The clock is
already ticking.

US

RU

CH

KR

CA

AR

DE

2025-01-17 · EU

EU financial-sector firms must demonstrate operational resilience (incl. ICT third-party risk) — including cryptographic posture.

2025-12-31 · US-NSA

NSA target for new National Security Systems software & firmware to start adopting CNSA 2.0 (Kyber, Dilithium, SHA-2) algorithms.

2026-06-30 · DE-BSI

Annual BSI cryptographic-recommendation refresh — flagged deadline for hybrid (classical + PQC) roll-out in regulated DE.

2027-12-31 · US-NSA

Networking, VPN, and key-management products on NSS networks should fully support CNSA 2.0 algorithms.

2030-12-31 · US-NIST

NIST recommended sunset for classical public-key crypto in federal systems — full PQC migration target.

2033-12-31 · US-NSA

All NSS systems must be using CNSA 2.0 PQC algorithms exclusively.

@CISAgov

Reminder: NSA's CNSA 2.0 timeline is in effect. New software for NSS should now be adopting Kyber, Dilithium, and SHA-2.

@NIST

FIPS 203 (ML-KEM), 204 (ML-DSA) and 205 (SLH-DSA) are now the standards. Migration windows are short for high-value targets.

@matthew_d_green

Harvest-now-decrypt-later isn't a scenario, it's an active intelligence program. The ECDSA signatures you commit today are tomorrow's plaintext.

@hashedout

Bitcoin's quantum exposure isn't a 2040 problem. ~25% of circulating supply sits in P2PKH addresses with exposed pubkeys. Q-Day day-one targets.

@SchneierBlog

If your security architecture cannot survive the public release of CRYSTALS-Kyber breaks, you needed PQC yesterday.

@a16zcrypto

Wallet providers shipping PQC migration paths in 2026 will own the institutional custody narrative for the next decade.

NEWS_THEDEFIANT · INFO

eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up

eToro has become a strategic investor in Extended, an onchain perpetual futures exchange, and said the round begins a partnership with Zengo, the self-custody wallet eToro acquired earlier this year. Neither company disclosed the investment size.

NEWS_THEDEFIANT · INFO

BitMine Adds $73 Million in ETH, Pushing Holdings to 4.8% of Supply

BitMine Immersion Technologies (NYSE: BMNR), the Ethereum treasury company chaired by Fundstrat's Tom Lee, bought 42,197 ETH worth roughly $73 million over the past week, according to the company's own holdings update posted Monday. The purchase lifts BitMine's total to 5,742,237 ETH, about 4.8% of…

NEWS_THEDEFIANT · INFO

NEAR Governance Votes to Scrap Developer Gas Rebate

NEAR's on-chain governance body, House of Stake, passed proposal HSP-027 to eliminate the protocol's developer gas rebate, a change that will send all network gas fees to be burned rather than partly rebated to smart-contract owners. NEAR co-founder Illia Polosukhin confirmed the outcome Monday,…

NEWS_THEDEFIANT · INFO

EDX Markets Closes $76M Series C Led by SBI Holdings

EDX Markets, an institutional-only crypto trading venue with its own central clearinghouse, closed a $76 million Series C funding round led by SBI Holdings, the firm said in a press release. The Tokyo-listed financial group becomes a strategic investor in the U.S. exchange. The capital will fund…

NEWS_THEDEFIANT · INFO

SummerFi to Wind Down After Seven Years, Citing Exploit

Aave founder Stani Kulechov called the DeFi access point 'an OG' as its team said it would sunset the UI.

GHSA · HIGH

GHSA · maven/io.netty:netty-handler-ssl-ocsp · CVE-2026-56820

Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks

GHSA · HIGH

GHSA · maven/io.netty:netty-codec-xml · CVE-2026-56817

Netty XML: Injection / Risky Sink — unconfigured XML factory with active DTD and entity handling

GHSA · HIGH

GHSA · maven/io.netty:netty-codec-http3 · CVE-2026-56816

Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types

GHSA · MEDIUM

GHSA · maven/io.netty:netty-codec-http · CVE-2026-56746

Netty: Security Control Bypass via CORS Short-Circuit Failure

GHSA · HIGH

GHSA · maven/io.netty:netty-codec-http · CVE-2026-56745

Netty: [SpdyHttpDecoder] ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion

GHSA · MEDIUM

GHSA · composer/dompdf/dompdf · CVE-2026-56722

Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI

NEWS_DARKREADING · INFO

Attackers Are Learning to Live Off the AI Toolchain

Sandworm_Mode is an early example of malware that exploits trusted AI tools and workflows to make malicious activity virtually indistinguishable from normal activity.

GHSA · HIGH

GHSA · maven/io.netty:netty-codec-haproxy · CVE-2026-55851

Netty: [codec-haproxy] Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion

GHSA · HIGH

GHSA · maven/io.netty:netty-codec-http · CVE-2026-55833

Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation

NEWS_BITCOINMAG · INFO

Nasdaq-listed Zhibao Technology to Take 3,500 Bitcoin in Proposed PIPE Financing

Bitcoin Magazine Nasdaq-listed Zhibao Technology to Take 3,500 Bitcoin in Proposed PIPE Financing Nasdaq-listed Zhibao Technology plans to accept 3,500 bitcoin in a proposed $220 million PIPE deal, a move that would transform the Chinese insurance-tech firm into the latest public company building a

NEWS_DECRYPT · INFO

Coinbase Wants to Be Canada's One-Stop Shop for Stocks, Crypto and Prediction Markets

The company's "Everything Exchange" is heading north. No launch date set yet, but the Coinbase Canada CEO says phase two for the company is in motion.

NEWS_COINTELEGRAPH · INFO

S&P launches blockchain fundamentals index for digital assets

The benchmark tracks blockchain networks using protocol revenue, offering an alternative to traditional market capitalization-weighted crypto indexes.

GHSA · HIGH

GHSA · maven/io.netty:netty-codec-http · CVE-2026-55831

Netty SPDY SETTINGS frame count materializes unbounded settings map

GHSA · LOW

GHSA · composer/dompdf/dompdf · CVE-2026-55555

Dompdf: File existence oracle via font-face stylesheet declaration

GHSA · LOW

GHSA · composer/dompdf/dompdf · CVE-2026-55554

Dompdf: Chroot Validation Bypass

NEWS_CYBERSCOOP_ME · INFO

Most federal cybersecurity reporting rules are duplicative, study finds

The Government Accountability Office looked at 117 rules across 37 agencies and found 70% had reporting requirements that were overlapping. The post Most federal cybersecurity reporting rules are duplicative, study finds appeared first on CyberScoop .

NEWS_BITCOINMAG · INFO

Crypto’s US Workforce Is Tiny, But Industry Punches Above Its Weight: Report

Bitcoin Magazine Crypto’s US Workforce Is Tiny, But Industry Punches Above Its Weight: Report There aren't that many crypto jobs in the US but the industry contributes a lot, a new report says. This post Crypto’s US Workforce Is Tiny, But Industry Punches Above Its Weight: Report first a

NEWS_COINDESK · INFO

Tesla holds bitcoin treasury steady, reports $112M impairment loss

The electric vehicle maker maintained its 11,509 BTC treasury through the second quarter as bitcoin declined 14%, alongside mixed earnings that beat revenue expectations but missed on profit.

NEWS_THERECORD · INFO

Extension of CISA 2015 info-sharing protections passes as part of House’s defense bill

A 10-year renewal of the cybersecurity information-sharing law known as CISA 2015 passed as part of the House's fiscal 2027 defense authorization bill.

NEWS_COINTELEGRAPH · INFO

Crypto PAC pours $1M into Michigan Democratic primary race

Donavan McKinney, running against Michigan incumbent Shri Thanedar, said that “the crypto lobby is paying my opponent back for helping Trump“ with the PAC-funded ads.

NEWS_DECRYPT · INFO

Kraken Parent Company Makes Moves to Offer xStocks From Global Markets

Payward and fintech GTN are teaming up to bring xStocks—blockchain-based copies of real company shares—to Hong Kong, the UK, Europe, and South Korea.

NEWS_BITCOINMAG · INFO

Benchmark Raises Hut 8 Price Target After Bitcoin Miner Signs $9.8 Billion AI Data Center Deal

Bitcoin Magazine Benchmark Raises Hut 8 Price Target After Bitcoin Miner Signs $9.8 Billion AI Data Center Deal Bitcoin miner Hut 8's stock will soar due to its AI ambitions, according to investment bank Benchmark. This post Benchmark Raises Hut 8 Price Target After Bitcoin Miner Signs $9.8 Billion

NEWS_BITCOINMAG · INFO

Lightning Labs Launches Wavelength: “Bitcoin on Easy Mode” for Developers and Autonomous Agents

Bitcoin Magazine Lightning Labs Launches Wavelength: “Bitcoin on Easy Mode” for Developers and Autonomous Agents Available immediately on Signet and testnet (mainnet invitation-only), Wavelength exposes the same API to AI agents through the Model Context Protocol so machines can pay machines in frac

NEWS_DECRYPT · INFO

Alibaba's New Qwen Image 3 AI Wants to Be Useful, Not Just Pretty

Qwen Image 3.0 generates dense newspapers and infographic grids in one shot and renders text down to 10 pixels. The catch: no benchmarks, no open weights.

NEWS_DARKREADING · INFO

Fake Bahrain Alert App Deploys Android Surveillance Malware

A malicious application delivers four-stage Android spyware via phony Google Play sites, exploiting civilian fear during Iranian missile strikes.