High

Argon2id password hashing neutralizes GPU advantage in cracking attempts

SCM feed for Latest

July 21, 2026 at 9:54 PM

Overview

A recent study conducted by Specops researcher David Ketler tested the Argon2id password hashing algorithm against a powerful eight-GPU system equipped with Nvidia RTX 5090 cards and a single AMD EPYC 9B14 server processor. The findings revealed that Argon2id effectively neutralizes the advantages that such high-performance hardware would typically have in cracking passwords. This means that users relying on Argon2id for password security can feel more confident that their accounts are better protected against brute-force attacks. The implications are significant for individuals and organizations that prioritize strong password protection, as it makes it harder for attackers to compromise accounts using advanced hardware. As password cracking technology continues to evolve, using algorithms like Argon2id can play a crucial role in maintaining security.

Key Takeaways

Timeline: Newly disclosed

Original Article Summary

A study by Specops researcher David Ketler examined Argon2id's performance against current password-cracking hardware, specifically testing an eight-GPU system with Nvidia RTX 5090 cards and a single AMD EPYC 9B14 server processor.

Impact

Not specified

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Newly disclosed

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to AMD, NVIDIA.

Read Original Article

Related Coverage

TikTok Settles U.S. Child Privacy Case for $400 Million

Security Affairs

TikTok has agreed to pay $400 million to settle a lawsuit in the United States regarding its collection of data from users under the age of 13. This settlement comes after claims that the social media platform violated child privacy laws. The lawsuit, announced by the U.S. Department of Justice, emphasizes the importance of protecting children's personal information online. By settling, TikTok aims to resolve the legal issues without admitting to any wrongdoing. This case is significant as it highlights ongoing concerns about data privacy for minors and sets a precedent for how similar cases may be handled in the future.

Aug 24, 2026

Fake bank websites play dead to evade security scanners

Help Net Security

A new phishing technique called Chameleon SEO Poisoning has been identified by Fortra's threat intelligence team. This method involves creating fake banking websites that are optimized to appear in search results for terms like 'Bank Name Customer Portal'. These deceptive sites can evade security scanners by disguising themselves, making it difficult for users to recognize them as fraudulent. Fortra reported a significant increase in these phishing attempts, with a 40% rise noted in the second quarter of 2026. This situation poses a serious risk to individuals seeking to access their banking information online, as attackers aim to steal credentials through these disguised sites.

Aug 24, 2026

Ransomware attackers are zeroing in on mid-market companies

Help Net Security

A recent analysis by Black Kite reveals that mid-sized companies are increasingly becoming targets for ransomware attacks. Between January 2023 and June 2026, these companies, defined as those with annual revenues between $10 million and $1 billion, accounted for 73% of all publicly disclosed ransomware and data-extortion incidents with known revenue in North America and Europe. This consistent trend, showing that mid-market firms are targeted in 72% to 75% of cases during this period, indicates a shift in focus from larger enterprises to smaller businesses. The implications are significant, as these mid-sized companies often lack the extensive cybersecurity resources of larger firms, making them more vulnerable to such attacks. This trend underscores the need for improved security measures within these organizations to protect sensitive data and maintain operational integrity.

Aug 24, 2026

AWS makes it easier to spot firewall rules that have gone quiet

Help Net Security

AWS has introduced a new feature for its Network Firewall that allows security teams to track the hit count of stateful firewall rules. This capability helps identify which rules are actively matching traffic, making it easier for teams to spot unused or redundant rules. By enabling this feature by default, AWS aims to assist users in ensuring their security controls are functioning as intended. However, it's important to note that this feature currently only applies to stateful rules and does not support stateless rules. This update has no additional costs beyond standard charges for storing firewall data, making it a beneficial tool for organizations looking to enhance their network security management.

Aug 24, 2026

When an Agent Fails: Incident Response for AI-Initiated Access Events

SCM feed for Latest

The article discusses the challenges faced by cybersecurity teams when responding to incidents initiated by artificial intelligence. It highlights how AI can create new vulnerabilities, leading to unauthorized access events that traditional security measures might miss. Businesses and organizations are advised to enhance their incident response strategies to account for these AI-driven scenarios, ensuring they can effectively detect and mitigate such threats. The focus is on developing a proactive approach to security that includes monitoring AI activities and implementing robust authentication processes. This is particularly important as AI continues to evolve and become more integrated into various systems.

Aug 23, 2026

UK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water Attacks

Security Affairs

Iran-linked hackers successfully disabled a power plant in the UK for four days, marking a significant cyberattack on the country's energy sector. This incident is considered the first confirmed attack of its kind in the UK. The timing of the attack coincided with similar incidents targeting water infrastructure across 12 states in the United States, raising concerns about coordinated efforts by these hackers. The impact of such attacks on critical infrastructure is profound, as it not only disrupts services but also poses risks to public safety and national security. As countries increasingly rely on digital systems for essential services, the need for robust cybersecurity measures becomes even more urgent.

Aug 23, 2026