TechCapsules

QoreChain Demonstrates End-to-End Post-Quantum Blockchain Transaction

QoreChain, a quantum-safe blockchain, has successfully completed the first end-to-end blockchain transaction protected by all three NIST-standardized post-quantum cryptographic algorithms. The transaction, a transfer of 1,000 QOR, was completed on QoreChain's public mainnet using the Keplr wallet and is publicly verifiable through its blockchain explorer. This achievement demonstrates the company's commitment to providing standardized, live, and independently verifiable post-quantum security. The transaction applies post-quantum cryptography across the full cryptographic path, including digital signatures, key encapsulation, and hashing.

💡 The completion of this transaction marks a significant milestone in the transition to post-quantum security, as it shows that institutions can adopt standardized, live, and independently verifiable post-quantum security without abandoning their existing tools. This achievement has important implications for the security of blockchain data, as it highlights the need for post-quantum cryptography to be implemented from the start to prevent retroactive exposure of sensitive information.

Politician who investigated spyware abuses had his phone hacked with Pegasus spyware

A European politician, Stelios Kouloglou, had his phone hacked with Pegasus spyware while serving on a committee investigating spyware abuses. The hacking occurred in 2022 and 2023, with the spyware exploiting a security vulnerability in Apple's iPhone software. This is the first time a member of the European Parliament's PEGA committee has been publicly identified as a victim of spyware. The hacking has reignited controversy over governments abusing spyware to collect information about critics. The Citizen Lab researchers did not attribute the hacking to a specific country, but noted the government customer used the same Pegasus-loaded email address as in a previous campaign. The hacking has sparked calls for the European Commission to take action, with one lawmaker describing it as a "direct attack on the rule of law." The incident raises questions about how governments use spyware, ostensibly for identifying serious crime, but often targeting journalists, lawmakers, and critics.

💡 The hacking of Kouloglou's phone exposes the vulnerability of even high-profile targets to spyware attacks, undermining trust in government oversight. It also highlights the need for stricter regulations on spyware use, particularly among government agencies.

New malicious clipboard clone raises serious security concerns for Mac users

Macworld reports that Jamf Threat Labs identified PamStealer, a new macOS malware targeting users of the Maccy clipboard manager through fake websites distributing malicious AppleScript files. The sophisticated malware uses a quiet execution chain with JXA and Rust to steal login passwords via macOS Pluggable Authentication Modules, making detection difficult. Users are advised to only download Maccy from the official maccy.app website or GitHub and avoid suspicious links. Jamf Threat Labs has issued a report on the new malware, warning users of the third-party clipboard manager Maccy of the potential threat.

💡 The evolution of PamStealer highlights the growing sophistication of macOS malware, with attackers adopting quieter execution chains and native implementations that evade traditional detection methods. This development underscores the importance of vigilance and caution when downloading software from third-party websites, even if they appear legitimate.

QNu Labs Partners with SAGA Consultants to Expand Quantum Security Services

QNu Labs and SAGA Consultants have formed a strategic partnership to expand the global adoption of quantum-safe cybersecurity solutions. The collaboration combines QNu Labs' quantum cybersecurity technologies with SAGA Consultants' consulting expertise to support enterprises, governments, and critical infrastructure organizations. The partners aim to accelerate quantum readiness by promoting quantum-secure communications, cryptographic security, and post-quantum cybersecurity solutions. This partnership brings together QNu Labs' expertise in quantum cryptography and SAGA Consultants' deep consulting capabilities to strengthen cyber resilience in an increasingly complex threat landscape.

Why Asia’s Quantum Ambitions Need Post-Quantum Security

The White House has issued an executive order to accelerate quantum computing efforts and prioritize post-quantum cryptography, reflecting a growing recognition of the need for national security planning. Across Asia, governments have invested significantly in quantum research, infrastructure, and talent, positioning the region for economic, scientific, and strategic opportunities. Asia leads the world in public quantum investment, with over €19 billion committed, and countries like China, Japan, and Singapore are making notable progress in quantum capability. However, the region's digital infrastructure still relies on vulnerable encryption that future quantum computers may break.

💡 The quantum readiness gap between Asia's growing quantum capability and its limited post-quantum cryptography adoption poses a significant risk to sensitive data and essential services. As adversaries can collect encrypted information now and decrypt it later, the exposure associated with a cryptographically relevant quantum computer has already begun to build, highlighting the urgent need for concurrent security planning.

New Mac infostealer confirms stolen passwords before stealing data

Researchers at Jamf Threat Labs have discovered a new macOS infostealer called PamStealer, which verifies Mac login passwords before stealing sensitive data. PamStealer disguises itself as the Maccy clipboard manager and uses AppleScript alongside a Rust payload to infect Macs. The malware campaign starts with a fake website imitating the legitimate Maccy clipboard manager, delivering a malicious AppleScript application. PamStealer confirms the validity of stolen passwords through Apple's Pluggable Authentication Modules, setting it apart from other macOS infostealers. This unique feature allows attackers to immediately confirm compromised credentials. The discovery highlights a new threat to macOS users.

💡 PamStealer's password verification capability gives attackers a significant advantage in exploiting stolen credentials. It enables them to focus on high-value targets with confirmed valid login information.