OpenSSL fixed HollowByte after 11-byte TLS requests could strand memory on glibc systems, but shipped no CVE, advisory, or changelog note.

Post-quantum encryption candidate HAWK collapsed July 29 after Anthropic AI found a fatal mathematical flaw in 60 hours, ...

For most of the last decade, cryptographic compliance sat quietly in the background. Organizations picked FIPS-validated modules, answered a few questions ...

Post-quantum cryptography readiness now has its first quantitative benchmark: the Crypto-Agility Readiness Score, calibrated ...

Traefik Labs today introduced the Distro Zero image, a hardened, vendor-supported secure runtime delivered as Traefik Hub in proxy mode. It gives platform and security teams a container whose entire ...

Our audit of Windows VPNs uncovers a graveyard of old OpenVPN configurations, with more than 50% of apps using versions over ...

The Transport Layer Security (TLS) protocol is one of the most widely-used security protocols in use today, protecting the information exchanged between web clients and servers all around the world.

Abstract: Double-authentication-preventing signatures (DAPS) are signatures designed with the aim that signing two messages with an identical first part (called address) but different second parts ...

This recap covers exploited flaws, exposed systems, malware campaigns, weak defaults, and the security gaps demanding ...

On April 7, 2026, Anthropic announced Project Glasswing, which would provide select organizations with early access to their new Claude Mythos Preview ...

Oracle’s July 2026 Critical Patch Update, its largest ever, contains 1,449 new security patches spanning 32 product families, ...

In .NET 10.0, there are three methods for Post-Quantum Cryptography (PQC). However, Microsoft deliberately omits another FIPS algorithm. 203 ML-KEM (CRYSTALS-Kyber) Key exchange for AES etc.