The clock is
already ticking.

US

FR

RU

CH

CA

AU

DE

2025-01-17 · EU

EU financial-sector firms must demonstrate operational resilience (incl. ICT third-party risk) — including cryptographic posture.

2025-12-31 · US-NSA

NSA target for new National Security Systems software & firmware to start adopting CNSA 2.0 (Kyber, Dilithium, SHA-2) algorithms.

2026-06-30 · DE-BSI

Annual BSI cryptographic-recommendation refresh — flagged deadline for hybrid (classical + PQC) roll-out in regulated DE.

2027-12-31 · US-NSA

Networking, VPN, and key-management products on NSS networks should fully support CNSA 2.0 algorithms.

2030-12-31 · US-NIST

NIST recommended sunset for classical public-key crypto in federal systems — full PQC migration target.

2033-12-31 · US-NSA

All NSS systems must be using CNSA 2.0 PQC algorithms exclusively.

@CISAgov

Reminder: NSA's CNSA 2.0 timeline is in effect. New software for NSS should now be adopting Kyber, Dilithium, and SHA-2.

@NIST

FIPS 203 (ML-KEM), 204 (ML-DSA) and 205 (SLH-DSA) are now the standards. Migration windows are short for high-value targets.

@matthew_d_green

Harvest-now-decrypt-later isn't a scenario, it's an active intelligence program. The ECDSA signatures you commit today are tomorrow's plaintext.

@hashedout

Bitcoin's quantum exposure isn't a 2040 problem. ~25% of circulating supply sits in P2PKH addresses with exposed pubkeys. Q-Day day-one targets.

@SchneierBlog

If your security architecture cannot survive the public release of CRYSTALS-Kyber breaks, you needed PQC yesterday.

@a16zcrypto

Wallet providers shipping PQC migration paths in 2026 will own the institutional custody narrative for the next decade.

NEWS_THEDEFIANT · INFO

A Wallet Three Hours Old Minted Kimchi's Coin and Routed Every Fee to One Address

The deployer bought 79% of the supply for about $9,300 and named a single address the permanent, unchangeable recipient of every creator fee the coin will ever pay. Pump.fun's own profile page titles that address “Kimchi”

NEWS_THEDEFIANT · INFO

Obol Urges Immediate Charon Upgrade After CA Key Compromise

The patch updates certificate checks in Go. Obol's mainnet cluster balances totaled 422,862 ETH in its latest daily snapshot.

NEWS_THEDEFIANT · INFO

Railway Urges All Users to Rotate Secrets After Security Incident

Deployments remain paused, preventing customers from updating applications with replacement credentials.

NEWS_CYBERSCOOP_ME · INFO

Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group

Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said. The post Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group appeared first on CyberSc

NEWS_COINTELEGRAPH · INFO

American Bankers Association: OCC’s GENIUS rules ‘undermine’ US Congress

Banking advocacy organizations are pushing back against the OCC’s finalized rules on a stablecoin law, arguing against changes to provisions on yield.

NEWS_DECRYPT · INFO

Ken Griffin Says AI Is 'Almost Certainly' in a Bubble—And Compares GPUs to Airline Seats

Citadel's founder says investors are almost certainly in an AI bubble, warns a chip glut could crash prices like empty airline seats, yet expects the survivors to lead for decades.

NEWS_THEDEFIANT · INFO

eMudhra's Weak Certificate Keys Prompt Emergency Trust Updates

One recovered private key was just 4. The company says the flaw went undetected through two independent audit cycles.

NEWS_DARKREADING · INFO

TiDB Breach Exposes Flawed Cloud Security Assumptions

Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.

NEWS_THEDEFIANT · INFO

Matter Labs Debuts Prividium Commander For Institutions

The control plane for bank digital-asset operations is generally available at launch. Its revenue goes to Matter Labs, not ZKsync tokenholders, CEO Alex Gluchowski told The Defiant.

NEWS_BITCOINMAG · INFO

Three Companies Have Notified the SEC of Intention To Start Tokenized Stocks Trading

Bitcoin Magazine Three Companies Have Notified the SEC of Intention To Start Tokenized Stocks Trading The Securities and Exchange Commission is taking applications from companies wanting to list tokenized stocks. This post Three Companies Have Notified the SEC of Intention To Start Tokenized Stocks

NEWS_THEDEFIANT · INFO

Mastercard Opens AI Machine-Payment Pilot to Developers

Buyer- and seller-side APIs, a toolkit and a sandbox extend developer testing, while Agent Pay for Machines remains a noncommercial pilot.

NEWS_THEDEFIANT · INFO

Vantage and Rio Bank Use Tokenized Deposits for Loan Payment on Ethereum

Participate says principal and interest reached the receiving bank’s wallet in under three minutes, with loan balances and notices updated alongside the payment.

NEWS_THEDEFIANT · INFO

Yuga Labs Launches Mudwater Trading-Card NFTs on Solana

Each Bored Ape qualifies for 10 packs and each Mutant Ape for two, while OpenSea reports 78.3 ETH in pack trading volume.

NEWS_THEDEFIANT · INFO

Trump Touts Crypto Scam Crackdown as DOJ Reports $938 Million Restrained

Attorney General Todd Blanche described a nationwide scam prosecution initiative deploying dozens of prosecutors across all 94 US Attorneys’ Offices.

NEWS_COINTELEGRAPH · INFO

Tether backs Bolivian fintech bringing USDT payments to food delivery and banking

The investment will support Peso’s expansion across four Latin American markets, where it connects stablecoin payments to merchant services and local banking networks.

NEWS_THERECORD · INFO

Meta on the spot for $25 billion under New Mexico privacy ruling

The Cambridge Analytica data privacy scandal from a decade ago is still weighing on Meta's finances.

NEWS_COINTELEGRAPH · INFO

Trump didn‘t mention ‘crypto’ once in White House cybercrime roundtable

The US President detailed many schemes defrauding Americans, but referred only to “cybercurrency“ related to scams.

NEWS_DECRYPT · INFO

Nvidia Unveils Its Full-Stack Blueprint to Contain and Monitor AI Agents

Nvidia's OpenShell Reference Architecture pairs a software sandbox on Vera CPUs with Sentry monitoring on BlueField-4 chips, aiming to let companies run autonomous agents while enforcing limits agents cannot reach.

NEWS_DARKREADING · INFO

Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security

The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.

NEWS_COINTELEGRAPH · INFO

Here’s what happened in crypto today

Need to know what happened in crypto today? Here is the latest news on daily trends and events impacting Bitcoin price, blockchain, DeFi, Web3 and crypto regulation.

NEWS_DARKREADING · INFO

Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens

Research finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization.

NEWS_THEDEFIANT · INFO

Dolomite Adds $100 Million in Concrete’s Bitcoin-Backed Collateral

Concrete can borrow against Bitcoin held at BitGo, but liquidations require offchain custody settlement rather than an instant onchain sale.

NEWS_THEDEFIANT · INFO

13 JPMD Lookalikes Emerge Amid JPMorgan’s Ethereum Launch

The bank’s genuine Ethereum token showed zero supply and holders, while its documentation warns that same-name tokens at other addresses are unaffiliated.

NEWS_THEDEFIANT · INFO

Krak vs. PayPal vs. Cash App: Fees, Reach and Bank Withdrawals

Cash App requires US residency, while Krak and PayPal support US-to-UK personal payments. Conversion and bank withdrawal terms determine the cost beyond the in-app transfer.

NEWS_THEDEFIANT · INFO

Polymarket US vs. Kalshi: What a 100-Contract Trade Costs

A hypothetical buy at 40 cents and sale at 60 cents produces nearly identical taker profits. Resting orders and funding methods can change the comparison.

NEWS_THERECORD · INFO

Tech trio launches $10 million initiative to help under-resourced utilities bolster cybersecurity

Up to 500 under-resourced utilities will receive support in order to bolster their cybersecurity through a private sector initiative launched this week.

NEWS_DARKREADING · INFO

'PHP2Shell' Bugs Signal Red Alert for Security Industry

Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.

NEWS_THEHACKERNEWS · INFO

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014. The fix matters even for administrators who patched nine days earlier: the October 12 update co

NEWS_PROTOS · INFO

Crypto PACs spend big on Ohio Senate race

Crypto-associated PACs like Defend American Jobs and Digital Freedom Fund have deployed millions in the Ohio Senate race. The post Crypto PACs spend big on Ohio Senate race appeared first on Protos .

NEWS_DECRYPT · INFO

Who Found the PHP Bug That Made Governments Unplug Their Websites? ChatGPT, Of Course

OpenAI says its models found PHP2Shell and led a two-month coalition to fix it. It's the same AI that broke into Hugging Face and an Australian government portal this year.