Security

So a 1978 cryptosystem just quietly became an international standard, and most of us missed it. On July 15, UK firm Post-Quantum announced that Classic McEliece is now part of...

Picture a quantum computer big enough to forge the signature on google.com's certificate. It doesn't exist yet. When it does, every RSA and elliptic-curve cert on the web turns into...

Proton shipped Lumo 2.0 on June 30, and the headline writes itself: a private ChatGPT alternative, built in Europe, that got a lot smarter overnight. The interesting question is the...

For a few days in June 2026 the internet was sure an AI had hacked the NSA. Claude Mythos, Anthropic's frontier model, supposedly walked into nearly all of the agency's...

The headlines made it sound like every Linux PC turns into a brick on 27 June 2026, the day Microsoft's 2011 Secure Boot certificate expires. It doesn't. If your machine...

Two critical nginx holes, CVE-2026-42530 and CVE-2026-42055, both rated 9.2, dropped in June 2026, and the coverage made it sound like every nginx on earth was on fire. It wasn't....

Spin up a fresh VPS and check the auth log an hour later. It's already full of bots hammering SSH, which is why we lock a new box down before...

Still typing a password every time you SSH into a box? One command ends that: ssh-keygen -t ed25519, then Enter to accept the default path and a passphrase when it...

Someone on your team pastes a production JWT into the group chat and half the room shrugs, because it's encrypted anyway, right? It isn't. A standard JWT is encoded and...

Eight random characters. That's all that stands between a stolen database and your account, and a single modern GPU rig chews through it in under two hours. Stretch it to...