Signature Verification
A critical vulnerability in GnuPG's clearsign implementation has been discovered that allows attackers to append unsigned text to signed messages while still passing signature verification,...
Microsoft's Kerberos Security Overhaul: RC4 to AES-SHA1 Default Change Explained
Microsoft is implementing one of the most significant security changes in Windows Server history by flipping the default Kerberos encryption algorithm from the vulnerable RC4 to the more secure...
Windows 11 WinRE Broken After KB5066835: Microsoft's Patch Causes Recovery Crisis
Microsoft's October 2024 cumulative update KB5066835 has triggered a critical system recovery failure affecting Windows 11 users worldwide, rendering the Windows Recovery Environment (WinRE)...
Microsoft Sets 2029 PQC Rollout Target, Aims for Full Quantum-Safe Ecosystem by 2033
Microsoft is moving post-quantum cryptography from theoretical warnings into a concrete, multi-year engineering plan. The company’s newly detailed Quantum Safe Program (QSP) carves a path from...
Microsoft Taps Marvell's LiquidSecurity FIPS 140-3 Level 3 PCIe HSMs to Power Azure Cloud HSM
Microsoft has selected Marvell's LiquidSecurity family of hardware security modules to anchor its Azure Cloud HSM service, extending a years-long collaboration that already underpins Azure Key Vault...
.NET 10 Preview 7 Ships with Native Passkey Support, WebSocketStream, and MAUI XAML Source Generator
Microsoft published the seventh preview of .NET 10 on August 12, 2025, releasing a build that looks and feels like a near-feature-complete milestone ahead of the Long Term Support (LTS) release...