The clock is
already ticking.

US

RU

CH

CA

IL

PH

AR

2025-01-17 · EU

EU financial-sector firms must demonstrate operational resilience (incl. ICT third-party risk) — including cryptographic posture.

2025-12-31 · US-NSA

NSA target for new National Security Systems software & firmware to start adopting CNSA 2.0 (Kyber, Dilithium, SHA-2) algorithms.

2026-06-30 · DE-BSI

Annual BSI cryptographic-recommendation refresh — flagged deadline for hybrid (classical + PQC) roll-out in regulated DE.

2027-12-31 · US-NSA

Networking, VPN, and key-management products on NSS networks should fully support CNSA 2.0 algorithms.

2030-12-31 · US-NIST

NIST recommended sunset for classical public-key crypto in federal systems — full PQC migration target.

2033-12-31 · US-NSA

All NSS systems must be using CNSA 2.0 PQC algorithms exclusively.

@CISAgov

Reminder: NSA's CNSA 2.0 timeline is in effect. New software for NSS should now be adopting Kyber, Dilithium, and SHA-2.

@NIST

FIPS 203 (ML-KEM), 204 (ML-DSA) and 205 (SLH-DSA) are now the standards. Migration windows are short for high-value targets.

@matthew_d_green

Harvest-now-decrypt-later isn't a scenario, it's an active intelligence program. The ECDSA signatures you commit today are tomorrow's plaintext.

@hashedout

Bitcoin's quantum exposure isn't a 2040 problem. ~25% of circulating supply sits in P2PKH addresses with exposed pubkeys. Q-Day day-one targets.

@SchneierBlog

If your security architecture cannot survive the public release of CRYSTALS-Kyber breaks, you needed PQC yesterday.

@a16zcrypto

Wallet providers shipping PQC migration paths in 2026 will own the institutional custody narrative for the next decade.

NEWS_THEDEFIANT · INFO

eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up

eToro has become a strategic investor in Extended, an onchain perpetual futures exchange, and said the round begins a partnership with Zengo, the self-custody wallet eToro acquired earlier this year. Neither company disclosed the investment size.

NEWS_THEDEFIANT · INFO

BitMine Adds $73 Million in ETH, Pushing Holdings to 4.8% of Supply

BitMine Immersion Technologies (NYSE: BMNR), the Ethereum treasury company chaired by Fundstrat's Tom Lee, bought 42,197 ETH worth roughly $73 million over the past week, according to the company's own holdings update posted Monday. The purchase lifts BitMine's total to 5,742,237 ETH, about 4.8% of…

NEWS_THEDEFIANT · INFO

Tether's Former CIO Heathcote Plans to Sell Equity Stake

Richard Heathcote, who until earlier this year served as Tether Holdings SA's chief investment officer, is planning to sell a small stake in the stablecoin issuer, Bloomberg reported Monday, citing people familiar with the matter. Heathcote is working with investment bank PJT Partners to sell part…

NEWS_THEDEFIANT · INFO

NEAR Governance Votes to Scrap Developer Gas Rebate

NEAR's on-chain governance body, House of Stake, passed proposal HSP-027 to eliminate the protocol's developer gas rebate, a change that will send all network gas fees to be burned rather than partly rebated to smart-contract owners. NEAR co-founder Illia Polosukhin confirmed the outcome Monday,…

NEWS_THEDEFIANT · INFO

EDX Markets Closes $76M Series C Led by SBI Holdings

EDX Markets, an institutional-only crypto trading venue with its own central clearinghouse, closed a $76 million Series C funding round led by SBI Holdings, the firm said in a press release. The Tokyo-listed financial group becomes a strategic investor in the U.S. exchange. The capital will fund…

NEWS_COINDESK · INFO

Bitcoin, ether steady, gold slides as US-Iran tensions escalate again

Oil climbed for a third day and gold fell for a fourth while bitcoin is up 1.6% on the week.

NEWS_THEHACKERNEWS · INFO

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead. The affected tools are

NEWS_COINTELEGRAPH · INFO

AI boom fuels inflation fears, complicating Fed’s next rate move

Ongoing strong demand for AI infrastructure “would likely sustain upward pressure on prices for technology products and electricity,” Federal Reserve policymakers said.

NEWS_THEHACKERNEWS · INFO

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains. The activity dates back to at least August 2022, according to DN

NEWS_COINTELEGRAPH · INFO

Crypto VC Paradigm raises $1.2B to push into AI

Crypto venture firm Paradigm is widening its investment gaze toward AI and other frontier industries with its latest fund.

NEWS_COINTELEGRAPH · INFO

Mark Cuban-backed DeFi dashboard Zapper shutters after 7 years

Zapper provided crypto market data to over 2 million monthly active users and oversaw more than $13 billion in processed transactions during its peak.

NEWS_COINTELEGRAPH · INFO

Crypto could benefit if Fed steps in to backstop US stock market: Analysts

The size and scope of the US stock market “gives policymakers a strong incentive to backstop major drawdowns,” said Bitget Wallet COO, Alvin Kan.

NVD · HIGH

CVE-2026-15137 · CVSS 7.3

A weakness has been identified in code-projects Interview Management System 1.0. This vulnerability affects unknown code of the file \inc\classes\View.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the publ

NVD · HIGH

CVE-2026-15135 · CVSS 7.3

A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file /edit_food_items.php. The manipulation of the argument update results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the publi

NVD · HIGH

CVE-2026-15134 · CVSS 7.3

A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/index.php. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from remot

NEWS_DECRYPT · INFO

The New Grok 4.5 Is Out. Elon Musk Says It Competes With Last Year's Claude Opus

SpaceXAI's new coding model is cheaper and faster than Anthropic and OpenAI's flagships—and by Musk's own account, at least one generation behind them.

NEWS_COINTELEGRAPH · INFO

Bitcoin tumbles back to key $60K support level: What’s behind the sell pressure?

Bitcoin faces renewed sell pressure amid an oil price surge, Japan economic contagion risks and a fresh round of selling from Strategy.

NEWS_DARKREADING · INFO

Mexico's New Cyber Plan Faces Its First Real Test

The Latin American nation's cybersecurity plan — still in the expansion phase — has to survive its own knockout round during the FIFA World Cup.

NEWS_BITCOINMAG · INFO

Bitcoin Slips to $62,000, Paring Rebound as CryptoQuant Sees Room Higher

Bitcoin Magazine Bitcoin Slips to $62,000, Paring Rebound as CryptoQuant Sees Room Higher Bitcoin slipped to around $62,000 after rebounding from last week's $57,700 low, while CryptoQuant says improving demand, seasonality and valuation support further gains, though its bearish Bull Score Index sug

NVD · HIGH

CVE-2026-60105 · CVSS 8.6

Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an incomplete IP blocklist check in the isBlockedIP() function, which fails to detect embedded IPv4 addresses within IPv4-mapped IPv6 addresses. An unauthenticated attacker can obtai

NVD · HIGH

CVE-2026-58525 · CVSS 8.2

Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

GHSA · HIGH

GHSA · pip/serena-agent · CVE-2026-49471

Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

GHSA · HIGH

GHSA · maven/nl.nl-portal:taak · CVE-2026-49464

NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak

GHSA · MEDIUM

GHSA · maven/nl.nl-portal:documenten-api · CVE-2026-49463

NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries

NEWS_DECRYPT · INFO

Paradigm Raises $1.2 Billion Fund as Crypto VC Pushes Further Into AI

The investment firm said its fourth fund will back AI, robotics, and crypto startups as it broadens beyond digital assets.

NEWS_DARKREADING · INFO

Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours

The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer.

GHSA · LOW

GHSA · npm/waku · CVE-2026-49456

Waku has an Open Redirect via `unstable_redirect` Helper

NEWS_COINTELEGRAPH · INFO

Tokenized stock transfers surge 105% in a month to $8.4B

Industry data shows trading activity and market value accelerating as crypto companies and traditional financial institutions expand tokenized equity initiatives.

GHSA · MEDIUM

GHSA · npm/waku · CVE-2026-49455

Waku: Cross-Origin CSRF on RSC Server Action Dispatch

GHSA · CRITICAL

GHSA · go/github.com/BishopFox/joro · CVE-2026-53649

Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE