The clock is
already ticking.

US

CH

RU

CA

KR

IL

IR

2025-01-17 · EU

EU financial-sector firms must demonstrate operational resilience (incl. ICT third-party risk) — including cryptographic posture.

2025-12-31 · US-NSA

NSA target for new National Security Systems software & firmware to start adopting CNSA 2.0 (Kyber, Dilithium, SHA-2) algorithms.

2026-06-30 · DE-BSI

Annual BSI cryptographic-recommendation refresh — flagged deadline for hybrid (classical + PQC) roll-out in regulated DE.

2027-12-31 · US-NSA

Networking, VPN, and key-management products on NSS networks should fully support CNSA 2.0 algorithms.

2030-12-31 · US-NIST

NIST recommended sunset for classical public-key crypto in federal systems — full PQC migration target.

2033-12-31 · US-NSA

All NSS systems must be using CNSA 2.0 PQC algorithms exclusively.

@CISAgov

Reminder: NSA's CNSA 2.0 timeline is in effect. New software for NSS should now be adopting Kyber, Dilithium, and SHA-2.

@NIST

FIPS 203 (ML-KEM), 204 (ML-DSA) and 205 (SLH-DSA) are now the standards. Migration windows are short for high-value targets.

@matthew_d_green

Harvest-now-decrypt-later isn't a scenario, it's an active intelligence program. The ECDSA signatures you commit today are tomorrow's plaintext.

@hashedout

Bitcoin's quantum exposure isn't a 2040 problem. ~25% of circulating supply sits in P2PKH addresses with exposed pubkeys. Q-Day day-one targets.

@SchneierBlog

If your security architecture cannot survive the public release of CRYSTALS-Kyber breaks, you needed PQC yesterday.

@a16zcrypto

Wallet providers shipping PQC migration paths in 2026 will own the institutional custody narrative for the next decade.

NEWS_DECRYPT · INFO

UK Targets Cryptomus and TokenSpot in New Russia Sanctions Package

The package hits five crypto and payment platforms, two of which handled transactions with Russia’s A7 network, the UK government said.

NEWS_SECURITYWEEK · INFO

In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years

Noteworthy stories that might have slipped under the radar: Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years, exposed NVIDIA GPU monitors leak telemetry. The post In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years appeared first on Se

NEWS_INFOSECURITY · INFO

Q3 2026 Sets New Record for Ransomware Attacks

Comparitech observed 2627 claimed ransomware attacks in Q3, with critical sectors like finance, technology, education and healthcare experiencing significant increases

NEWS_PROTOS · INFO

Anthropic bans users from bullying Claude

Anthropic’s new usage policy bans “sustained and needless abusive or cruel behavior” toward its Claude AI, effective November 12. The post Anthropic bans users from bullying Claude appeared first on Protos .

NEWS_SECURITYWEEK · INFO

Google Domains Impacted by Recent ccTLD Hijacks

Hackers hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several Google domains. The post Google Domains Impacted by Recent ccTLD Hijacks appeared first on SecurityWeek .

NEWS_DECRYPT · INFO

Morning Minute: Uptober Turns Sour as Crypto Majors Slide

Is this the beginning of a bigger selloff with the anniversary of 10/10 looming? Or just a leverage flush before the next leg up?

NEWS_COINDESK · INFO

Zcash developers set January target for quantum-resistant payments after ‘bunker mode’ scare

The plan concerns public payments, where about seven in 10 ZEC sit. A separate wallet tool would keep balance checks from revealing which addresses belong together.

NEWS_THEHACKERNEWS · INFO

The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition

As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a critical “velocity paradox,” in which organizations invest in

NEWS_COINDESK · INFO

Trump's Iran pledge underpins crypto gains as bitcoin bears face liquidation pressure

Your day-ahead look for Oct. 9, 2026

NEWS_COINTELEGRAPH · INFO

ESMA seeks evidence tokenized collateral can be cashed out in crisis

ESMA is seeking industry feedback on the legal, liquidity and operational risks of tokenized collateral before deciding whether additional EU regulatory measures are necessary.

NEWS_COINDESK · INFO

Bitcoin steadies near $82,500 after Trump rules out Iran strike before midterms

Bitcoin recovered to around $82,500 after Trump ruled out an Iran strike, but remains about 4% lower on the week, while ether has lost 9%.

NEWS_COINTELEGRAPH · INFO

UK sanctions three crypto exchanges tied to Russian illicit funds

The UK sanctioned crypto exchanges and payment processors, some of which were tied to thousands of Russian entities and the sanctioned HTX exchange.

NEWS_SECURITYWEEK · INFO

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands. The post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek .

NEWS_COINDESK · INFO

Thailand opens door to locally listed bitcoin and ether ETFs

Thailand’s new crypto rules taking effect Oct. 16. They allow Thai asset managers to launch crypto ETFs on the local stock exchange, with bitcoin and ether initially eligible.

NEWS_COINTELEGRAPH · INFO

French lawmakers back stablecoin swap tax in 2027 budget bill

France’s Finance Committee backed taxes on stablecoin swaps, as well as unrealized crypto gains when households with more than 800,000 euros move abroad.

NEWS_COINDESK · INFO

UK slaps sanctions on three crypto exchanges over alleged Russia links

Britain said the crypto platforms and two payment services may have helped Russia evade financial sanctions, with two handling transactions involving the Kremlin-backed A7 network.

NEWS_DECRYPT · INFO

Empire Market Co-Creator Sentenced to 40 Years Over $430M Dark Web Bazaar

Raheim Hamilton forfeited some 1,230 BTC. His co-creator Thomas Pavey, who agreed to forfeit 1,584 BTC, is due to be sentenced this month.

NEWS_INFOSECURITY · INFO

UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group

The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group

NEWS_SECURITYWEEK · INFO

Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries

Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices. The post Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries appeared first on SecurityWeek .

NEWS_COINTELEGRAPH · INFO

Bitcoin speculators move 55K BTC to exchanges amid $1.1B liquidations

Bitcoin dipped below $81,000, sparking mass crypto liquidations as traders sent BTC to exchanges at a loss.

NEWS_COINDESK · INFO

Dark web drug market operator sentenced to 40 years, forfeits $101 million in bitcoin

A man from Virginia, who facilitated millions of drug transactions worth roughly $430 million, agreed to give up $100 million worth of BTC. His partner forfeited nearly 1,600 BTC.

NEWS_COINDESK · INFO

MARA transfers $81.1 million in bitcoin to Galaxy Digital as strategy pivots to AI

The bitcoin miner’s transfer does not confirm a sale, but comes as its treasury has fallen from 53,822 BTC in February to 35,577 BTC in August.

NEWS_COINDESK · INFO

Sam Altman-backed bitcoin insurer Meanwhile secures $37.5 million in Bain Capital Crypto-led round

Meanwhile has signed 15 brokers serving high-net worth clients across markets iSwitzerland, Singapore, Hong Kong and the UAE.

NEWS_THEHACKERNEWS · INFO

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8, says an a

NEWS_INFOSECURITY · INFO

AI Training Critical as Governance Challenges Grow

As AI adoption accelerates, ISACA is expanding its certification portfolio with a governance-focused credential designed to help professionals manage AI securely

NEWS_DECRYPT · INFO

SIM-Swap Fraudster Who Spent Stolen Crypto on Gold Grills and Dubai Trips Jailed

Ajay Shinjin helped steal nearly $265,000 in crypto after criminals hijacked BT customers' phone numbers in November 2021.

NEWS_SECURITYWEEK · INFO

US Disrupts Chinese State-Sponsored Hacking Tools

Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure. The post US Disrupts Chinese State-Sponsored Hacking Tools appeared first on SecurityWeek .

NEWS_THEHACKERNEWS · INFO

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes the flaws to the vendors. One of the three Pixel exploits earned Ikotas

NEWS_SECURITYWEEK · INFO

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in. The post Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security appeared first on SecurityWeek .

NEWS_THEHACKERNEWS · INFO

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. "CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution