NSA has moved its post-quantum deadline for National Security Systems to 2027, two years ahead of Cloudflare, Google and Microsoft, a dev.to post reports. That account is secondhand, so whether suppliers to those systems have to re-plan their migrations depends on what the agency's own statement says.
Reality
- Evidence15
- Adoption
- Insufficient
- Hype gap+55
- Incentives
- Insufficient
- Confidence30
CISA and six partner agencies updated AA26-097A on July 22, extending the vendor scope beyond Rockwell and adding detection guidance for tampered reusable code modules.
Perspective Coverage
12 publishers
- Builder
- Builder 29%
- Operator
- Operator 60%
- Investor
- Investor 11%
Reality
- Evidence60
- Adoption
- Insufficient
- Hype gap+30
- Incentives45
- Confidence58
Five US agencies report attackers scanning for exposed S7 PLCs and using a public library to read and write data blocks. The mitigation list reads like a commissioning checklist.
Publishers:sans.org · scworld.com Reality
- Evidence50
- Adoption
- Insufficient
- Hype gap+40
- Incentives
- Insufficient
- Confidence60
The G7 Cyber Security Working Group's June call to action says the quantum threat is off the radar and under-resourced at most organizations, and it hands CISOs the wording to fund a cryptographic inventory this cycle.
Perspective Coverage
5 publishers
- Builder
- Builder 22%
- Operator
- Operator 55%
- Investor
- Investor 23%
Reality
- Evidence72
- Adoption30
- Hype gap+10
- Incentives60
- Confidence68
The conduct described is authorised API traffic at scale rather than an intrusion, the detection asked for is billing telemetry providers already hold, and on Beijing's role the advisory goes no further than likely government awareness.
Perspective Coverage
8 publishers
- Builder
- Builder 30%
- Operator
- Operator 50%
- Investor
- Investor 20%
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+20
- Incentives55
- Confidence60
Y Combinator's chief said he would do nothing about model distillation, two days after the NSA, FBI and CISA accused six Chinese firms of doing it at scale. Every defence the agencies recommend is the providers' own work.
Publishers:defenseone.com · implicator.ai Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+15
- Incentives70
- Confidence58
A classified assessment completed last year found that no foreign adversary successfully interfered in 2024, and that Russia, Iran and China each ran influence campaigns anyway. Congressional sources say the probing of election systems has not stopped.
Reality
- Evidence48
- Adoption35
- Hype gap−5
- Incentives62
- Confidence55
Team Cymru has handed the relay IP addresses to the affected AI providers, but the count it confirmed grew roughly sevenfold while it was still scanning, and the software running on most of those hosts is a public GitHub project.
Reality
- Evidence55
- Adoption70
- Hype gap+22
- Incentives65
- Confidence50
Australia's ASD ACSC wrote the guidance with CISA, the NSA, Canada's CCCS and the British and New Zealand cyber centres, pairing the 17 most common Active Directory compromise techniques with mitigations.
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap+12
- Incentives40
- Confidence66
Joint advisory AA26-231A describes threat actors feeding internet-scan results into AI tools that emit working python-snap7 clients against Siemens S7 controllers. Siemens says the weakness is configuration, not a new vulnerability.
Reality
- Evidence58
- Adoption28
- Hype gap+12
- Incentives45
- Confidence55
Five US agencies told PLC owners that scanners are finding exposed Siemens S7 controllers. ZoomEye puts that surface at 173 assets by product fingerprint, or 161,764 by open port.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+5
- Incentives40
- Confidence55
A year on from the CISA and NSA memory-safety report, the adoption evidence is still provider roadmaps and practitioner judgement about C and C++ code that nobody proposes to rewrite wholesale.
Reality
- Evidence45
- Adoption35
- Hype gap+20
- Incentives70
- Confidence50
Google's threat intelligence group logged that case in the second quarter of 2026, in the same report that counts distillation runs of more than 100 million prompts against its own generation models. Both started with compromised accounts.
Reality
- Evidence58
- Adoption62
- Hype gap+15
- Incentives72
- Confidence60
Anthropic's CEO asked labs and governments to slow capability gains so safety work can catch up. Beijing called that fearmongering and a Cold War playbook. Trump said the US is ahead and whoever wins AI wins.
Reality
- Evidence64
- Adoption12
- Hype gap+34
- Incentives82
- Confidence61
Dario Amodei published a chip-export ask on Saturday. By Monday, China's commerce ministry was answering it in the language it normally reserves for Washington. State media gathered three researchers to make the case.
Reality
- Evidence45
- Adoption30
- Hype gap+10
- Incentives78
- Confidence50
Gen. Joshua Rudd told the NSA workforce this month to rebuild around China, cyber, AI, combat support and global intelligence. Where the Cybersecurity Collaboration Center lands in that map is undecided.
Reality
- Evidence42
- Adoption20
- Hype gap+15
- Incentives58
- Confidence50
Buyers of $3bn of Z.ai paper accepted yields as low as minus 0.5 percent, roughly $15m a year on that size, in exchange for a conversion price only about an eighth above the last close before the placement.
Reality
- Evidence64
- Adoption58
- Hype gap+12
- Incentives66
- Confidence60
Google said faster progress in quantum hardware and error correction moved its migration to 2029. A Caltech, Berkeley and Oratomic paper published the same month put the qubits needed for Shor's algorithm as low as 10,000.
Reality
- Evidence38
- Adoption20
- Hype gap+38
- Incentives72
- Confidence45
CISA's advisory describes a mechanism, not a vulnerability: commercial scanners find the exposed PLC, and the agencies say AI tooling closes the distance from found to controlled.
Reality
- Evidence55
- Adoption30
- Hype gap+35
- Incentives45
- Confidence60
American agencies say six Chinese labs bought bulk subscriptions to US models and trained on the outputs since 2024. Enterprise buyers are meanwhile paying a fifth as much for models that clear most of their engineering work.
Reality
- Evidence45
- Adoption55
- Hype gap+25
- Incentives70
- Confidence45
Earlier coverage
- The QScan seizure turns 390 indicators into a years-deep log review for banks
Invest · August 28, 2026 · 2 publishers
- NIST sets 2030 and 2035 retirement dates for quantum-vulnerable algorithms, raising stakes for banks
Leadership · September 11, 2026 · 1 publisher
- Three U.S. agencies name six China-based AI companies as distilling frontier models
Science · September 10, 2026 · 1 publisher
- Garry Tan relocates AI's moat from the model weights to the price list
Invest · September 10, 2026 · 1 publisher
- NSA, CISA and FBI ask providers to quietly route suspected distillers to weaker models
Build · September 10, 2026 · 2 publishers
- CISA, NSA and FBI warn US AI firms of industrial-scale distillation by Chinese companies
Product · September 9, 2026 · 1 publisher
- Three US agencies advise AI providers to quietly degrade answers for suspected distillers
Product · September 9, 2026 · 1 publisher
- NSA advisory tells AI providers to subtly degrade answers for suspected distillation accounts
Security · September 8, 2026 · 1 publisher
- CISA tells OT owners to classify every asset by function and criticality
Security · September 7, 2026 · 1 publisher
- A presidential memo licenses private companies to hack cybercrime groups for DHS
Security · September 3, 2026 · 1 publisher
- A Chinese state contractor rented its concealment from a commercial consumer proxy service
Security · September 2, 2026 · 1 publisher
- Lieu and Moran's kill switch bill hands CISA a shutdown path into frontier AI labs
Security · August 31, 2026 · 2 publishers
- DOJ downgraded its hacking victims to targets two days after the headlines ran
Product · August 31, 2026 · 1 publisher
- FBI names Nanjing contractor behind 300-victim Check Point Quantum Gateway campaign
Security · August 27, 2026 · 1 publisher
- NSA is holding a reunion for its ex-hackers, and the guest list lives in a Signal group
Security · August 26, 2026 · 1 publisher
- CISA, NSA and MS-ISAC: ScreenConnect and AnyDesk ran as portable backdoors on federal networks
Security · August 24, 2026 · 1 publisher
- Harvest now, decrypt soon: post-quantum migration is a funded program, not a research topic
Leadership · August 21, 2026 · 1 publisher
- After Arup, a face on a video call is not a credential
Product · August 21, 2026 · 1 publisher
- Insurers war-gamed 5,000 water utilities going down at once. That is a correlation problem.
Product · August 20, 2026 · 1 publisher
- AI-written snap7 scripts move the scarce resource in OT attacks from skill to exposure
Build · August 19, 2026 · 2 publishers
- Proton's Yen stops refusing AI and ships Lumo, moving the privacy fight to terms
Product · August 18, 2026 · 1 publisher
- White House lets vetted firms hack back and leaves liability blank for 60 days
Product · August 18, 2026 · 1 publisher
- Gunra Goes Franchise: Conti's Leaked Code Now Ships With a Builder and an Affiliate Panel
Security · August 15, 2026 · 2 publishers