The clock is
already ticking.

US

FR

CH

RU

CA

AU

AE

2025-01-17 · EU

EU financial-sector firms must demonstrate operational resilience (incl. ICT third-party risk) — including cryptographic posture.

2025-12-31 · US-NSA

NSA target for new National Security Systems software & firmware to start adopting CNSA 2.0 (Kyber, Dilithium, SHA-2) algorithms.

2026-06-30 · DE-BSI

Annual BSI cryptographic-recommendation refresh — flagged deadline for hybrid (classical + PQC) roll-out in regulated DE.

2027-12-31 · US-NSA

Networking, VPN, and key-management products on NSS networks should fully support CNSA 2.0 algorithms.

2030-12-31 · US-NIST

NIST recommended sunset for classical public-key crypto in federal systems — full PQC migration target.

2033-12-31 · US-NSA

All NSS systems must be using CNSA 2.0 PQC algorithms exclusively.

@CISAgov

Reminder: NSA's CNSA 2.0 timeline is in effect. New software for NSS should now be adopting Kyber, Dilithium, and SHA-2.

@NIST

FIPS 203 (ML-KEM), 204 (ML-DSA) and 205 (SLH-DSA) are now the standards. Migration windows are short for high-value targets.

@matthew_d_green

Harvest-now-decrypt-later isn't a scenario, it's an active intelligence program. The ECDSA signatures you commit today are tomorrow's plaintext.

@hashedout

Bitcoin's quantum exposure isn't a 2040 problem. ~25% of circulating supply sits in P2PKH addresses with exposed pubkeys. Q-Day day-one targets.

@SchneierBlog

If your security architecture cannot survive the public release of CRYSTALS-Kyber breaks, you needed PQC yesterday.

@a16zcrypto

Wallet providers shipping PQC migration paths in 2026 will own the institutional custody narrative for the next decade.

NEWS_THEHACKERNEWS · INFO

OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication

OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models. "Based on the current state of alignment research, monitoring systems, and the security of internet in

NEWS_THEDEFIANT · INFO

X100 Exploit Proceeds Split Into Four 400-ETH Wallets

The first exploiter swapped about 4.75 million USDT into ether, while the distribution wallet retained another 423 ETH.

NEWS_THEDEFIANT · INFO

Keystone Website Breach Exposes Customer Addresses and Order Details

The hardware-wallet maker says it blocked access and fixed the vulnerability. Payment details, recovery phrases and private keys were not exposed, according to the company.

NEWS_THEDEFIANT · INFO

Electrum Patches Wallet Flaw Exploited Through Malicious Servers

A malicious server can substitute a fake payment, then trick the user into signing it while raising the transaction fee. Developers say one user reported losing money.

NEWS_DECRYPT · INFO

Google Quietly Updates Privacy Policy to Let Gmail and Photos Data Feed Ads

A policy change effective Oct. 16 carves out an exception to Google’s long-standing pledge—letting connected Gmail, Drive, and Photos data personalize ads through its Personal Intelligence AI features.

NEWS_THEDEFIANT · INFO

ARB Touches Four-Week Low as Losses Outpace Bitcoin and Ether

OP and POL also lost more than a quarter over matched four-week windows, while Arbitrum One's active-address count rose.

NEWS_DECRYPT · INFO

Sweden's Government Offices Block ChatGPT and Claude, Keep Microsoft Copilot

Sweden's Government Offices will block ChatGPT and Claude on staff computers from Monday, steering civil servants to Microsoft Copilot as the only AI that passed its security review.

NEWS_COINDESK · INFO

Strategy, Strive face balancing act between bitcoin buying and preferred stock dividends

The securities have financed purchases of nearly 136,000 bitcoin, opening a funding channel that analysts expect to complement the larger ETF market.

NEWS_THEDEFIANT · INFO

Ether Falls Below $2,300 as 28-Day Loss Reaches 14.7%

ETH lagged bitcoin by 9.15 percentage points over matched nearly four-week windows, while US ether ETFs recorded another outflow on Oct. 22.

NEWS_COINDESK · INFO

Block's new voice AI sounds eerily human, sparking awe and scam fears

Reactions split between amazement at how human it sounds and fears it could fuel scams and deception, with CZ eyeing uses in children’s education.

NEWS_THEDEFIANT · INFO

Third X100 Exploit Transaction Pulls 550,000 X From Uniswap Pool

A different sender routed about 549,916 X and 1,909 USDT to a new beneficiary, while the affected pool held less than 200 USDT.

NEWS_COINDESK · INFO

Crypto under weekend pressure, bitcoin slides below $80,000 on U.S. Middle East evacuations

Bitcoin has sunk to its weakest level in more than one month.

NEWS_DECRYPT · INFO

Game Publishers Have Pushed to Cut Discs Since 2007, Infinity Ward Veteran Says

Robert Bowling, who spent six years working on Call of Duty, told Decrypt that Activision suggested cutting discs nearly two decades ago.

NEWS_COINDESK · INFO

Why McDonalds, Microsoft and Google saying no to tokenized stocks isn't a dealbreaker

Some of the world's biggest companies objected to being listed on the first tokenized securities trading venue under the SEC's innovation exemption. But the early pushback may say more about issuer caution than about rejection of tokenization itself.

NEWS_THEDEFIANT · INFO

X100 Exploit Nets 4.85 Million USDT After Governance Takeover

Two transactions turned treasury tokens and liquidity positions into USDT; Blockaid warned that the Ethereum attack was ongoing.

NEWS_COINDESK · INFO

Argentina drops criminal probe into President Milei over crashed memecoin LIBRA

The judge found that Milei's promotion of LIBRA did not constitute fraud, despite the attention his support drew to the token.

NEWS_THEDEFIANT · INFO

Shaw Publishes Daos.fun Reconstruction, Claims Critical Flaw

The repository reports matching captured and rebuilt binaries. Daos.fun says it no longer maintains the platform, though existing tokens remain tradable.

NEWS_THEDEFIANT · INFO

Hyperliquid’s Yan and CME’s Duffy Split Over Who Must Bear US Compliance

Yan favors oversight of market deployers rather than the blockchain, while Hyperliquid’s interface still bars US-based users and VPN circumvention.

NEWS_COINDESK · INFO

Wells Fargo, Cisco, Marvell among latest firms objecting to OKXICE's tokenized stock plan

Six more companies have objected to listing tokenized versions of their stock on the venue, Reuters reported, bringing the total to 22.

NEWS_COINDESK · INFO

Bitcoin’s wealthy holders turning to loans and yield as investment habits mature: Xapo CEO

Borrowing against bitcoin and earning income to build their BTC holdings are becoming priorities for long-term investors, Xapo Bank CEO Seamus Rocca told CoinDesk.

NEWS_THEDEFIANT · INFO

API Key Rotation: What Revocation and Redeployment Actually Change

Scheduled replacement can let two keys overlap. Suspected exposure makes that overlap a security decision, not just a way to avoid downtime.

NEWS_DECRYPT · INFO

Hong Kong’s Biggest Bank Puts a Stablecoin in 3 Million Wallets

HSBC switched on its Hong Kong dollar stablecoin inside PayMe on Friday, testing whether a bank-issued token can become everyday money.

NEWS_COINDESK · INFO

U.S. Clarity Act failure gives Asia and Middle East a competitive edge, says Apex Group CEO

Apex Group CEO Peter Hughes warned that the failure of the U.S. Clarity Act will drive digital asset businesses toward faster-moving jurisdictions in Asia and the Middle East.

NEWS_THEHACKERNEWS · INFO

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Tracked as CVE-2026-111497, the flaw allows crafted compres

NEWS_THEHACKERNEWS · INFO

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. "On May 27, 2026, a configuration file was committed to the public LiteLLM

NEWS_THEHACKERNEWS · INFO

Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads

Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on their activity on other connected Google services. "You may choose to allow certain Google services, in

NEWS_THEDEFIANT · INFO

UNI Slides 29% in Four Weeks as Uniswap Liquidity Holds Steady

The token has underperformed bitcoin and ether, while Uniswap still holds about $4 billion in liquidity.

NEWS_THEHACKERNEWS · INFO

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have allowed an outsider to take over the machine. The updater belongs to Time4Popcorn, an abandoned copy of

NEWS_THEDEFIANT · INFO

Arthur Hayes Says He Sold Maelstrom’s Directional Book

Hayes-linked wallets transferred 8,000 ETH and six other tokens, contrasting with his Oct. 15 declaration that he was long Bitcoin and Ether.

NEWS_THEHACKERNEWS · INFO

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild. The critical-s