2112 matches found
CVE-2024-29032
Qiskit IBM Runtime is an environment that streamlines quantum computations and provides optimal implementations of the Qiskit quantum computing SDK. Starting in version 0.1.0 and prior to version 0.21.2, deserializing json data using qiskitibmruntime.RuntimeDecoder can lead to arbitrary code...
CVE-2024-29032
Qiskit IBM Runtime is affected by a vulnerability in the JSON deserialization path of qiskit_ibm_runtime.RuntimeDecoder. In versions starting from 0.1.0 up to but before 0.21.2, deserializing a specially crafted JSON string can lead to arbitrary code execution. The issue is fixed in version 0.21....
Qiskit IBM Runtime 安全漏洞
Qiskit IBM Runtime is a component of International Business Machines IBM that is used to interact with IBM Quantum hardware and simulators on the IBM Quantum Experience platform. A security vulnerability exists in Qiskit IBM Runtime version 0.1.0 through versions prior to 0.21.2, which stems from...
Why Apple added protection against quantum computing when quantum computing doesn’t even exist yet
Apple released a new update for nearly all its devices that provides an all-new type of encryption for its iMessages to the point that, in theory, iMessages are now protected against attacks from quantum computers. This is a little tricky because, as weve covered before, quantum computers dont...
Apple Announces Post-Quantum Encryption Algorithms for iMessage
Apple announced PQ3, its post-quantum encryption standard based on the Kyber secure key-encapsulation protocol, one of the post-quantum algorithms selected by NIST in 2022. Theres a lot of detail in the Apple blog post, and more in Douglas Stabilas security analysis. I am of two minds about this...
Apple Unveils PQ3 Protocol - Post-Quantum Encryption for iMessage
Apple has announced a new post-quantum cryptographic protocol called PQ3 that it said will be integrated into iMessage to secure the messaging platform against future attacks arising from the threat of a practical quantum computer. "With compromise-resilient encryption and extensive defenses...
Apple iOS 17.4: iMessage Gets Post-Quantum Encryption in New Update
Useful quantum computers aren’t a reality—yet. But in one of the biggest deployments of post-quantum encryption so far, Apple is bringing the technology to iMessage...
Improving the Cryptanalysis of Lattice-Based Public-Key Algorithms
The winner of the Best Paper Award at Crypto this year was a significant improvement to lattice-based cryptanalysis. This is important, because a bunch of NISTs post-quantum options base their security on lattice problems. I worry about standardizing on post-quantum algorithms too quickly. We are...
Post-quantum Cryptography for the Go Ecosystem
filippo.io/mlkem768 is a pure-Go implementation of ML-KEM-768 optimized for correctness and readability. ML-KEM formerly known as Kyber, renamed because we can't have nice things is a post-quantum key exchange mechanism in the process of being standardized by NIST and adopted by most of the...
Quantum Computing Skeptics
Interesting article. I am also skeptical that we are going to see useful quantum computers anytime soon. Since at least 2019, I have been saying that this is hard. And that we dont know if its "land a person on the surface of the moon" hard, or "land a person on the surface of the sun" hard. They...
Improving Shor’s Algorithm
We dont have a useful quantum computer yet, but we do have quantum algorithms. Shors algorithm has the potential to factor large numbers faster than otherwise possible, which--if the run times are actually feasible--could break both the RSA and Diffie-Hellman public-key algorithms. Now, computer...
OPENSUSE-SU-2024:0005-1 Security update for putty
This update for putty fixes the following issues: putty was updated to to release 0.80: Fix CVE-2023-48795 boo1218128 - Update to release 0.79 Terminal mouse tracking: support for mouse movements which are not drags, and support for horizontal scroll events e.g. generated by trackpads. Fixed: PuT...
quantumtechnology.es Improper Access Control vulnerability OBB-3825314
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the microprogramming software for Quantum HD Unity Compressor, Quantum HD Unity AcuAir, Quantum HD Unity, Quantum HD Unity Engine Room, and Quantum HD Unity Interface allows a perpetrator to execute arbitrary commands.
The vulnerability of Microprogrammed Software for Quantum HD Unity Compressor, Quantum HD Unity AcuAir, Quantum HD Unity, Quantum HD Unity Engine Room, and Quantum HD Unity Interface exists due to the improper activation of debugging modes for certain services. Exploiting this vulnerability allow...
CVE-2023-4804
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...
CVE-2023-4804
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...
Code injection
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...
CVE-2023-4804 Quantum HD Unity
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...
CVE-2023-4804
CVE-2023-4804 affects Johnson Controls Quantum HD Unity family. The root cause is an active debug code/debug features accidentally exposed, allowing an unauthorized user to access debugging functionality. Affected products and versions include: Quantum HD Unity Compressor panels (Q5: all versions...
