The clock is
already ticking.

US

CH

FR

RU

CA

IN

AU

2025-01-17 · EU

EU financial-sector firms must demonstrate operational resilience (incl. ICT third-party risk) — including cryptographic posture.

2025-12-31 · US-NSA

NSA target for new National Security Systems software & firmware to start adopting CNSA 2.0 (Kyber, Dilithium, SHA-2) algorithms.

2026-06-30 · DE-BSI

Annual BSI cryptographic-recommendation refresh — flagged deadline for hybrid (classical + PQC) roll-out in regulated DE.

2027-12-31 · US-NSA

Networking, VPN, and key-management products on NSS networks should fully support CNSA 2.0 algorithms.

2030-12-31 · US-NIST

NIST recommended sunset for classical public-key crypto in federal systems — full PQC migration target.

2033-12-31 · US-NSA

All NSS systems must be using CNSA 2.0 PQC algorithms exclusively.

@CISAgov

Reminder: NSA's CNSA 2.0 timeline is in effect. New software for NSS should now be adopting Kyber, Dilithium, and SHA-2.

@NIST

FIPS 203 (ML-KEM), 204 (ML-DSA) and 205 (SLH-DSA) are now the standards. Migration windows are short for high-value targets.

@matthew_d_green

Harvest-now-decrypt-later isn't a scenario, it's an active intelligence program. The ECDSA signatures you commit today are tomorrow's plaintext.

@hashedout

Bitcoin's quantum exposure isn't a 2040 problem. ~25% of circulating supply sits in P2PKH addresses with exposed pubkeys. Q-Day day-one targets.

@SchneierBlog

If your security architecture cannot survive the public release of CRYSTALS-Kyber breaks, you needed PQC yesterday.

@a16zcrypto

Wallet providers shipping PQC migration paths in 2026 will own the institutional custody narrative for the next decade.

NEWS_DECRYPT · INFO

Israel's Central Bank Rebukes Netanyahu Plan to Use Crypto to Dodge Sanctions

Over 100 economists, including former governor Jacob Frenkel, warned of deeper isolation ahead of Israel's October 27 national election.

NEWS_COINDESK · INFO

Bitcoin holds near $80,000 as oil retreats and the Fed decision looms

Bitcoin was little changed near $80,400 since midnight UTC while the DeFi index was the only CoinDesk index to gain, with the Fed due to decide on Wednesday.

NEWS_THEHACKERNEWS · INFO

Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses

Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection and response (NDR) platform, connects individual alerts into one timeline, and it feeds the defensive systems that can tie all even

NEWS_COINDESK · INFO

Live news: Bitcoin barely holding $80,000 ahead of Fed on Wednesday, tech earnings this week

Brazilian stocks are expected to plunge at the open as President Luiz Inácio Lula da Silva unexpectedly secured a fourth term in office.

NEWS_COINTELEGRAPH · INFO

BTC price risks $80K loss into FOMC, earnings: Three things to know in Bitcoin this week

Bitcoin bulls fought for $80,000 support over the weekend ahead of a heavy week of US tech earnings and inflation data.

NEWS_COINDESK · INFO

Calpers pulls back from big tech as AI jitters deepen neocloud sell-off

California’s pension fund shifts toward private equity as investors question tech valuations and the payoff from soaring AI spending.

NEWS_COINTELEGRAPH · INFO

Securitize’s tokenized stock value halves as Circle widens lead

SECZ’s onchain market cap fell to $208.6 million as Circle-linked tokens reached a combined $383.6 million across several issuers in the $3.3 billion tokenized equities market.

NEWS_SECURITYWEEK · INFO

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution. The post Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages appeared first on SecurityWeek .

NEWS_INFOSECURITY · INFO

Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database

Blue Initiative launches a new vulnerability database for IT and OT CVEs relevant to the maritime industry

NEWS_SECURELIST · INFO

Deploying AI agents securely: how Kaspersky products mitigate AI threats

We look at best practices for deploying AI tools securely in corporate environments, with Kaspersky Security Center and Kaspersky Endpoint Security as examples. We also cover ways that EDR and TIP can detect AI agents.

NEWS_THEHACKERNEWS · INFO

uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts

A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the official app stores, or who run WeChat inside the

NEWS_THEDEFIANT · INFO

Blast Reaches Withdrawal Interface Deadline With $40 Million Still in Bridge

Blast has published contract-level exit guides, but withdrawals still require proofs, a one-day wait and, for USDB, a separate DAI claim.

NEWS_INFOSECURITY · INFO

PHP Publishes Mitigation Advice for New RCE Flaw

PHP warns of critical RCE vulnerability CVE-2026-115560, but says limited exploit conditions mean most deployments are unlikely to be affected

NEWS_COINDESK · INFO

Fed, ECB and BOJ interest-rate decisions, Coinbase earnings: Crypto Week Ahead

Your look at what's coming in the week starting Oct. 26.

NEWS_SECURITYWEEK · INFO

Mythos 5 Ignored Real-World Harm in July Attack

The model engaged in severe overreach and dishonesty, creating fake identities and submitting malicious code on GitHub. The post Mythos 5 Ignored Real-World Harm in July Attack appeared first on SecurityWeek .

NEWS_THEDEFIANT · INFO

Consensys Warns Ethereum Operators of eMudhra Signing Risks

The teams identify vulnerable Java trust stores and configuration-dependent exposure. Default setups are unaffected, while some Web3Signer deployments need immediate access-control changes.

NEWS_THEHACKERNEWS · INFO

Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations

Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between Ju

NEWS_COINTELEGRAPH · INFO

Bitcoin ETFs break 2-week outflow streak with $301M comeback

US spot Bitcoin ETFs finished the week with $301 million in net inflows after a strong three-day start gave way to heavy withdrawals.

NEWS_THEHACKERNEWS · INFO

Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs

An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to 

NEWS_COINDESK · INFO

Over 11 million bitcoin has no known owner. Here's what it means

The large number of coins held in unidentified wallets shows that retail investors have been in this market for years, observers said. But this interpretation comes with a caveat.

NEWS_THEHACKERNEWS · INFO

Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and stopped the

NEWS_COINTELEGRAPH · INFO

Here’s what happened in crypto today

Need to know what happened in crypto today? Here is the latest news on daily trends and events impacting Bitcoin price, blockchain, DeFi, Web3 and crypto regulation.

NEWS_COINDESK · INFO

India's largest crypto exchange absorbs $16 million loss from internal process failure tied to retired wallet

The Mumbai-based exchange initially dismissed reports of suspicious outflows as a false alarm. It now says it lost $16 million and will absorb the loss.

NEWS_COINDESK · INFO

Bitcoin wallet bug let rogue servers steal funds when users tried to speed up payments

Attackers replaced legitimate transactions with fake ones, then waited for users to approve higher fees. At least one person lost bitcoin before developers patched the flaw.

NEWS_COINTELEGRAPH · INFO

Musk warns over 200 AI neoclouds face ‘guppy-level death’

The warning comes as Gartner forecasts that more than 80% of specialist cloud providers will cease operating independently by 2030.

NEWS_COINDESK · INFO

Bitcoin slips under $80,000 as traders de-risk ahead of Fed meeting

Ether and XRP led losses among the majors as the AI trade took another hit in Asia, where Goldman Sachs cut its Kospi target by 25%.

NEWS_THEDEFIANT · INFO

Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys

Recipients reported personal and purchase details in the messages; the company said Passport hardware and funds were safe.

NEWS_COINTELEGRAPH · INFO

Hong Kong names Nasdaq-listed Solana Company a strategic enterprise

The Nasdaq-listed firm said it plans to establish Solana validator operations in Hong Kong.

NEWS_COINDESK · INFO

Elon Musk issues a warning for 'AI neoclouds' as SpaceX borrows $40 billion for chips

SpaceX has raised $40 billion in debt to buy GPUs, while Musk predicts a major shakeout among smaller AI cloud providers.

NEWS_COINTELEGRAPH · INFO

Keystone says website breach exposed hardware wallet buyers’ addresses

A security researcher warned that the leaked shipping details could expose crypto holders to targeted scams and physical attacks.