Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware

A new multi-stage phishing campaign has been observed targeting users in Russia with ransomware and a remote access trojan called Amnesia RAT. "The attack begins with social engineering lures delivered via business-themed documents crafted to appear routine and benign," Fortinet FortiGuard Labs...

Security without Detection: Economic Denial As a Primitive for Edge and IoT Defense

Detection-based security fails against sophisticated attackers using encryption, stealth, and low-rate techniques, particularly in IoT/edge environments where resource constraints preclude ML-based intrusion detection. We present Economic Denial Security EDS, a detection-independent framework tha...

Exploit for External Control of File Name or Path in Microsoft

CVE-2025-33053 - WebDAV Remote Code Execution RCE PoC & C2 S...

Exploit for Path Traversal in Rarlab Winrar

☠️ CVE-2025-8088 WinRAR Exploit Tool ☠️ SYSTEM ACCESS:...

Finite-Key Security Analysis of the Decoy-State BB84 QKD with Passive Measurement

The decoy-state Bennett-Brassard 1984 BB84 quantum key distribution QKD protocol is widely regarded as the de facto standard for practical implementations. On the receiver side, passive basis choice is attractive because it significantly reduces the need for random number generators and eliminate...

Twin-Field Quantum Key Distribution: Protocols, Security, and Open Problems

Twin-Field Quantum Key Distribution TF-QKD has emerged as a potential protocol for long distance secure communication, overcoming the rate-distance limitations of conventional quantum key distribution without requiring trusted repeaters. By having two parties transmit phase encoded weak coherent...

New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs

Cybersecurity researchers have disclosed details of a new Rust-based backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts. "Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an over-privileg...

BatShadow Group Uses New Go-Based 'Vampire Bot' Malware to Hunt Job Seekers

A Vietnamese threat actor named BatShadow has been attributed to a new campaign that leverages social engineering tactics to deceive job seekers and digital marketing professionals to deliver a previously undocumented malware called Vampire Bot. "The attackers pose as recruiters, distributing...

EUVD-2022-32455

Malicious code in bioql PyPI...

RedTeam-Tactics-and-Techniques

It is an offensive tool for Windows. The repository contains a script that appears to be a Windows shell extension, likely used for red teaming or penetration testing. The script is written in a format compatible with the Windows Taskbar and Shell. The script is designed to toggle the desktop,...

ChillyHell macOS Malware Resurfaces, Using Google.com as a Decoy

A previously dormant macOS threat, ChillyHell, is reviving. Read how this malware can bypass security checks, remain hidden,…...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 PoC Educational Use Only Details about this C...

Exploit for Path Traversal in Rarlab Winrar

WinRAR Exploit Tool - Rust Edition Advanced WinRAR Path T...

Malicious code in @malware-test-pulka-crown-clour-decoy/test-mlw3-pulka-crown-clour-decoy (npm)

The package @malware-test-pulka-crown-clour-decoy/test-mlw3-pulka-crown-clour-decoy was found to contain malicious code...

MAL-2025-8952 Malicious code in @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy (npm)

The package @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy was found to contain malicious code...

MAL-2025-8867 Malicious code in @malware-test-pulka-crown-clour-decoy/test-mlw3-pulka-crown-clour-decoy (npm)

The package @malware-test-pulka-crown-clour-decoy/test-mlw3-pulka-crown-clour-decoy was found to contain malicious code...

Malicious code in @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy (npm)

The package @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy was found to contain malicious code...

Exploring Satellite Quantum Key Distribution under Atmospheric Constraints

Satellite Quantum Key Distribution creates a pathway for secure global communication with a level of security that is peerless. However, ground-to-satellite Quantum Key Distribution links are degraded due to the atmospheric turbulence. This paper gives a numerical framework using angular spectrum...

Secure Development of a Hooking-Based Deception Framework against Keylogging Techniques

Keyloggers remain a serious threat in modern cybersecurity, silently capturing user keystrokes to steal credentials and sensitive information. Traditional defenses focus mainly on detection and removal, which can halt malicious activity but do little to engage or mislead adversaries. In this pape...

Realistic Vulnerabilities of Decoy-State Quantum Key Distribution

We analyze realistic vulnerabilities of decoy-state quantum key distribution QKD arising from the combination of laser damage attack LDA and unambiguous state discrimination USD. While decoy-state QKD is designed to protect against photon-number-splitting and beam-splitting attacks by accurately...