Toggle light / dark theme

Get the latest international news and world events from around the world.

Log in for authorized contributors

New cavity control strategy improves performance of blue vertical-cavity surface-emitting lasers

GaN-based vertical-cavity surface-emitting lasers (VCSELs) are promising for displays, sensing and optical communication, but improving efficiency remains challenging. Researchers have now shown that “cavity tuning,” which controls resonance wavelength, strongly affects laser performance. By analyzing variations across a VCSEL wafer, the team identified optimal mirror loss conditions and extracted device parameters. Their approach achieved 26.4% wall plug efficiency, offering guidance for next-generation high-efficiency visible-light semiconductor lasers.

Gallium nitride (GaN)-based vertical-cavity surface-emitting lasers, or VCSELs, are attracting increasing attention as compact and energy-efficient light sources for future technologies. These semiconductor lasers are considered promising for applications such as next-generation displays, biometric sensing, environmental monitoring and short-range optical communication. However, improving their efficiency has remained a major challenge because laser performance depends strongly on precise optical design and cavity control.

Addressing this challenge, a research team led by Professor Tetsuya Takeuchi, Professor Satoshi Kamiyama and Professor Motoaki Iwaya from the Department of Materials Science and Engineering, Meijo University, Japan, along with Mr. Naoki Shibahara, first author and graduate student at the Graduate School of Science and Technology, Meijo University, Japan, investigated how “cavity tuning” influences the lasing characteristics of GaN-based VCSELs. While conventional studies mainly focused on gain tuning, also known as detuning, the researchers demonstrated that resonance wavelength alignment relative to the distributed Bragg reflector center wavelength critically affects laser operation.

New art test could help museums spot fake Van Goghs without touching paintings

A new study published in the peer-reviewed journal Surface Topography: Metrology and Properties introduces a pioneering, noninvasive technique that can distinguish authentic artworks from forgeries, offering museums, collectors, and auction houses a major advantage in tackling art fraud.

The study, developed at the Université Polytechnique Hauts-de-France, introduces a method that analyzes the microscopic “texture” of a painting by converting high-resolution images into 3D-like maps, allowing researchers to measure how rough or detailed the surface is using fractal dimensions. This measurement captures subtle patterns created by an artist’s brushwork—patterns so consistent that they act like a morphological signature unique to that artist.

Using works attributed to Vincent van Gogh, the researchers showed that the method can reliably distinguish between authentic paintings and known forgeries. In tests, the well-documented fake “The Plowmen” was identified as a strong outlier, while the recently authenticated “Sunset at Montmajour” aligned closely with Van Gogh’s known works.

ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026–35273) to Breach Universities

The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and demand payment to keep it private. The campaign hit universities hardest.

Google’s Mandiant attributes it to the group it tracks as UNC6240, and dates the activity between May 27 and June 9. Oracle did not publish its advisory until June 10, so the bug was a zero-day the entire time.

The flaw, CVE-2026–35273, is a remote code execution bug in PeopleSoft Enterprise PeopleTools rated 9.8 out of 10. It needs no login and no user interaction, just network access over HTTP, to take over the server. If you run PeopleSoft with the Environment Management Hub reachable from outside, that is your exposure, and the immediate move is to lock those endpoints down.

The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm

“The group actively tracks and evaluates modern vulnerabilities, including CVE-2024–55591, CVE-2025–32433, and CVE-2025–33073, and combines them with technique-driven paths like backup and management-controller abuse and NTLM relay workflows, giving them a flexible exploitation pipeline,” Check Point said.

That’s not all. In March 2026, Hunt.io said it discovered an open directory hosted at “176.120.22[.]127:80” on the Russian bulletproof hosting provider Proton66 that exposed 126 files containing a complete ransomware operator toolkit attributed to a The Gentlemen RaaS affiliate.

This included tools for reconnaissance, privilege escalation, defense evasion, credential theft, lateral movement, persistence, and pre-encryption preparation, essentially spanning all phases of the intrusion lifecycle.

Maine breach portal abused to publish fake data breach disclosures

In an unusual misinformation campaign, fraudulent data breach disclosures were submitted to Maine’s official breach portal and publicly posted before their legitimacy could be verified, prompting companies to deny the claims.

A notice allegedly filed by multiplayer social virtual reality platform VRChat is the most recent entry in the state Attorney General’s breach disclosure database.

However, a company representative told BleepingComputer that the breach notification is fake and has been filed using the name of a fictitious employee.

Oracle mitigates PeopleSoft zero-day exploited in data theft attacks

Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026–35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter data theft attacks.

The flaw is within Oracle PeopleSoft PeopleTools and has a CVSS base score of 9.8.

“This Security Alert addresses vulnerability CVE-2026–35273 in Oracle PeopleSoft PeopleTools. Oracle PeopleSoft Enterprise Applications customers may also be affected by this vulnerability,” reads a new Oracle advisory.

/* */