The clock is
already ticking.

US

RU

CH

CA

KR

DE

BR

2025-01-17 · EU

EU financial-sector firms must demonstrate operational resilience (incl. ICT third-party risk) — including cryptographic posture.

2025-12-31 · US-NSA

NSA target for new National Security Systems software & firmware to start adopting CNSA 2.0 (Kyber, Dilithium, SHA-2) algorithms.

2026-06-30 · DE-BSI

Annual BSI cryptographic-recommendation refresh — flagged deadline for hybrid (classical + PQC) roll-out in regulated DE.

2027-12-31 · US-NSA

Networking, VPN, and key-management products on NSS networks should fully support CNSA 2.0 algorithms.

2030-12-31 · US-NIST

NIST recommended sunset for classical public-key crypto in federal systems — full PQC migration target.

2033-12-31 · US-NSA

All NSS systems must be using CNSA 2.0 PQC algorithms exclusively.

@CISAgov

Reminder: NSA's CNSA 2.0 timeline is in effect. New software for NSS should now be adopting Kyber, Dilithium, and SHA-2.

@NIST

FIPS 203 (ML-KEM), 204 (ML-DSA) and 205 (SLH-DSA) are now the standards. Migration windows are short for high-value targets.

@matthew_d_green

Harvest-now-decrypt-later isn't a scenario, it's an active intelligence program. The ECDSA signatures you commit today are tomorrow's plaintext.

@hashedout

Bitcoin's quantum exposure isn't a 2040 problem. ~25% of circulating supply sits in P2PKH addresses with exposed pubkeys. Q-Day day-one targets.

@SchneierBlog

If your security architecture cannot survive the public release of CRYSTALS-Kyber breaks, you needed PQC yesterday.

@a16zcrypto

Wallet providers shipping PQC migration paths in 2026 will own the institutional custody narrative for the next decade.

NEWS_SECURITYWEEK · INFO

Chipmaker Patch Tuesday: Intel, AMD Fix Over 80 Vulnerabilities Combined

Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution. The post Chipmaker Patch Tuesday: Intel, AMD Fix Over 80 Vulnerabilities Combined appeared first on SecurityWeek .

NEWS_DECRYPT · INFO

Harmony's ONE Sinks 37% After Attacker Mints 4 Billion Tokens

The team is weighing a rollback, which would undo the attack along with every legitimate transaction made since.

NEWS_COINDESK · INFO

Bitcoin holds near $64,000 as U.S. inflation data looms, Harmony exploit rattles altcoins

Markets are quiet ahead of the July inflation print, with bitcoin little changed, oil near $90 and Harmony nursing a fresh exploit.

NEWS_PROTOS · INFO

Coreum bridge loses 99.7% of XRP reserve in $200K exploit

An attacker swiped 99.7% of the Coreum bridge's XRP reserve by creating fake deposit transactions that never actually happened. The post Coreum bridge loses 99.7% of XRP reserve in $200K exploit appeared first on Protos .

NEWS_COINTELEGRAPH · INFO

Binance, RedotPay clash over fate of Singapore lawsuit

Amid a $473 million legal dispute, RedotPay says it expects Binance to end its Singapore case, while Binance says its claims remain active.

NEWS_COINDESK · INFO

Bank of England to test stablecoin, digital currency use in cross-border finance

The BOE-led Digital Pound Lab will test trade-finance interoperability, in which exporters receive stablecoins while importers settle in a potential digital pound.

NEWS_COINTELEGRAPH · INFO

Bitcoin miners earn under 0.7% of revenue from fees in new 10-year low

Bitcoin miners showed a “concerning” trend of pivoting to AI amid a profit squeeze as transaction-fee income barely bounced from 10-year lows of 0.52% of revenue.

NEWS_SECURITYWEEK · INFO

Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack

LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users. The post Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack appeared first on SecurityWeek .

NEWS_COINDESK · INFO

CoreWeave surges 16% on $2.58 billion revenue quarter as AI infrastructure demand eclipses crypto

Booming AI demand sends CRWV up 16% and lifts IREN and CIFR as investors favor computing infrastructure over crypto.

NEWS_COINDESK · INFO

Fidelity moves to add staking, quarterly payouts to near $900 million ether ETF

The fund would keep 85% of gross staking rewards, with the remaining 15% going to service providers.

NEWS_INFOSECURITY · INFO

Russian-Linked Hackers Accessed Polish Power Plant OT Network Through Private APN, Says CERT.PL

The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country

NEWS_DECRYPT · INFO

CFTC Invokes Emergency Powers to Keep Kalshi Trading Despite New York Suit

Kalshi triggered the order, notifying the agency of a market emergency after New York moved to bar its contracts nationwide.

NEWS_COINTELEGRAPH · INFO

Crypto companies urge AI firms to give Bitcoin developers early access

The Bitcoin Policy Institute and other industry participants urged AI companies to offer early access to their frontier models to aid Bitcoin and open-source developers in their cybersecurity efforts.

NEWS_THEHACKERNEWS · INFO

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicio

NEWS_COINDESK · INFO

One overlooked group has added $1.78 billion of selling pressure to bitcoin market

Public miners are an underappreciated source of supply hitting the market right at the margin.

NEWS_SECURITYWEEK · INFO

Fresh Windows Zero-Day Exploited in North Korean Cyberattacks

The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor. The post Fresh Windows Zero-Day Exploited in North Korean Cyberattacks appeared first on SecurityWeek .

NEWS_SECURITYWEEK · INFO

Ivanti EPM Update Patches Remotely Exploitable Flaws

The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service. The post Ivanti EPM Update Patches Remotely Exploitable Flaws appeared first on SecurityWeek .

NEWS_INFOSECURITY · INFO

Microsoft Fixes 400 Flaws on August Patch Tuesday

Microsoft has issued another massive batch of security updates with 400 fixed in the August Patch Tuesday

NEWS_THEHACKERNEWS · INFO

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens, database passwords, and other secrets from systems that installed them. Threat intelligence firm CloudSEK now says a dataset it ob

NEWS_SECURITYWEEK · INFO

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact

CISA has also published several advisories describing vulnerabilities in ICS and other OT products. The post ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact appeared first on SecurityWeek .

NEWS_COINTELEGRAPH · INFO

Inside the fake crypto startup that fooled North Korean IT workers

Suspected North Koreans IT workers joined a fake crypto startup — without realizing their every move was being tracked to extract valuable intel.

NEWS_THEHACKERNEWS · INFO

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of

NEWS_SECURITYWEEK · INFO

SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform

The security defects could allow unauthenticated attackers to execute arbitrary code remotely and read sensitive data. The post SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform appeared first on SecurityWeek .

NEWS_COINDESK · INFO

Live updates: Bitcoin at $63,600 as Japan's Metaplanet moves 3,881 BTC between wallets

Blockchain data shows the Japanese treasury firm moved the bitcoin between wallets it controls, not to an exchange, so the transfer isn't a sale despite its $1.4 billion paper loss.

NEWS_THEHACKERNEWS · INFO

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for C

NEWS_THEHACKERNEWS · INFO

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS

Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild. The high-severity flaw, tracked as CVE-2026-20349 (CVSS score: 8.6), is a case of insufficient error checki

NEWS_COINTELEGRAPH · INFO

Harmony considers rollback after suspected exploit inflates ONE supply

Harmony is working with exchanges to freeze funds and is preparing a patch after claims that 2.8 billion unauthorized ONE hit trading platforms.

NEWS_COINDESK · INFO

Crypto.com rolls out tokenized stock derivatives as crypto exchanges push into equities

The exchange is joining a tokenized stock market that has grown 600% in a year, though its products offer price exposure rather than share ownership.

NEWS_COINDESK · INFO

Here's what bitcoin and ether traders are doing ahead of the binary U.S. CPI print

Bitcoin and ether are stuck in a tight range ahead of the CPI. Here’s how savvy traders are positioning for the pivotal release.

NEWS_COINDESK · INFO

Harmony’s ONE dives 40% after an attack appears to mint tokens equal to quarter of supply

Harmony said in Asian morning hours it is working with exchanges to freeze funds and preparing a software fix.