Cryptography

M6PLUS Bluetooth protocol lacks replay protection; POC released for CVE-2026-4583.

Seven vulnerabilities patched in OpenSSL, including moderate-severity data leakage flaw.

Android security updates patch critical DoS flaw and high-severity StrongBox keystore vulnerability.

Hong Kong police gain power to force encryption key disclosure under National Security Law.

Hong Kong police gain legal power to compel encryption key disclosure.

SparkCat malware variant found on iOS and Android app stores steals crypto wallet recovery phrases.

REF1695 operation deploys RATs and crypto miners via ISO file lures since November 2023.

Google commits to quantum-safe cryptography migration by 2029.

Google accelerates post-quantum cryptography migration to 2029 amid faster quantum computing progress.

Weekly threat roundup covers PQC migration, AI vuln hunting, Sandworm backdoors, crypto wallet scams, and phishing kits.

Google accelerates post-quantum encryption migration timeline from 2035 to 2029.

Torg Grabber infostealer malware targets 728 crypto wallets and 850 browser extensions.

GlassWorm malware evolves with Solana dead drops, RAT, and hardware wallet phishing.

Fake OpenClaw token giveaway phishing campaign targets GitHub developers to drain crypto wallets.

Phishing campaign targets French enterprises with fake resumes to deploy crypto miners and credential stealers.