The clock is
already ticking.

US

FR

RU

CH

CA

AU

DE

2025-01-17 · EU

EU financial-sector firms must demonstrate operational resilience (incl. ICT third-party risk) — including cryptographic posture.

2025-12-31 · US-NSA

NSA target for new National Security Systems software & firmware to start adopting CNSA 2.0 (Kyber, Dilithium, SHA-2) algorithms.

2026-06-30 · DE-BSI

Annual BSI cryptographic-recommendation refresh — flagged deadline for hybrid (classical + PQC) roll-out in regulated DE.

2027-12-31 · US-NSA

Networking, VPN, and key-management products on NSS networks should fully support CNSA 2.0 algorithms.

2030-12-31 · US-NIST

NIST recommended sunset for classical public-key crypto in federal systems — full PQC migration target.

2033-12-31 · US-NSA

All NSS systems must be using CNSA 2.0 PQC algorithms exclusively.

@CISAgov

Reminder: NSA's CNSA 2.0 timeline is in effect. New software for NSS should now be adopting Kyber, Dilithium, and SHA-2.

@NIST

FIPS 203 (ML-KEM), 204 (ML-DSA) and 205 (SLH-DSA) are now the standards. Migration windows are short for high-value targets.

@matthew_d_green

Harvest-now-decrypt-later isn't a scenario, it's an active intelligence program. The ECDSA signatures you commit today are tomorrow's plaintext.

@hashedout

Bitcoin's quantum exposure isn't a 2040 problem. ~25% of circulating supply sits in P2PKH addresses with exposed pubkeys. Q-Day day-one targets.

@SchneierBlog

If your security architecture cannot survive the public release of CRYSTALS-Kyber breaks, you needed PQC yesterday.

@a16zcrypto

Wallet providers shipping PQC migration paths in 2026 will own the institutional custody narrative for the next decade.

NEWS_SECURELIST · INFO

How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia

Kaspersky GReAT experts discovered a new UEFI bootkit, BlackX. It exploits the Baton Drop vulnerability (CVE-2022-21894) and is similar to the BlackLotus bootkit.

NEWS_COINTELEGRAPH · INFO

Here’s what happened in crypto today

Need to know what happened in crypto today? Here is the latest news on daily trends and events impacting Bitcoin price, blockchain, DeFi, Web3 and crypto regulation.

NEWS_COINTELEGRAPH · INFO

Move over memecoins: Crypto ‘meme games’ coming, bagholders and all

“Plenty will be ponzis. Plenty will get exploited. Plenty will insta die. There will be ridiculous gains, and people will get absolutely f***ing rinsed,” says Illuvium co-founder Kieran Warwick.

NEWS_COINDESK · INFO

Solana’s biggest network change since 2020 is live. Here’s how users benefit

The new voting system targets settlement in about 150 milliseconds, potentially shortening waits for payments and deposits. Users can keep their existing wallets.

NEWS_DARKREADING · INFO

UAE Transitions 50% of Gov't Services to Agentic AI

The United Arab Emirates says it's creating a foundation of security and safety as it transforms its public service footprint.

NEWS_COINDESK · INFO

Bitcoin ETFs attract $1.08 billion in 3 days but it may not be enough for a steep rally

Past steep rallies ran on about $235 million a day of net inflows into ETFs. The funds are yet to match that pace, according to data analyzed by CoinDesk.

NEWS_COINDESK · INFO

XRP Ledger bug fix moved to November after validator support dipped for two hours

The fix lost its two-week countdown less than two days from the finish after support slipped to 26 of 35 validators. It’s now back at 31.

NEWS_THEHACKERNEWS · INFO

China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack

Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was made closed-source i

NEWS_THEDEFIANT · INFO

Matter Labs Introduces Prividium Commander for Existing Blockchains

Institutions can add application permissions without moving to Prividium Ledger, while retaining their existing custody and signing providers.

NEWS_COINDESK · INFO

Bitcoin gives back its run at $85,000 as Tesla and Meta fail to calm AI nerves

BTC broke through its $84,000 ceiling late Wednesday, then slid back to the $82,500 support analysts are watching as tech futures fell.

NEWS_THEDEFIANT · INFO

Developer Links $370,000 Theft to Railway Secrets Exposure

Railway restored Enterprise builds late Wednesday, while customers on other plans were still waiting to redeploy with replacement credentials.

NEWS_THEDEFIANT · INFO

Cloudflare CEO Reports Millions of PHP2Shell Exploit Attempts

PHP has shipped fixes for four supported branches. The flaws can let attackers run code on vulnerable web servers without logging in.

NEWS_THEDEFIANT · INFO

How Elliptic-Curve Signatures Work: A Toy ECDSA Example

A deliberately insecure curve makes the signing arithmetic small enough to follow. The verifier needs the message and public key, but neither signing secret.

NEWS_THEDEFIANT · INFO

Mastercard Crypto Credential, KYC, Travel Rule and Screening Compared

Identity checks, transfer-party information and blockchain risk alerts serve different purposes. Providers remain responsible for deciding whether a payment can proceed.

NEWS_THEDEFIANT · INFO

Pendle Expands One-Click Looping to Yield Assets and Tokenized Stocks

Stock longs on Base use Aave loans, while PendleLoop fees on non-PT positions are waived through Dec. 31.

NEWS_THEDEFIANT · INFO

Collector Crypt Reports Record $24.3 Million Day

Users opened 123,425 packs, while the reported gross receipts equaled roughly 13% of DefiLlama's trailing 30-day pack-sales total.

NEWS_THEDEFIANT · INFO

Aero Launches as Aerodrome and Velodrome Merge Across Seven Chains

The combined exchange went live across seven networks, with VELO converting at 0.044 AERO and locked positions becoming sAERO

NEWS_COINTELEGRAPH · INFO

PHP Foundation admits ‘structural failure’ delayed critical security fix

Government websites and online services were disrupted after concerns about a PHP bug that could allow attackers to take control of vulnerable servers.

NEWS_THEDEFIANT · INFO

A Wallet Three Hours Old Minted Kimchi's Coin and Routed Every Fee to One Address

The deployer bought 79% of the supply for about $9,300 and named a single address the permanent, unchangeable recipient of every creator fee the coin will ever pay. Pump.fun's own profile page titles that address “Kimchi”

NEWS_THEDEFIANT · INFO

Obol Urges Immediate Charon Upgrade After CA Key Compromise

The patch updates certificate checks in Go. Obol's mainnet cluster balances totaled 422,862 ETH in its latest daily snapshot.

NEWS_THEDEFIANT · INFO

Railway Urges All Users to Rotate Secrets After Security Incident

Deployments remain paused, preventing customers from updating applications with replacement credentials.

NEWS_CYBERSCOOP_ME · INFO

Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group

Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said. The post Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group appeared first on CyberSc

NEWS_COINTELEGRAPH · INFO

American Bankers Association: OCC’s GENIUS rules ‘undermine’ US Congress

Banking advocacy organizations are pushing back against the OCC’s finalized rules on a stablecoin law, arguing against changes to provisions on yield.

NEWS_DECRYPT · INFO

Ken Griffin Says AI Is 'Almost Certainly' in a Bubble—And Compares GPUs to Airline Seats

Citadel's founder says investors are almost certainly in an AI bubble, warns a chip glut could crash prices like empty airline seats, yet expects the survivors to lead for decades.

NEWS_THEDEFIANT · INFO

eMudhra's Weak Certificate Keys Prompt Emergency Trust Updates

One recovered private key was just 4. The company says the flaw went undetected through two independent audit cycles.

NEWS_DARKREADING · INFO

TiDB Breach Exposes Flawed Cloud Security Assumptions

Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.

NEWS_THEDEFIANT · INFO

Matter Labs Debuts Prividium Commander For Institutions

The control plane for bank digital-asset operations is generally available at launch. Its revenue goes to Matter Labs, not ZKsync tokenholders, CEO Alex Gluchowski told The Defiant.

NEWS_BITCOINMAG · INFO

Three Companies Have Notified the SEC of Intention To Start Tokenized Stocks Trading

Bitcoin Magazine Three Companies Have Notified the SEC of Intention To Start Tokenized Stocks Trading The Securities and Exchange Commission is taking applications from companies wanting to list tokenized stocks. This post Three Companies Have Notified the SEC of Intention To Start Tokenized Stocks

NEWS_THEDEFIANT · INFO

Mastercard Opens AI Machine-Payment Pilot to Developers

Buyer- and seller-side APIs, a toolkit and a sandbox extend developer testing, while Agent Pay for Machines remains a noncommercial pilot.

NEWS_THEDEFIANT · INFO

Vantage and Rio Bank Use Tokenized Deposits for Loan Payment on Ethereum

Participate says principal and interest reached the receiving bank’s wallet in under three minutes, with loan balances and notices updated alongside the payment.