Russian Researchers Patent Detector Blinding Protection for Quantum Key Distribution Systems
Specialists from the engineering-quantum laboratory SFB Lab and the Center for Quantum Technologies at Moscow State University have created a method to protect quantum key distribution systems from detector blinding attacks. The solution not only identifies the attack but also allows the system to retain the secure portion of the key instead of discarding the entire key material.
In a classic blinding attack, an adversary directs intense optical radiation at the single-photon detectors, temporarily blinding them. The attacker then injects carefully crafted light pulses that force the receiver to register chosen bits. When executed correctly, the attack reveals the full key without triggering conventional error-rate or detection alarms.
Existing countermeasures can detect such interference, yet they typically require the entire key to be discarded after an alarm. The new Russian method operates more selectively. The receiver randomly and slightly changes the quantum efficiency of its detectors at unpredictable moments. Because the attacker does not know the current efficiency state, no single pulse energy can reliably control the detector across all possible settings; the required energies differ by more than a factor of ten.
As a result, the attacker inevitably produces detectable anomalies such as erroneous clicks or double detections. Statistical analysis of these events enables the system to calculate how many bits may have been under adversarial control. Only those bits are removed during the privacy-amplification stage, while the remaining key material continues to be used.
The approach was tested on a production single-photon detector and does not require modifications to the optical layout. It is therefore suitable for a broad class of commercially available devices. The invention is protected by Russian patent RU 2 856 208 C1, which covers implementations for both single-detector and dual-detector receivers. The research results have been accepted for publication in the journal Physical Review Applied.
Related articles
5 NetworkPolicy Mistakes That Leave Kubernetes Clusters Completely Unprotected
A detailed analysis from OTUS highlights five frequent configuration errors in Kubernetes NetworkPolicy that allow unrestricted traffic despite policies appearing active in the cluster. The article explains that Kubernetes itself does not enforce NetworkPolicy objects; enforcement depends entirely on the CNI plugin such as Calico, Cilium, or Weave Net, while Flannel and kubenet ignore them entirely. Common pitfalls include blocking DNS resolution when applying default-deny egress rules, incorrect use of namespaceSelector versus podSelector leading to overly permissive access, and confusing the top-level podSelector with selectors inside ingress or egress blocks. Additional issues arise when policies fail to account for ingress controllers, hostNetwork pods, or inter-container localhost communication within the same pod. The piece stresses the importance of traffic-based validation rather than relying on kubectl output and recommends testing with deny-all policies plus continuous monitoring during rollout.
AI System iFinder Uncovers 84 Zero-Day Vulnerabilities in 4G and 5G Networks, 23 CVEs Still Unpatched
Researchers from Nanyang Technological University deployed the AI-driven system iFinder against software managing 4G and 5G networks, discovering 84 previously unknown vulnerabilities. Developers confirmed 83 of the findings, with 81 receiving CVE identifiers. Only 58 issues have been patched so far, leaving 23 confirmed vulnerabilities with CVE numbers awaiting fixes. The most severe flaw enables session hijacking by injecting a network rule that reuses an existing identifier but carries a higher priority, bypassing uniqueness checks and redirecting subscriber traffic to the attacker. The attack was fully reproduced on OpenAirInterface and validated in two commercial 5G networks, with one vendor releasing a patch for CVE-2026-8233. iFinder operates through three coordinated AI agents that identify unvalidated inputs, cross-reference 3GPP standards, and iteratively develop working exploits, though manual verification remains necessary due to false positives. Open5GS, SD-Core, and free5GC have begun remediation, while three of seven tested projects have issued no patches.
Researchers Expose GPON Optical Network Eavesdropping via Modified ONU Devices at DEF CON
At DEF CON 34, two researchers demonstrated how inexpensive hardware modifications allow interception of downstream traffic in GPON fiber networks shared among multiple subscribers. The passive optical design means all clients connected to the same splitter receive identical data streams, with separation handled only at the ONU level through 12-bit GEM port identifiers. By acquiring Realtek RTL960x-based SFP modules and systematically bypassing built-in restrictions on GEM port reassignment, VLAN tagging, switch forwarding, and checksum validation, the team achieved access to traffic intended for up to 128 neighboring users. Exposed data includes DNS queries that can reveal occupancy patterns, unencrypted SIP voice traffic, and in some cases traffic from nearby cellular base stations. The researchers also identified exploitable vulnerabilities in the VSOL G100S OLT device that could grant root-level control and compromise provider routers. Additional coverage in the same Kaspersky report examined Head Mare's compromise of TrueConf servers, EvilFontTool font-based evasion, an OpenAI presentation on an accidental AI attack against Hugging Face, and the SCTPhantom Linux kernel flaw present for 18 years.
WordPress Patches High-Severity XSS2Shell Flaw Enabling Remote Code Execution (CVE-2026-64638)
WordPress has released a fix for a high-severity vulnerability in its core that can turn a malicious login attempt into remote PHP code execution on the server. The flaw, tracked as CVE-2026-64638 and rated 8.9 on CVSS, is named XSS2Shell and begins as a reflected cross-site scripting issue on the authentication screen. An unauthenticated attacker can submit a specially crafted username that bypasses sanitization mechanisms due to differences in how PHP and WordPress interpret certain characters, allowing controlled HTML elements to be injected into the login page. This leads to JavaScript execution in the site domain, and when an authenticated administrator visits a prepared page, the attacker can abuse the existing session to authorize application credentials and upload arbitrary PHP code. The patch is included in WordPress 7.0.3 released on August 6, with backports available for branches as old as 4.7. No public exploitation has been confirmed yet, but the technical details make immediate updating a priority for site administrators.