Jamf Threat Labs found a PamStealer build that completes a server key exchange before its macOS payload decrypts, so captured samples cannot be recovered offline. It also layers four persistence methods and a Swift stealer that harvests keychains and credentials from 13 browsers.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+5
- Incentives
- Insufficient
- Confidence62
Cloudflare reports origin handshake retries falling by a factor of fourteen, though its own 30% miss rate cannot produce a 52% baseline. What does transfer is post-quantum key agreement arriving with nobody configuring it.
Reality
- Evidence50
- Adoption60
- Hype gap+25
- Incentives70
- Confidence60
Checkmarx found that indexed-btree declares no lifecycle hooks and starts its loader when application code calls set() with key 100. The loader reads its C2 address from a smart contract on Ethereum Sepolia.
Reality
- Evidence58
- Adoption38
- Hype gap+18
- Incentives62
- Confidence57
Probing each origin for its preferred key agreement group dropped HelloRetryRequests on scanned origins from about 52% to 3.7% and took more than 150 ms off p90 handshakes, after the price of the old classical-first default had climbed 25-fold since 2023.
Reality
- Evidence62
- Adoption68
- Hype gap+5
- Incentives72
- Confidence63
Christian Pfister says quantum safety entered the bank's risk meetings in 2022, and the live pilot's problems turned up in load balancers and content delivery networks along the path between customer and server.
Reality
- Evidence45
- Adoption35
- Hype gap+10
- Incentives65
- Confidence50
Allot CTO Yaakov Stein sorts operator traffic by how long it stays worth stealing, and puts TLS hybrid key exchange first. The vendor answers he flags as suspicious are all deferrals dressed as prudence.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap−12
- Incentives62
- Confidence52
Munder Difflin v0.4.5 fixes a cost counter that zeroed on restart, NaN embeddings on Apple Silicon, and mail that was dropped rather than bounced. None of the three announced themselves.
Reality
- Evidence52
- Adoption27
- Hype gap+18
- Incentives68
- Confidence48
X25519MLKEM768 leaves the TLS application surface alone and moves the cost into handshake bytes. The work now is knowing which group each connection actually negotiated.
Reality
- Evidence58
- Adoption42
- Hype gap−12
- Incentives28
- Confidence55