Breach Roundup: YubiKey 5 Is Vulnerable to Cloning

Also: US Fingers Russian GRU Hackers; Ohio City Sues Researcher Anviksha More (AnvikshaMore) • September 5, 2024

Every week, Information Security Media Group rounds up cybersecurity incidents and breaches around the world. This week, YubiKey 5 has a flaw, an Ohio city sued a researcher, the Irish regulator ended its GrokAI case, open-source AI tools exposed data, Starlink blocked X in Brazil, FCC banned Kaspersky, Intel addressed a researcher's claim, and Transport of London is still affected by a cyber incident.

See Also: Cloud NGFW : Best-in-class security and unparalleled simplicity on AWS

The secure element embedded into the world's most widespread FIDO hardware token contains a flaw that makes it susceptible to cloning. Researchers at NinjaLab discovered a flaw in microcontrollers manufactured by Infineon, which is the secure element Yubico uses in older versions of its YubiKey 5 Series hardware keys.

There's no reason for panic ...