Finite-Key Security Analysis of the Decoy-State BB84 QKD with Passive Measurement

The decoy-state Bennett-Brassard 1984 BB84 quantum key distribution QKD protocol is widely regarded as the de facto standard for practical implementations. On the receiver side, passive basis choice is attractive because it significantly reduces the need for random number generators and eliminate...

Twin-Field Quantum Key Distribution: Protocols, Security, and Open Problems

Twin-Field Quantum Key Distribution TF-QKD has emerged as a potential protocol for long distance secure communication, overcoming the rate-distance limitations of conventional quantum key distribution without requiring trusted repeaters. By having two parties transmit phase encoded weak coherent...

New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs

Cybersecurity researchers have disclosed details of a new Rust-based backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts. "Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an over-privileg...

BatShadow Group Uses New Go-Based 'Vampire Bot' Malware to Hunt Job Seekers

A Vietnamese threat actor named BatShadow has been attributed to a new campaign that leverages social engineering tactics to deceive job seekers and digital marketing professionals to deliver a previously undocumented malware called Vampire Bot. "The attackers pose as recruiters, distributing...

EUVD-2022-32455

Malicious code in bioql PyPI...

RedTeam-Tactics-and-Techniques

It is an offensive tool for Windows. The repository contains a script that appears to be a Windows shell extension, likely used for red teaming or penetration testing. The script is written in a format compatible with the Windows Taskbar and Shell. The script is designed to toggle the desktop,...

ChillyHell macOS Malware Resurfaces, Using Google.com as a Decoy

A previously dormant macOS threat, ChillyHell, is reviving. Read how this malware can bypass security checks, remain hidden,…...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 PoC Educational Use Only Details about this C...

Exploit for Path Traversal in Rarlab Winrar

WinRAR Exploit Tool - Rust Edition Advanced WinRAR Path T...

MAL-2025-8952 Malicious code in @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy (npm)

The package @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy was found to contain malicious code...

MAL-2025-8867 Malicious code in @malware-test-pulka-crown-clour-decoy/test-mlw3-pulka-crown-clour-decoy (npm)

The package @malware-test-pulka-crown-clour-decoy/test-mlw3-pulka-crown-clour-decoy was found to contain malicious code...

Malicious code in @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy (npm)

The package @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy was found to contain malicious code...

Malicious code in @malware-test-pulka-crown-clour-decoy/test-mlw3-pulka-crown-clour-decoy (npm)

The package @malware-test-pulka-crown-clour-decoy/test-mlw3-pulka-crown-clour-decoy was found to contain malicious code...

Exploring Satellite Quantum Key Distribution under Atmospheric Constraints

Satellite Quantum Key Distribution creates a pathway for secure global communication with a level of security that is peerless. However, ground-to-satellite Quantum Key Distribution links are degraded due to the atmospheric turbulence. This paper gives a numerical framework using angular spectrum...

Secure Development of a Hooking-Based Deception Framework against Keylogging Techniques

Keyloggers remain a serious threat in modern cybersecurity, silently capturing user keystrokes to steal credentials and sensitive information. Traditional defenses focus mainly on detection and removal, which can halt malicious activity but do little to engage or mislead adversaries. In this pape...

Realistic Vulnerabilities of Decoy-State Quantum Key Distribution

We analyze realistic vulnerabilities of decoy-state quantum key distribution QKD arising from the combination of laser damage attack LDA and unambiguous state discrimination USD. While decoy-state QKD is designed to protect against photon-number-splitting and beam-splitting attacks by accurately...

New Konfety Malware Variant Evades Detection by Manipulating APKs and Dynamic Code

Cybersecurity researchers have discovered a new, sophisticated variant of a known Android malware referred to as Konfety that leverages the evil twin technique to enable ad fraud. The sneaky approach essentially involves a scenario wherein two variants of an application share the same package nam...

CVE-2022-27969

Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET request sent to /WebApp/DeceptionUser/GetAllDeceptionUsers...

University site cloned to evade ad detection distributes fake Cisco installer

There is a constant "cat and mouse" game between defenders and attackers, the latter trying to outsmart and get a head start on the former. In the context of online advertising, this involves creating fake identities or using stolen ones to push out malicious ads. An attacker not only needs to...

Horns&Hooves campaign delivers NetSupport RAT and BurnsRAT

Recent months have seen a surge in mailings with lookalike email attachments in the form of a ZIP archive containing JScript scripts. The script files – disguised as requests and bids from potential customers or partners – bear names such as "Запрос цены и предложения от Индивидуального...