This Week In Security: FBI Gets Hacked, Muse Vulnerable To ClickFix, Popular Rust Developers At Risk, And New Attacks Against RSA

September 25, 2026 by Mike Kershaw 13 Comments

The prolific ShinyHunters group has announced it used a zero-day vulnerability in Oracle PeopleSoft to exploit the FBI jobs website and gain access to the AWS GovCloud instances and dump 2 TB of employee data. GovCloud being a special, locked-down version of the Amazon Web Services cloud for US government users.

ShinyHunters has previously been involved in dozens of high-profile hacks and ransomware incidents. Some of the highest-profile incidents include Jaguar-Land Rover, causing a measurable impact on the UK GDP, Grubhub, Carnival Cruise Lines, Rockstar Games, and multiple universities and educational institutions, casinos, and other government agencies. ShinyHunters has also been credited with the hack of the Canvas educational program in the spring of 2026 where data including test results and chat logs of hundreds of millions of students, teachers, and staff was stolen. ShinyHunters has generally been identified as an international group of criminals, often teenagers, who will demand a BitCoin ransom of several million US dollars, with the threat of the stolen data being leaked if the victims do not pay.

On May 15, 2026 the FBI released a bulletin on the activities of ShinyHunters, focusing on the Canvas educational hack. In the report, the FBI said that the group uses “harassment strategies, sending threatening text messages and phone calls to victims and their family members”. ShinyHunters says that this is not accurate, and that they will release the FBI employee data, including information of employees and their family members, if the agency does not retract the statements, telling The Register “I have been doing my very best to combat these allegations, and this is the best way to do it”.

Continue reading “This Week In Security: FBI Gets Hacked, Muse Vulnerable To ClickFix, Popular Rust Developers At Risk, And New Attacks Against RSA” →

Ski Slopes For Laser Imaging

April 14, 2026 by Ian Bos 9 Comments

Lasers are cool and all, but they can be somewhat difficult to control at times. This is especially true when you have hundreds, thousands, or millions of lasers you need to steer. Fortunately, the MITRE Corporation might have created exactly what’s needed to accomplish this feat. While you might expect this to be done in a similar fashion as a DLP micro mirror array, these researchers have created something a bit different.

A ski slope like a MEMS array is used to contort light as needed. Each slope is able to be controlled in such a way so precise that entire images are able to be displayed by the arrays. This is done by using a “piezo-opto-mechanical photonic integrated circuit” or (POMPIC). Each slope is constructed from SiO2, Al, AlN, and Si3N4. All of these are deposited in such a way to allow the specific bending needed for control.

While quantum computing hasn’t hit these slopes yet, that doesn’t mean you can’t look into the other puzzles needed for the quantum revolution. Quantum computing is something that people have been trying for a long time to get right. Big claims come from all the big players. Take Microsoft, for example, with claims of using Majorana zero mode anyons for topological quantum computing.

Continue reading “Ski Slopes For Laser Imaging” →

Smoke Some Weeds: Lasers Could Make Herbicide Obsolete

April 26, 2023 by Zoe Skyforest 53 Comments

We’ve all tangled with unwelcome plant life at one point or another. Whether crabgrass infested your lawn, or you were put on weeding duty in your grandfather’s rose patch, you’ll know they’re a pain to remove, and a pain to prevent. For farmers, just imagine the same problem, but scaled up to cover thousands of acres.

Dealing with weeds typically involves harsh chemicals or excessive manual labor. Lasers could prove to be a new tool in the fight against this scourge, however, as covered by the BBC.

Continue reading “Smoke Some Weeds: Lasers Could Make Herbicide Obsolete” →

The laser module shown cutting shapes out of a piece of cardboard that's lying on the CNC's work surface

Giant CNC Partners With Powerful Laser Diode

April 30, 2022 by Arya Voronova 13 Comments

[Jeshua Lacock] from 3DTOPO owns a large-format CNC (4’x8′, or 1.2×2.4 m), that he strongly feels is lacking laser-cutting capabilities. The frame is there, and a 150 W CO2 laser tube has been sitting in a box for ages – what else could you need? Sadly, at such a scale, aligning the mirrors is a tough and finicky job – and misalignment can be literally blinding. After reading tales about cutters of such size going out of alignment when someone as much as walked nearby, he dropped the idea – and equipped the CNC head with a high-power laser diode module instead. Having done mirror adjustment on a few CO2 tube-equipped lasers, we can see where he’s coming from.

Typically, the laser modules you see bolted onto CNC heads are firmly under three watts, which is usually only enough for engraving. With a module that provides 5 watts of optical power, [Jeshua] can cut cardboard and thin plywood as well he tells us even 10 W optical power modules are available, just that he didn’t go for one. We reckon that 20 W effective power diodes are not that far into our future, which is getting very close to the potential of the blue box “40 W but actually 35 W but actually way less” K40 laser cutters we cherish. [Jeshua]’s cutter is not breaking speed limits, but it’s built on what’s already there, and the diode is comparatively inexpensive. Equipped with a small honeycomb surface and what seems to be air assist, it’s shown in the video cutting an ornamental piece out of cardboard!

We hackers have been equipping CNCs with laser diodes for a while, but on a way smaller scale and with less powerful diodes – this is definitely a step up! As a hacker, you should have at least some laser cutting options at your disposal, and this overview of CO2 cutters and their availability can get you started. We’ve also given you detailed breakdowns about different sides of laser cutting, be it the must-have of safety, or the nice-to-have of air assist.

Continue reading “Giant CNC Partners With Powerful Laser Diode” →

Using A Laser To Blast Away A Bayer Array

August 9, 2021 by Stephen Ogier 47 Comments

A Bayer array, or Bayer filter, is what lets a digital camera take color photos. It’s an array of tiny color filters that sit on top of a camera’s CCD. The filter makes it so that each sub-pixel in the image sensor only sees red, green, or blue light. The Bayer filter is an elegant tool that gives us color digital photos, but what would you do if you wanted to remove one?

[Les Wright] has devised a way to remove the Bayer filter from the Raspberry Pi Camera. Along with filtering red, green, and blue light for their respective sensors, Bayer filters also greatly reduce the amount of UV and IR light that make it to the CCD sensor. [Les] uses the Raspberry Pi camera in his Pi-based Spectrometer, and he wants to remove the Bayer filter to improve and expand its sensitivity.

Of course, [Les] isn’t the first one to want to do this. Some have succeeded in physically scratching the filter off of the CCD, but because the Pi Camera has vital circuitry around the outside of the sensor, scratching the filter off would likely destroy the circuitry. Others have stripped it off using chemical means, so [Les] gave this a go and destroyed no small number of cameras in his attempt to strip the filter off with solvents like DMSO, brake fluid, and industrial paint stripper.

A look at the CCD, halfway through the process.

Inspired by techniques used in industry, [Les] eventually tried to use a several-kW nitrogen laser to burn off the filter (which seems appropriate given his experience with lasers). He built a rig that raster scans the laser across the sensor using stepper motors to drive micrometer bases. A USB microscope was included to allow progress to be monitored, and you can see a change in the sensor’s appearance as the filter is removed.

After blasting off the Bayer filter, [Les] plugged his improved camera into his home-built spectrometer and pointed it outside. The new camera gives the spectrometer much more uniform sensitivity and allows [Les] to see further into the IR and UV bands. The spectrometer can even detect the Fraunhofer lines—subtle dips in the sun’s spectrum from absorption by molecules in the atmosphere.

This is incredible for a DIY setup and instrument, and we can’t wait to see what [Les] does next to improve his measurements. If your spectrometry needs are more mass than visual, take a look at this home-built mass spectrometer. Home spectrometers aren’t just for examining light spectra—they can also be used to judge the ripeness of fruit!

Continue reading “Using A Laser To Blast Away A Bayer Array” →

Fear Of Potato Chips: Samy Kamkar’s Side-Channel Attack Roundup

March 9, 2020 by Dan Maloney 13 Comments

What do potato chips and lost car keys have in common? On the surface, it would seem not much, unless you somehow managed to lose your keys in a bag of chips, which would be embarrassing enough that you’d likely never speak of it. But there is a surprising link between the two, and Samy Kamkar makes the association in his newly published 2019 Superconference talk, which he called “FPGA Glitching and Side-Channel Attacks.”

Continue reading “Fear Of Potato Chips: Samy Kamkar’s Side-Channel Attack Roundup” →

Laser-Based Audio Injection On Voice-Controllable Systems

November 6, 2019 by Pat Whetman 27 Comments

In one of the cooler hacks we’ve seen recently, a bunch of hacking academics at the University of Michigan researched the ability to flicker a laser at audible sound frequencies to see if they could remotely operate microphones simply by shining a light on them. The results are outstanding.

While most Hackers will have heard about ‘The Thing’ – a famous hack where Russian KGB agents would aim a radio transmitter at the great seal in the US embassy, almost none of us will have thought of using lasers shined in from distant locations to hack modern audio devices such as Alexa or Google Assistant. In the name of due diligence, we checked it out on Wikipedia: ‘The Photoacoustic Effect’ , and indeed it is real – first discovered in 1880 by Alexander Bell! The pulsing light is heating the microphone element and causing it to vibrate along with the beam’s intensity. Getting long range out of such a system is a non-trivial product of telescopes, lasers, and careful alignment, but it can be made to work.

Digging deeper into the hack, we find that the actual microphone that is vulnerable is the MEMS type, such as the Knowles SPV0842LR5H. This attack is relatively easy to prevent; manufacturers would simply need to install screens to prevent light from hitting the microphones. For devices already installed in our homes, we recommend either putting a cardboard box over them or moving them away from windows where unscrupulous neighbors or KGB agents could gain access. This does make us wonder if MEMS mics are also vulnerable to radio waves.

As far as mobile phones are concerned, the researchers were able to talk into an iPhone XR at 10 metres, which means that, very possibly, anybody with a hand held ultra violet / infra red equipped flashlight could hack our phones at close range in a bar, for example. The counter-measures are simple – just stick some black electrical tape over the microphone port at the bottom of the phone. Or stay out of those dodgy bars. Continue reading “Laser-Based Audio Injection On Voice-Controllable Systems” →