Quantum Machine Learning Protection of Military Quantum Key Distribution against Cryptographically Camouflaged Attacks

Quantum key distribution proves its protocol secure and says nothing about the hardware beneath it, so military and government operators fielding it for command-and-control keys monitor the channel for implementation attacks, and that monitoring has a blind spot. An adversary with a kleptographic...

Quantum ROP: Using Quantum Algorithms for ROP Chain Selection in Exploit Construction

The quantum computing threat to cybersecurity is nowadays predominantly framed around Shor's algorithm and its eventual capacity to break asymmetric cryptography. Beyond cryptanalysis, however, quantum computing may also enable other capabilities in offensive security. This work explores one such...

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

A suspected Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-facing instances as part of a multi-national campaign. "Red Heron scanned 1,386 Gitea instances across seven countries...

Malicious Package

Overview eerie-turquoise-heron is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview fantastic-copper-heron is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

CRLF Injection

org.apache.heron, heron-api is vulnerable to CRLF Injection. The vulnerability is due to improper escaping of log input in log statements, which allows an attacker to inject malicious CRLF characters and manipulate log entries...

EUVD-2025-117300

Malicious code in injured-tomato-heron npm...

EUVD-2025-117520

Malicious code in adverse-amethyst-heron npm...

EUVD-2025-117455

Malicious code in dead-beige-heron npm...

EUVD-2025-117388

Malicious code in fantastic-copper-heron npm...

EUVD-2025-103100

Malicious code in patientheronz3n npm...

EUVD-2025-102990

Malicious code in primaryheronz3n npm...

MAL-2025-129667 Malicious code in querulous_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82839b30463af2c8508b89ddc99a336acb50933136760c9b696a373cab2f88ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105697

Malicious code in dutchheronz3n npm...

EUVD-2025-106561

Malicious code in architecturalheronz3n npm...

EUVD-2025-90320

Malicious code in longheronz3n npm...

Malicious code in agreeable_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdca95017de572b97689b1f25237b2964c812a007cde1515521ca7175df5bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80298

Malicious code in thirstyheronreplicateautomation npm...

EUVD-2025-70558

Malicious code in ethnicheronz3n npm...

MAL-2025-100701 Malicious code in combined_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a52e4ce2ee1ef885651335735768e6f4f2a24a458487d51317c91f71111b4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...