A new open-source cyber-defense system called Aegis has been deployed in production, using NIST-standardized post-quantum cryptography to protect network services against both current and quantum-era …
The disclose.io Upcoming Dates page is now live, providing a community-maintained calendar tracking policy deadlines, regulations, conferences, and legislation affecting vulnerability disclosure and s…
The industry is transforming Non-Human Identity (NHI) to reduce attack surfaces by replacing vulnerable credentials like passwords and API keys with public-private key pairs and rapid rotation. Emergi…
OpenAI has released a policy document calling for mandatory pre-deployment safety evaluations of powerful AI models, a stricter stance than the Trump Administration's voluntary framework outlined in a…
Let's Encrypt announced plans to adopt Merkle Tree Certificates (MTCs) as a post-quantum authentication method for the Web PKI, aiming to protect against future quantum computer threats without slowin…
Chinese AI startup DeepSeek permanently slashed prices on its flagship V4 Pro model by 75%, undercutting Western rivals like Anthropic's Claude Sonnet and OpenAI's GPT 5.5-Med by up to 17x on outputs.…
A comprehensive evaluation of 14 open-source safety guard models on a benchmark of 79,331 samples found that Qwen Guard, a 4-billion-parameter model, achieved the highest recall at 83.97%, while large…
Snyk released an experimental CLI experience for its Remediation Agent, designed to fix software composition analysis (SCA) issues at scale by combining frontier AI models with Snyk's security intelli…
Organizations deploying AI agents face critical governance failures when they fail to establish separate identities, delegation models, and permission boundaries for those agents. Without a dedicated …
Geordie AI's $30 million Series A funding signals that enterprise adoption of agentic AI is outpacing security controls, creating a new crisis for platform engineers in 2026. Autonomous AI agents that…
Microsoft's Work Trend Index and NIST's AI RMF argue that AI should augment rather than replace knowledge management, with trustworthy systems requiring explicit roles and oversight. Practical workflo…
Post-quantum cryptography (PQC) is transitioning from research to practical implementation in embedded and IoT systems, affecting secure boot, TLS, OTA updates, and firmware signing. NIST has finalize…
The article explains that JSON Web Tokens (JWTs) signed with current algorithms like RS256 and ES256 are vulnerable to future quantum computer attacks, with nation-state actors already employing "harv…
The article describes five algorithms for computing factorials, including a recursive "product tree" method and the "PrimeSwing" algorithm, which relies on the prime factorization of swinging factoria…
AI governance and compliance problems are escalating as companies deploy AI across customer service, fraud detection, and other critical workflows, revealing that governance remains a policy exercise …
The article describes a single-character logic bug discovered in OpenSSL version 4.0.0's implementation of the SLH-DSA post-quantum signature algorithm. The bug occurs in the `slh_dsa_sign()` function…