The clock is
already ticking.

US

RU

CH

DE

CA

PE

NL

2025-01-17 · EU

EU financial-sector firms must demonstrate operational resilience (incl. ICT third-party risk) — including cryptographic posture.

2025-12-31 · US-NSA

NSA target for new National Security Systems software & firmware to start adopting CNSA 2.0 (Kyber, Dilithium, SHA-2) algorithms.

2026-06-30 · DE-BSI

Annual BSI cryptographic-recommendation refresh — flagged deadline for hybrid (classical + PQC) roll-out in regulated DE.

2027-12-31 · US-NSA

Networking, VPN, and key-management products on NSS networks should fully support CNSA 2.0 algorithms.

2030-12-31 · US-NIST

NIST recommended sunset for classical public-key crypto in federal systems — full PQC migration target.

2033-12-31 · US-NSA

All NSS systems must be using CNSA 2.0 PQC algorithms exclusively.

@CISAgov

Reminder: NSA's CNSA 2.0 timeline is in effect. New software for NSS should now be adopting Kyber, Dilithium, and SHA-2.

@NIST

FIPS 203 (ML-KEM), 204 (ML-DSA) and 205 (SLH-DSA) are now the standards. Migration windows are short for high-value targets.

@matthew_d_green

Harvest-now-decrypt-later isn't a scenario, it's an active intelligence program. The ECDSA signatures you commit today are tomorrow's plaintext.

@hashedout

Bitcoin's quantum exposure isn't a 2040 problem. ~25% of circulating supply sits in P2PKH addresses with exposed pubkeys. Q-Day day-one targets.

@SchneierBlog

If your security architecture cannot survive the public release of CRYSTALS-Kyber breaks, you needed PQC yesterday.

@a16zcrypto

Wallet providers shipping PQC migration paths in 2026 will own the institutional custody narrative for the next decade.

NEWS_CYBERSCOOP_ME · INFO

Retail theft bill spurs ‘very large and very dangerous’ surveillance fears

The Combating Organized Retail Crime Act has won a big House vote and could be on the fast track in the Senate — and supporters say it could help fight cybercrime. The post Retail theft bill spurs ‘very large and very dangerous’ surveillance fears appeared first on CyberScoop .

NEWS_COINDESK · INFO

Bitcoin's jump above $71,000 sets up bullish golden cross pattern

Bitcoin’s improving momentum could produce a golden cross, but the rally still faces an important test.

NEWS_COINDESK · INFO

Crypto for Advisors: What are tokenized deposits?

Banks are moving deposits on-chain using permissioned systems, not open ones. See why privacy and compliance dictate this path in this week's newsletter.

NEWS_DARKREADING · INFO

Pakistan's Transparent Tribe Refreshes Toolset for Afghan Cyberattacks

A nation-state threat actor is picking on immature organizations run by the Taliban, but failing against more prepared government agencies in India.

NEWS_SECURITYWEEK · INFO

Hackers Target Zimbra Servers in Active Exploitation Campaign

Exploitation of the Zimbra Collaboration vulnerability CVE-2026-73570 has been observed by Poland’s CERT Polska. The post Hackers Target Zimbra Servers in Active Exploitation Campaign appeared first on SecurityWeek .

NEWS_PROTOS · INFO

Ansem’s new website branded ‘vibe-coded Pump Fun wrapper’ by dev

The biggest memecoin launched on Ansem’s new website is Bullshit Coin, and it only goes downhill from there. The post Ansem’s new website branded ‘vibe-coded Pump Fun wrapper’ by dev appeared first on Protos .

NEWS_INFOSECURITY · INFO

JFrog Artifactory Flaws Enable Software Supply Chain Attacks

Two Artifactory flaws allowed attackers to poison package metadata across software repositories

NEWS_SECURITYWEEK · INFO

Surveillance – Everything You Wanted to Know, But Were Afraid to Ask

We all know they’re watching us. But we don’t know who they are, nor why nor how they are doing it. The post Surveillance – Everything You Wanted to Know, But Were Afraid to Ask appeared first on SecurityWeek .

NEWS_DECRYPT · INFO

Morning Minute: Hyperliquid Is Coming to the US

At least, if Trump and the CFTC have their way. And the market really, really liked the news.

NEWS_THEHACKERNEWS · INFO

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability ("GHSA-864f-rcv7-6rh4"), which has yet

NEWS_BITCOINMAG · INFO

Bitcoin Rockets Past $72,000 After Trump Pushes For Clarity Act

Bitcoin Magazine Bitcoin Rockets Past $72,000 After Trump Pushes For Clarity Act Bitcoin’s price surged further on Thursday, blowing past $72,000 the day after President Trump held a meeting with crypto executives and urged lawmakers to get the long-awaited Clarity Act over the line.  The

NEWS_THEHACKERNEWS · INFO

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the cloud computing and virtualization technology company, the issues affect customer-managed NetScaler

NEWS_CYBERSCOOP_ME · INFO

The push to designate AI as the next critical infrastructure sector

The designation would unlock a range of federal services, tools and resources for an industry that policymakers view as increasingly tied to national and economic security. The post The push to designate AI as the next critical infrastructure sector appeared first on CyberScoop .

NEWS_DECRYPT · INFO

Fake Crypto AML Checkers Are Trying to Drain Users' Wallets

Scammers are impersonating crypto compliance services to trick users into approving transactions that could put their assets at risk.

NEWS_COINTELEGRAPH · INFO

MiCA cracks down on USDT in Europe... but no one else cares

USDT is disappearing from regulated European platforms, but there is little sign that it has resulted in weakening global demand for Tether.

NEWS_DARKREADING · INFO

'Grandoreiro' Malware Resurfaces With Mexico Campaign

The banking Trojan, post-law enforcement takedown, is sprucing itself up with features that make detection and analysis harder.

NEWS_THEHACKERNEWS · INFO

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska). The vulnerability in question is CVE-2026-73570 (CVSS score: 8.9), which refers to a case of command injection that

NEWS_COINTELEGRAPH · INFO

Bitdeer signs $400M AI cloud computing deal for Malaysia facility

Bitdeer expects revenue from the five-year agreement to begin in early 2027 as it builds toward 350 megawatts of AI cloud capacity by 2028.

NEWS_SECURITYWEEK · INFO

Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia

Operation CameraSwarm targeted Dahua cameras across multiple countries, focusing on Russian and CIS telecom netblocks. The post Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia appeared first on SecurityWeek .

NEWS_COINTELEGRAPH · INFO

Here’s what happened in crypto today

Need to know what happened in crypto today? Here is the latest news on daily trends and events impacting Bitcoin price, blockchain, DeFi, Web3 and crypto regulation.

NEWS_INFOSECURITY · INFO

NCSC Urges Stronger Controls for Agentic AI Systems

NCSC urged sandboxing, oversight and tight access controls for autonomous AI agents

NEWS_INFOSECURITY · INFO

US Defense Contractors Admit Their Rising CMMC Scores May Not Be Accurate

Defense contractors in the US are doubting their own self-assessment scores under CMMC Phase I, even as those scores hit an all-time high

NEWS_COINTELEGRAPH · INFO

Cybersecurity firm unveils crypto phishing campaign targeting 885,000 phone numbers

Rapid7 unveiled a new cryptocurrency phishing campaign targeting 885,000 phone numbers, aiming to steal investors’ holdings by redirecting them to fake wallet provider websites.

NEWS_SECURITYWEEK · INFO

Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities

The flaws could be exploited to execute arbitrary code, access sensitive information, and elevate privileges. The post Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities appeared first on SecurityWeek .

NEWS_SECURITYWEEK · INFO

MLflow Vulnerability Exploited for Cloud Credential Theft

The critical-severity flaw allows attackers to send HTTP requests to internal endpoints and extract sensitive information. The post MLflow Vulnerability Exploited for Cloud Credential Theft appeared first on SecurityWeek .

NEWS_PROTOS · INFO

UK tax service sent 80K warning letters to crypto holders in last financial year

The UK government sent more than 81,000 warning letters in the past financial year to crypto holders it suspects of owing unpaid taxes. The post UK tax service sent 80K warning letters to crypto holders in last financial year appeared first on Protos .

NEWS_THEHACKERNEWS · INFO

Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments

Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date a point-of-sale (POS) terminal reads over near-field communication (NFC), without breaking any of the car

NEWS_COINDESK · INFO

Optimism-funded team's deciding vote shifts $49 million in OP tokens away from users

The approved plan reallocates 546.9 million OP from user airdrops to a Foundation-controlled Strategic Ecosystem Fund.

NEWS_PROTOS · INFO

Tether has publicly listed a company that partially controls USDS

Tether quietly invested $134M in failing biopharmaceutical firm NovaBay in March, turning it into a stablecoin holding company. The post Tether has publicly listed a company that partially controls USDS appeared first on Protos .

NEWS_SECURITYWEEK · INFO

Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities

The flaws could lead to remote code execution, authentication bypasses, and path traversal attacks. The post Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities appeared first on SecurityWeek .