securitylab_nJuly 17, 2026🇷🇺Translated from Russian

Scientists Build Moisture-Powered Generator from Cigarette Filters, Sugarcane Fibers, Table Salt and Spent Battery Components

Scientists have created a flexible moisture-powered generator that produces electricity from water vapor in the air using only inexpensive waste materials: plant fibers, discarded cigarette filters, ordinary table salt, and components from spent batteries.

The experimental cell reached a maximum voltage of 1.16 volts at approximately 65 % relative humidity. When four such units were connected in series, the stack supplied 1.79 volts and 0.323 milliamperes—enough to power a small red light-emitting diode continuously for more than three hours without any external capacitor or battery.

Most earlier atmospheric-moisture generators relied on costly nanostructures and rarely exceeded 0.6 volts, limiting their usefulness for directly driving low-power sensors and wearable electronics. The new design overcomes this barrier by exploiting a simple ion-concentration gradient that forms inside a porous, salt-loaded fibrous layer when it absorbs ambient moisture.

The active material consists of fibers from the wild sugarcane species Saccharum—considered invasive in several regions—and cellulose recovered from used cigarette filters. These fibers are formed into a thin, flexible sheet resembling paper. Sodium chloride is incorporated into the sheet, while one side is coated with carbon paste derived from recycled batteries and the opposite side is covered with aluminum foil that serves as the second electrode.

Cellulose readily absorbs water from the surrounding air. At moderate humidity the absorbed moisture dissolves the salt, releasing positively charged sodium ions and negatively charged chloride ions. Because water and salt are distributed unevenly through the thickness of the layer, the ions migrate toward the electrodes, generating a measurable voltage difference.

Removing the salt almost completely eliminated voltage output, confirming that the electricity originates from moisture-driven ion movement rather than any hidden electrochemical reaction between the electrodes. Optimal performance occurred near 65 % relative humidity, where a pronounced internal moisture gradient is maintained; at much higher humidity the gradient collapses and voltage becomes unstable.

The researchers emphasize that the device does not function as an energy-storage battery. It generates current only while a humidity or ion-concentration difference exists inside the material. Once moisture equilibrates or the air becomes too dry, electrical output declines.

Although the technology is currently limited to ultra-low-power applications, the team believes similar elements could eventually supply individual environmental sensors, certain wearable devices, or other systems that require only small amounts of energy. Further work is needed to assess long-term durability under repeated wetting and drying cycles and under real-world temperature fluctuations.

An important advantage of the approach is its use of abundant waste streams. Cigarette filters, agricultural residues, and spent battery parts are normally discarded; the new generator gives them a second life while avoiding expensive nanomaterials.

Related articles

HabrOther

Read-Only Utility Automates Detailed Audits of UserGate NGFW Firewall Policies

A cybersecurity specialist at Gazprom CPS developed a read-only utility to analyze large-scale UserGate NGFW firewall policies without making any configuration changes. The tool connects via the UserGate XML-RPC API to collect rules, statistics, zones, network lists, services, users, and groups, then normalizes the data into a unified model for analysis. It performs eleven independent checks grouped into lifecycle, overly permissive access, observability, and documentation categories, flagging rules that have not fired recently, allow management ports broadly, lack logging, or have empty descriptions. Results are exported to a navigable Excel report featuring a rules-by-checks matrix, human-readable object names, and editable manual verdicts such as OK, requires attention, or false positive. The first full run on a production policy with over 1000 rules and 4500 related objects took 24 minutes and highlighted 39 percent of rules for review, with more than half showing multiple red flags. The approach preserves the original snapshot in JSON for repeatable offline analysis and comparison over time.

AntiMalwareOther

Internet Outages Disrupt Access to Russian Websites and Applications Across Multiple Regions

Users in several Russian regions reported widespread connectivity problems where internet access appeared available but failed to load most domestic websites and online services. Affected areas include Saint Petersburg along with Nizhny Novgorod, Rostov, and Tyumen regions according to reports compiled by the Telegram channel Baza. Connections remained technically active yet produced repeated errors when attempting to reach Russian sites, mobile applications, and web-based platforms. The precise scale of the disruption remains undetermined and it is unclear whether the incidents stem from a single technical fault or simultaneous failures among multiple network operators. No official statements have been issued regarding the root causes or expected restoration timelines. Individuals affected continue to refresh pages and restart applications while waiting for services to recover.

HabrOther

Step-Up Authentication vs 2FA: Implementing Additional Verification for Sensitive Operations in Corporate Systems

Traditional two-factor authentication secures only the initial login, leaving active sessions vulnerable to misuse during sensitive tasks such as accessing payroll data. Step-Up Authentication addresses this by requiring extra verification at the moment of critical actions rather than at login. The article details how one project moved beyond standard Identity Provider features in WSO2 by building a dedicated PIN-code service and gateway-2fa microservice. This approach uses signed cookies with TTL controls and JWT cross-checks to enforce elevated trust levels without disrupting normal user flows. The solution aligns with Zero Trust principles and was monitored via Matomo and ELK for usage and performance metrics. Key implementation considerations include balancing TTL duration, encrypting stored PINs, and conducting load testing before deployment.

AntiMalwareOther

Positive Technologies Adds Unified Console to PT X for Centralized Incident and Asset Management

Positive Technologies has introduced a single console within its PT X platform that combines incident management, asset control, and security posture assessment. Customers can now monitor attack attempts around the clock, view possible causes, track response status, and prioritize events without switching between multiple interfaces. The system lets organizations predefine which assets Positive Technologies may act upon and choose between manual customer response, automatic PT X actions, or approval-based workflows, with full audit reports generated afterward. A dedicated dashboard highlights coverage gaps by showing hosts protected by MaxPatrol EDR and flagging assets without agents installed. Machine learning capabilities have been expanded through a combination of large language models and classical ML to accelerate early attack detection and automate handling of low- and medium-severity incidents. Additional features include external perimeter analysis that reveals internet-facing resources from an attacker’s perspective and a bug-bounty-style cyber testing program that rewards researchers for identifying unacceptable events.