News feed
Topics
9 items
Analysis · Security
Key exchange got the headlines. Now Chrome and Windows must move certificates to ML-DSA, and every signature is a kilobyte-plus payload. Here is why the trust chain is the hard part.
Analysis · Security
Medical records and genomes must stay secret for decades, but the RSA and ECC keys guarding them won't last. Why healthcare is the sector most exposed to harvest-now, decrypt-later attacks.
Analysis · Security
Signal and Apple's iMessage already swap post-quantum keys in your chats. Here is how PQXDH, SPQR and PQ3 handle the problem asynchronous messaging creates, and what they still leak.
Analysis · Security
Your browser may already use quantum-resistant key exchange. Here is how hybrid X25519 and ML-KEM rolled out across Chrome, Cloudflare, and OpenSSH, and what broke along the way.
Analysis · Security
We gave AI the keys to our browsers and email clients. Now, self-replicating prompt injection worms are hijacking autonomous agents without a single human click.
Analysis · Security
A multi-year social engineering campaign almost compromised the global Linux infrastructure. Here is why unpaid maintainers are the internet's biggest vulnerability.
Analysis · Security
The global CrowdStrike outage proved that giving third-party vendors Ring 0 access is a catastrophe. Here is how Microsoft plans to rewrite Windows security and lock them out.
Analysis · Security
Quantum computers are coming for our encryption. NIST just finalized the post-quantum algorithms to save the internet, but the migration will be a monumental headache.
Analysis · Security
Passwords are a 60-year-old band-aid on a bleeding wound. Enter FIDO2 and passkeys: the biometric, cryptographic revolution that is finally killing the password—while quietly locking you into a new ecosystem.