CONNECT WITH US
Friday 21 February 2025
RayAegis unveils critical API and AI security threats, offering cutting-edge solutions
In recent years, API attacks—especially those involving shadow APIs— have become an increasing concern. Some of the most destructive types of API attacks include command injection and malicious program uploads, which can grant attackers remote control over hosts and have already led to significant cybersecurity incidents.Additionally, AI-driven attacks are rapidly emerging as a major threat. Hackers are now leveraging AI tools to create sophisticated malware and attack vectors, further escalating security risks.Supply chain vulnerabilities have also become a widespread cybersecurity challenge. Supply chain attacks occur when enterprises are infiltrated through compromised third-party software or hardware provided by external partners. In many cases, companies outsource software development, but their vendors inadvertently incorporate compromised third-party components. These issues are difficult to detect yet have severe and far-reaching consequences. In recent years, RayAegis has also identified compromised third-party components in multiple ATM systems.RayAegis: A Pioneer in Cybersecurity InnovationRayAegis has been at the forefront of cybersecurity and artificial intelligence (AI) for years. As early as 2017, at the IEEE conference in San Jose, USA, RayAegis publicly demonstrated an advanced AI theory designed to detect zero-day vulnerabilities. To this day, AI systems deployed across various countries continue to uncover emerging zero-day attacks, providing robust security defenses.RayAegis also integrates this cutting-edge technology into red team exercises and penetration testing services, helping enterprises strengthen their security posture.Key Global Cybersecurity ChallengesRayAegis has identified several pressing cybersecurity challenges facing enterprises today:Shadow APIs remain widespread: Many organizations unknowingly purchase products that contain shadow APIs, which attackers can exploit to upload malware or gain unauthorized access to systems.Obfuscated OWASP TOP 10 attacks bypassing WAFs: Attackers are using advanced obfuscation techniques to evade Web Application Firewalls (WAFs), allowing threats such as obfuscated JavaScript, SQL injection, XSS, and OS command execution to bypass defenses and compromise backend systems.Failure to detect new, customized malware: Traditional antivirus solutions have limitations. RayAegis has observed that once enterprises are infected with new malware, they often struggle to prevent further threats, including data exfiltration, lateral movement, and system intelligence gathering.Inadequate access controls: Attackers can exploit weak access controls to retrieve unauthorized user information, access internal databases, or leverage critical internal services.LLM vulnerabilities in OWASP TOP 10 (https://genai.owasp.org/llm-top-10/): These vulnerabilities may expose sensitive system information and pose new security risks.RayAegis' AI-Driven Security SolutionsTo address the evolving landscape of cybersecurity threats, RayAegis not only provides professional security services but also develops AI-powered solutions to help enterprises mitigate risks:SandSphere: A sandbox solution that scans files and evaluates the security of supply chain software, including detecting embedded backdoors.UTDS-API: An API inventory system that identifies unmanaged APIs and detects zero-day vulnerabilities.Malware Protection Effectiveness Testing: Assesses an organization's ability to defend against cyber threats by simulating attacks to determine if hackers can extract system information or cause further damage.Credit: RayAegisRayAegis is a global cybersecurity leader, providing cutting-edge security solutions to major banks, government agencies, and enterprises worldwide. Visit the website for more information: https://www.rayaegis.com/english/
Thursday 20 February 2025
Chroma ATE develops comprehensive semiconductor testing Solutions, strategically positioning for 2025 global market
Semiconductor testing plays a crucial role in the supply chain, with industry players prioritizing factors such as test speed, cost, signal measurement accuracy, one-stop test capabilities, and software support. Chroma ATE holds a key position in the global ATE (Automated Test Equipment) market, offering a diverse range of solutions and maintaining a strong global presence. Recently, the company hosted a Semiconductor Test Equipment User Conference in Hsinchu, Taiwan, where it shared its 2025 hardware and software test solution roadmap with customers.Commitment to growth with customers: A comprehensive solution blueprint for global expansionGeorge Chang, president of Chroma ATE's Semiconductor Test Business Unit, highlighted in his opening speech that Chroma has been engaged in the semiconductor sector for over 20 years. With an installed base of more than 4,300 test systems worldwide, the company serves markets across Asia, Europe, and the Americas. Chroma's product lines can be categorized into five segments: digital, analog, mixed-signal, interface solutions, and software. The company is also actively developing next-generation products for applications in RF, power, and audio testing.George Chang, president of Chroma ATE's Semiconductor Test BU, stated that as of November 2024, Chroma's global installed base of semiconductor ATE exceeds 4,300 systems. Credit: Chroma ATEFocusing on hardware test platforms with wide range of test boards to meet diverse needsFor wireless solutions, Roger Huang, vice director of the Application Engineering Department at Chroma Group subsidiary Adivic Technology Co., introduced the Chroma 3680 HDRF2 test board. Huang noted that the Chroma 3680 platform natively supports testing of a wide range of chips, but when combined with the HDRF2, it can meet extensive wireless and RF (radio frequency) testing needs, including Wi-Fi 6, BT 5.0/BLE, GPS, and wide-area IoT technologies. Chroma is already developing its successor model, the HDRF3, to address standards such as Wi-Fi 6E/7 and 5G FR1. The company has also developed solutions specifically tailored for the 5G mmWave spectrum. The 30GHz range is addressed by the existing Chroma 3680 HDRF2, while the 48GHz range is supported by the MP5808 model paired with the mmWaveBox, catering to 5G FR2, FR3, and low-earth orbit (LEO) satellite applications.For power-related chip testing, Spancer Lee, senior manager of Product Marketing at Chroma's Semiconductor Test BU, highlighted the pivotal role of the Chroma 3650 platform. Lee noted that since launching the 3650 platform back in 2002, Chroma has continuously evolved its solutions to meet market demands for power management. The company introduced various test boards and solutions to complement the 3650, culminating in the release of its successor, the Chroma 3650-S2, in late 2022. Chroma is also preparing to unveil a new product, the HTMU board, further demonstrating its commitment to addressing diverse voltage and current combinations for power chip testing. The testing needs of third-generation semiconductors with high-voltage specifications can be effectively met by stacking Chroma's HVVI boards.Lee also mentioned that as the design of power chips becomes more complex and the manufacturing process evolves, the timing information and related parameters to be measured for power chips become more challenging. Chroma ATE launched these test boards, together with the Chroma 3650-S2, to meet the testing needs of the new generation of power chips.In the mixed-signal domain, Blair Fan, associate product manager at Chroma's Semiconductor Test BU, focused on the company's roadmap for audio mixed-signal solutions. Fan pointed out that the Bluetooth headset and speaker market is expected to grow at a compound annual growth rate (CAGR) of approximately 20% from 2024 to 2029, reaching a total market value of $38.2 billion. From a product design perspective, challenges in Bluetooth and audio applications include the integration of digital and analog testing, as well as cost control to maintain chip profitability. Chroma addresses these challenges with the Chroma 3380 platform paired with the MXADO module board.Minimizing platform conversion time using large language models (LLMs) Beyond hardware, Chroma has also made significant strides in software solutions. Ray Hsu, software engineer at Chroma's Semiconductor Test BU, explained that in the long run, semiconductor manufacturers will inevitably transition between test platforms. This process typically requires around 140 hours of additional software migration time. However, Chroma leverages Large Language Models (LLMs) to reduce this to just 5 hours. He further explained that the conversion process involves two stages: the first uses LLMs for processing and the second uses Retrieval-Augmented Generation (RAG) technology. Parameter adjustments and removal of unnecessary parameters are still required to ensure ideal conversion results.Hsu emphasized that while conversion is not 100% perfect and still requires manual refinement, it saves substantial amounts of time compared to traditional methods, which is of great benefit to customers.In addition to introducing its next generation of semiconductor test solutions, Chroma invited strategic partners Dr. Chen Wei-yang from TMY Technology and Mr. Tai Yu-che of the R&D and simulation department at Keystone Microtech to share relevant insights on their collaborative advancements.To sum up, Chroma ATE offers a diverse range of solutions covering digital, analog, and mixed-signal testing in the global ATE market. At the recent user conference held in Hsinchu, Chroma unveiled its 2025 roadmap for hardware and software solutions. The company showcased an array of test equipment, including the Chroma 3650, 3680, and the newly launched HDRF series, catering to power management, high-frequency testing, and wireless technology applications.Amid evolving US-China trade dynamics, Chroma is deepening its localized services while utilizing AI technologies like LLM and RAG to shorten software migration times and enhance testing efficiency. Looking ahead, Chroma ATE is poised to continue integrating innovative technologies to meet the testing needs of next-generation semiconductors, foster growth alongside customers, and strengthen its global market presence.Live demonstration of the Chroma 3680 Advanced SoC Test System. Credit: Chroma ATEChroma's Semiconductor Test Equipment User Conference attracted nearly 200 industry professionals. Credit: Chroma ATE
Tuesday 18 February 2025
STMicroelectronics' octal automotive gate driver with patented features reducing motor-drive bill of materials cost
STMicroelectronics' L99MH98 8-channel gate driver brings patented features for building automotive motor drives without sensing resistors, reducing power dissipation and the bill of materials.The L99MH98 can drive four external full bridges, eight half bridges, or single high-side/low-side powering mechanisms such as seat-position adjusters, window lifters, sunroofs, pumps, seatbelt pre-tensioners, and other actuators. The L99MH98 can also drive resistive loads such as heaters, and the internal circuitry contains a charge pump whose output can control a reverse-battery protection MOSFET.While the drivers can control both logic-level and standard-level MOSFETs, extended gate current capability, programmable up to 120mA, permits driving large numbers of external MOSFETs. Three-stage gate control, which applies the gate signal in three steps, helps to minimize electromagnetic emissions.Designed to provide each MOSFET's drain-source voltage (VDS) to an analog-digital converter (ADC), the L99MH98 leverages indirect current measurement to replace sensing resistors. This ST-patented technique calculates the drain current in each MOSFET by combining the measured VDS with RDS(on) predicted using sensed temperature. The system is calibrated at manufacture to find the nominal RDS(on) values, enabling predictions to be made using the MOSFETs' resistance-versus-temperature curves.A further feature, also ST-patented, is the programmable multi-failsafe function that enhances reliability by turning off bridges individually to protect against faults while allowing unaffected bridges to operate normally. Multi-failsafe detects faults, including supply overvoltage, high-side over/under voltage, thermal warning, charge-pump failure, and VDS-monitoring failure, and selectively turns off functions such as diagnostics, watchdog and charge pump depending on fault type.The L99MH98 is AEC-Q100 qualified and meets ISO 26262 criteria for functional-safety applications up to safety integrity level (ASIL) B.Available now in a VFQFN48L package with wettable flanks and exposed underside cooling pad.
Monday 17 February 2025
How US cryptos are still outpacing Asian competitors in 2025
The crypto industry, much like the finance industry, is a very competitive one. Although the most popular cryptocurrencies, like Bitcoin (BTC) and Ethereum (ETH), are US-based, Asia is pushing hard to become a leading competitor with projects like TRON (TRX), VeChain (VET), and NEO. As of February 2025, US crypto projects are still outperforming their Asian competitors in both market capitalization and institutional backing. What this means is that investors and businesses prefer US cryptos over any other options.One way to compare the two markets is to look at the fundamentals. How good and innovative are the technologies upon which crypto projects are developed? In the US, Ethereum is making waves with its Ethereum 2.0, a project that is meant to help it scale up even further with minimal energy consumption. It also has multiple Layer-2 solutions like Arbitrum and Optimism to make transactions much cheaper and faster.Solana is another project following in the steps of Ethereum 2.0. Its Layer-2 project, Solaxy, has raised over $19 million in its presale, showing that US investors will always go for crypto picks with big growth potential.Meanwhile, apart from TRON, Asian crypto projects like NEO and ICON are still struggling to gain momentum in Asia, let alone globally. Some of the challenges these projects face include scalability, interoperability (exchanging data between platforms), security, and regulatory compliance.China, for example, has been tough on crypto for over a decade. In 2013, it banned all banks from carrying out crypto transactions. In 2017, it prohibited Initial Coin Offerings (ICOs). And finally, in 2021, it declared that all things crypto be illegal. Since then, developers have had to move to crypto-friendly countries like Singapore to mine or trade cryptos. For investors, these are red flags, which is why they are yet to be widely adopted in the region.On the contrary, US cryptos have institutional and government backing. For example, the world's largest asset manager, Blackrock, has Bitcoin-related investment products for its investors. This is a major endorsement of the US crypto from an industry giant that is respected globally.Also, in January 2024, the Securities and Exchange Commission (SEC) approved spot Bitcoin exchange-traded products (ETPs). Then, early in February 2025, President Trump signed an executive order for the creation of a sovereign wealth fund that has sparked a lot of speculations as to whether the US will finally move to invest in Bitcoin. All of these are green flags that motivate investors to gravitate towards US cryptos over any other.Looking at the numbers according to CoinMarketCap, 80% of the top 10 cryptos by market cap are US-based. Bitcoin alone holds a 60% dominance and a whopping US$1.9 trillion in market cap. Bitcoin is clearly the leader of the crypto space, followed by Ethereum, with a 10% dominance. Asian cryptos TRON, VeChain, and NEO rank 10th, 40th, and 89th, respectively, on the same chart among all cryptos. Whichever way you look at it, US cryptos outpace Asian cryptos.