TechCapsules

QoreChain Demonstrates End-to-End Post-Quantum Blockchain Transaction

QoreChain, a quantum-safe blockchain, has successfully completed the first end-to-end blockchain transaction protected by all three NIST-standardized post-quantum cryptographic algorithms. The transaction, a transfer of 1,000 QOR, was completed on QoreChain's public mainnet using the Keplr wallet and is publicly verifiable through its blockchain explorer. This achievement demonstrates the company's commitment to providing standardized, live, and independently verifiable post-quantum security. The transaction applies post-quantum cryptography across the full cryptographic path, including digital signatures, key encapsulation, and hashing.

💡 The completion of this transaction marks a significant milestone in the transition to post-quantum security, as it shows that institutions can adopt standardized, live, and independently verifiable post-quantum security without abandoning their existing tools. This achievement has important implications for the security of blockchain data, as it highlights the need for post-quantum cryptography to be implemented from the start to prevent retroactive exposure of sensitive information.

QoreChain Implements Complete NIST Post-Quantum Cryptography Stack on Public Mainnet

QoreChain, a Swiss-registered blockchain network, has successfully implemented a complete post-quantum cryptography (PQC) stack on its public mainnet. This achievement marks a milestone in the industry, as it is the first network to apply standardized post-quantum math across its entire cryptographic path, covering signatures, key exchanges, and hash functions simultaneously. The deployment targets the "Harvest Now, Decrypt Later" vulnerability, which could be exploited by fault-tolerant quantum computers in the future. The network's PQC stack is based on NIST FIPS 203 and 204 compliant algorithms.

💡 This achievement underscores QoreChain's commitment to long-term security and its ability to stay ahead of emerging threats. By deploying a comprehensive PQC stack, QoreChain is positioning itself as a leader in the blockchain industry, demonstrating its capacity to adapt to the evolving security landscape.

New malicious clipboard clone raises serious security concerns for Mac users

Macworld reports that Jamf Threat Labs identified PamStealer, a new macOS malware targeting users of the Maccy clipboard manager through fake websites distributing malicious AppleScript files. The sophisticated malware uses a quiet execution chain with JXA and Rust to steal login passwords via macOS Pluggable Authentication Modules, making detection difficult. Users are advised to only download Maccy from the official maccy.app website or GitHub and avoid suspicious links. Jamf Threat Labs has issued a report on the new malware, warning users of the third-party clipboard manager Maccy of the potential threat.

💡 The evolution of PamStealer highlights the growing sophistication of macOS malware, with attackers adopting quieter execution chains and native implementations that evade traditional detection methods. This development underscores the importance of vigilance and caution when downloading software from third-party websites, even if they appear legitimate.

QNu Labs Partners with SAGA Consultants to Expand Quantum Security Services

QNu Labs and SAGA Consultants have formed a strategic partnership to expand the global adoption of quantum-safe cybersecurity solutions. The collaboration combines QNu Labs' quantum cybersecurity technologies with SAGA Consultants' consulting expertise to support enterprises, governments, and critical infrastructure organizations. The partners aim to accelerate quantum readiness by promoting quantum-secure communications, cryptographic security, and post-quantum cybersecurity solutions. This partnership brings together QNu Labs' expertise in quantum cryptography and SAGA Consultants' deep consulting capabilities to strengthen cyber resilience in an increasingly complex threat landscape.

Why Asia’s Quantum Ambitions Need Post-Quantum Security

The White House has issued an executive order to accelerate quantum computing efforts and prioritize post-quantum cryptography, reflecting a growing recognition of the need for national security planning. Across Asia, governments have invested significantly in quantum research, infrastructure, and talent, positioning the region for economic, scientific, and strategic opportunities. Asia leads the world in public quantum investment, with over €19 billion committed, and countries like China, Japan, and Singapore are making notable progress in quantum capability. However, the region's digital infrastructure still relies on vulnerable encryption that future quantum computers may break.

💡 The quantum readiness gap between Asia's growing quantum capability and its limited post-quantum cryptography adoption poses a significant risk to sensitive data and essential services. As adversaries can collect encrypted information now and decrypt it later, the exposure associated with a cryptographically relevant quantum computer has already begun to build, highlighting the urgent need for concurrent security planning.

New Mac infostealer confirms stolen passwords before stealing data

Researchers at Jamf Threat Labs have discovered a new macOS infostealer called PamStealer, which verifies Mac login passwords before stealing sensitive data. PamStealer disguises itself as the Maccy clipboard manager and uses AppleScript alongside a Rust payload to infect Macs. The malware campaign starts with a fake website imitating the legitimate Maccy clipboard manager, delivering a malicious AppleScript application. PamStealer confirms the validity of stolen passwords through Apple's Pluggable Authentication Modules, setting it apart from other macOS infostealers. This unique feature allows attackers to immediately confirm compromised credentials. The discovery highlights a new threat to macOS users.

💡 PamStealer's password verification capability gives attackers a significant advantage in exploiting stolen credentials. It enables them to focus on high-value targets with confirmed valid login information.