{
  "story_id": "904f52f774c4553a8949a872472de9eb",
  "desk": "drm3",
  "revision": 1,
  "published_at": "2026-09-02T12:24:00.000Z",
  "content_hash": "35d4e4dde9b8fa04372c5a8d9f8aa765b05dcf855429bfbcbaaa1dda5aaa6db4",
  "hash_basis": "sha256 over `headline\\ndek\\nprose`, plus `\\n` + the canonical citations JSON when any source is placed, plus `\\n#blog` for blogs",
  "basis": {
    "headline": "WinMagic Proposes Cryptographic Login Fix Amid AI Cyber Threats",
    "dek": "WinMagic CEO proposes end-to-end cryptographic authentication to counter AI-enabled cyberattacks.",
    "prose": "More than 150 technology, cybersecurity, and financial organizations signed a letter warning that AI-enabled attacks will become far more widespread and sophisticated in the coming months. [^1]\n\nThi Nguyen-Huu, CEO of WinMagic, stated that the industry uses cryptography in pieces rather than end-to-end, creating a gap between the login and the data exchange that attackers exploit. [^2]\n\nSecurity researchers at Proofpoint observed a Remote Access Trojan called PackClient being actively sold on Telegram channels. [^3]\n\nTA4922 distributed PackClient via emails spoofing local tax authorities that claimed recipients needed to conduct a 'self-inspection' by downloading paperwork. [^4]\n\nThe financially motivated hacking group TA4922 has been distributing PackClient against organizations in mainland China and India since late May 2026. [^5]\n\nThe PackClient installer provided in the emails offered advanced features including file theft, remote shell execution, screen capture, webcam access, keylogging, and privilege escalation. [^6]\n\nWinMagic CEO Thi Nguyen-Huu said that AI is very good at deceiving people and finding flaws in complicated systems, but it is not good at breaking cryptography. [^7]\n\nWinMagic proposed a new authentication mechanism called 'Live Key' that rests on cryptography and verifies the user, device, and local security policy without requiring any user action. [^8]",
    "cited": "[{\"statement\":\"More than 150 technology, cybersecurity, and financial organizations signed a letter warning that AI-enabled attacks will become far more widespread and sophisticated in the coming months.\",\"source\":\"Cision PR Newswire\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T12:24:00.000Z\",\"publisher_count\":1,\"sources\":[\"Cision PR Newswire\"]},{\"statement\":\"Thi Nguyen-Huu, CEO of WinMagic, stated that the industry uses cryptography in pieces rather than end-to-end, creating a gap between the login and the data exchange that attackers exploit.\",\"source\":\"Cision PR Newswire\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T12:24:00.000Z\",\"publisher_count\":1,\"sources\":[\"Cision PR Newswire\"]},{\"statement\":\"Security researchers at Proofpoint observed a Remote Access Trojan called PackClient being actively sold on Telegram channels.\",\"source\":\"TechRadar\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T15:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"TechRadar\"]},{\"statement\":\"TA4922 distributed PackClient via emails spoofing local tax authorities that claimed recipients needed to conduct a 'self-inspection' by downloading paperwork.\",\"source\":\"TechRadar\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T15:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"TechRadar\"]},{\"statement\":\"The financially motivated hacking group TA4922 has been distributing PackClient against organizations in mainland China and India since late May 2026.\",\"source\":\"TechRadar\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T15:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"TechRadar\"]},{\"statement\":\"The PackClient installer provided in the emails offered advanced features including file theft, remote shell execution, screen capture, webcam access, keylogging, and privilege escalation.\",\"source\":\"TechRadar\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T15:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"TechRadar\"]},{\"statement\":\"WinMagic CEO Thi Nguyen-Huu said that AI is very good at deceiving people and finding flaws in complicated systems, but it is not good at breaking cryptography.\",\"source\":\"Cision PR Newswire\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T12:24:00.000Z\",\"publisher_count\":1,\"sources\":[\"Cision PR Newswire\"]},{\"statement\":\"WinMagic proposed a new authentication mechanism called 'Live Key' that rests on cryptography and verifies the user, device, and local security policy without requiring any user action.\",\"source\":\"Cision PR Newswire\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T12:24:00.000Z\",\"publisher_count\":1,\"sources\":[\"Cision PR Newswire\"]}]",
    "kind": "news"
  },
  "receipt_verify": "Ed25519 over the dot-joined string `slice_hash.cursor_from.cursor_to.view.view_version.row_count`; public_key and sig are base64url of the raw 32-byte key / 64-byte signature",
  "receipt": null,
  "receipt_note": "this revision predates receipt-keeping (before v0.37.0); the filed row lives in the record",
  "generation_chain": {
    "wire": {
      "stream": "fountain_news",
      "story_id": "e728675912268f96e27b16d2b7f89727",
      "thread_id": "e1e076719409f8fba3dd168e9c9af3c5",
      "thread_label": "Proofpoint",
      "novelty": "UPDATE",
      "content_hash": "3ea2af3f1c7410509c38b495d0a3fda14f5247867ee24f9089c1562972c0391f",
      "last_published_at": "2026-09-02T12:24:00.000Z",
      "read_receipt": {
        "slice_hash": "8fe410958cd10217d13241bac8b241e2d6eb3302baab61763b0da291ac2553e2",
        "cursor_from": "eyJ0cyI6IjIwMjYtMDktMDJUMTI6MDc6NDUuMDAwMDAwWiIsImlkIjoiNzY2YWRiYjk1OTBjMDc4M2RhNGEwZGY0YTM5OTFhNGMiLCJ2IjoiMSJ9",
        "cursor_to": "eyJ0cyI6IjIwMjYtMDktMDJUMTI6NDA6MzYuMzIwMDAwWiIsImlkIjoiYjE4N2ZiMmNmNTAwZDFlMTk5ZWUzYmFjODc1NzlkYzEiLCJ2IjoiMSJ9",
        "view": "v_fountain_news",
        "view_version": "1",
        "row_count": 100,
        "window_days": 3,
        "bytes_scanned": 10113494,
        "credits": 8,
        "price_per_100_rows": 8,
        "sig": "qcC6qjjt0_1_Rx01ilxduTIRfh6qJxQYDCB7PI4l_uo7_kNqzJTFWjPDMFXDZbu3XgIzeV7xKZfVIIkxdsiJDw",
        "public_key": "bMUigy8O0jOnBxQ4Sc-5lwhIZ8LQVAhxMbR7qESVuUE",
        "signer_path": "lakehouse/data-extract/v1",
        "alg": "Ed25519",
        "signed": true
      }
    },
    "written_at": "2026-09-03T00:31:02.519Z"
  },
  "cited_facts": [
    {
      "statement": "More than 150 technology, cybersecurity, and financial organizations signed a letter warning that AI-enabled attacks will become far more widespread and sophisticated in the coming months.",
      "source": "Cision PR Newswire",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T12:24:00.000Z",
      "publisher_count": 1,
      "sources": [
        "Cision PR Newswire"
      ]
    },
    {
      "statement": "Thi Nguyen-Huu, CEO of WinMagic, stated that the industry uses cryptography in pieces rather than end-to-end, creating a gap between the login and the data exchange that attackers exploit.",
      "source": "Cision PR Newswire",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T12:24:00.000Z",
      "publisher_count": 1,
      "sources": [
        "Cision PR Newswire"
      ]
    },
    {
      "statement": "Security researchers at Proofpoint observed a Remote Access Trojan called PackClient being actively sold on Telegram channels.",
      "source": "TechRadar",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T15:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "TechRadar"
      ]
    },
    {
      "statement": "TA4922 distributed PackClient via emails spoofing local tax authorities that claimed recipients needed to conduct a 'self-inspection' by downloading paperwork.",
      "source": "TechRadar",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T15:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "TechRadar"
      ]
    },
    {
      "statement": "The financially motivated hacking group TA4922 has been distributing PackClient against organizations in mainland China and India since late May 2026.",
      "source": "TechRadar",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T15:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "TechRadar"
      ]
    },
    {
      "statement": "The PackClient installer provided in the emails offered advanced features including file theft, remote shell execution, screen capture, webcam access, keylogging, and privilege escalation.",
      "source": "TechRadar",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T15:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "TechRadar"
      ]
    },
    {
      "statement": "WinMagic CEO Thi Nguyen-Huu said that AI is very good at deceiving people and finding flaws in complicated systems, but it is not good at breaking cryptography.",
      "source": "Cision PR Newswire",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T12:24:00.000Z",
      "publisher_count": 1,
      "sources": [
        "Cision PR Newswire"
      ]
    },
    {
      "statement": "WinMagic proposed a new authentication mechanism called 'Live Key' that rests on cryptography and verifies the user, device, and local security policy without requiring any user action.",
      "source": "Cision PR Newswire",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T12:24:00.000Z",
      "publisher_count": 1,
      "sources": [
        "Cision PR Newswire"
      ]
    }
  ],
  "note": "A signature proves who filed this and that it has not changed since. It never makes a claim true."
}