Cloudflare's 1.1.1.1 DNS resolver now validates post-quantum DNSSEC signatures using ML-DSA-44, a NIST-standardized algorithm, to prepare DNS infrastructure for potential threats from future quantum computers. The implementation addresses challenges of larger signature sizes (2,420 bytes) and the need to maintain backward compatibility with older resolvers during the transition to post-quantum cryptography.
Vlad Tenev argues that AI will enable mathematical proofs of code correctness, making cybersecurity defense-favoring despite AI-driven hacking threats. He contends that formal security definitions, though complex, represent a smaller attack surface than implementations and can be additively combined, making them tractable for verification with better tooling.
A project provides a monitored way for AI agents to escape GET-only sandboxes by offering POST-request proxying and encrypted pastebin services with time-locked decryption. The system uses AWS Nitro Enclaves and Monero's RandomX algorithm to ensure encrypted logs remain unreadable for approximately one week before becoming publicly accessible, allowing researchers to study agent behavior while maintaining transparency.
Vitalik Buterin argues that cybersecurity is defense-favoring and that AI advances will help prove program security mathematically, making cryptocurrency holdings a sound bet. He emphasizes that rigorous security definitions are more tractable than scanning code directly and that defining security properties is critical for cryptographic systems, messaging protocols, and other security-critical components.
Apple is launching a photo verification feature for iPhone 18 Pro that cryptographically signs sensor data to prove authenticity and prevent deepfake tampering. The system uses a secure camera mode that signs pixel data at capture, processes it through Apple's Private Cloud Compute with quantum-resistant encryption, and produces a verifiable digital certificate for the final image.
Blockchains excel at securing settlement through self-enforcing rules, but financial transactions involve seven lifecycle stages—discovery through enforcement—each vulnerable to exploitation. PriFi infrastructure must address privacy and security across the entire transaction chain, not just settlement, to provide credible commitments comparable to traditional institutions.
Researchers used simulated annealing to decrypt a 500-year-old cipher from a 1542 letter sent by Cardinal Alessandro Farnese to the papal nuncio Giovanni Poggio. The letter, stored in the Vatican Archives, contained a polyalphabetic substitution cipher that had remained unsolved until computational methods were applied to recover the key and plaintext.
TurboCrypt is a universal file encryption tool written in Zig that encrypts files and directories using modern cryptography. It supports mounting encrypted folders as local volumes, integrating with Git for private files in public repositories, and runs on Linux, macOS, Windows, and BSD with parallel processing for fast performance.
X users discuss Ethereum-related topics including VanGrid's approach to physical AI data collection using distributed smartphone capture verified on-chain, predictions of altseason following Bitcoin dominance decline, and market updates showing mixed performance across cryptocurrencies and traditional assets. The CLARITY crypto regulation bill failed to advance in the US Senate with 49 votes versus the required 60.
Beldex is expanding its privacy roadmap beyond private transactions to include account-based addresses, privacy token standards, and a private EVM sidechain planned for Q2 2027. The project aims to extend privacy across tokens, dApps, and DeFi through staged upgrades starting in Q3 2026, moving toward confidential computing and post-quantum cryptography by 2028-2029.
Apple introduced Reference Image, a new camera mode on iPhone 18 Pro designed to verify photograph authenticity through a chain-of-custody system that begins at sensor initialization during manufacturing. The system uses cryptographic signing, Private Cloud Compute processing, and quantum-resistant encryption to create verifiable digital negatives while preserving photographer anonymity and protecting against manipulation throughout the editing chain.
DFOS is an open protocol for managing digital identities through signed records rather than central directories. It enables cryptographic verification of identity ownership, delegated permissions, and document integrity without requiring encryption or account registration. Users can create identities, sign records, and optionally publish to relays using command-line tools.
Apple introduced Apple Reference Image on iPhone 18 Pro models to cryptographically verify that photos were taken with an iPhone and haven't been edited or AI-generated. The feature boots the camera sensor into a specialized mode that signs pixel data immediately after capture, creating a secure digital negative protected from software tampering and verified through Private Cloud Compute.
Oracle announced the general availability of JDK 27, featuring nine significant enhancements including improvements to Java language features, security, performance, and libraries. Key additions include hybrid key exchange for quantum-resistant TLS 1.3, new cryptographic encoding APIs, AI inferencing support via pattern matching enhancements, G1 garbage collector as default, compact object headers, lazy constants initialization, structured concurrency APIs, and vector computation optimizations.
Email encryption is fundamentally flawed and cannot be made safe due to plaintext defaults, metadata leakage, and design limitations that allow unencrypted replies. The article argues that encrypted email provides false security for most users and that secure messaging platforms are superior alternatives.
Intel TDX remote attestation verification can be implemented without Intel Trust Authority by decomposing the process into five decisions: cryptographic signature chain validation delegated to Intel's DCAP library, and four policy decisions by the operator regarding collateral sourcing, measurement approval, quote binding, and credential issuance. The article details how operators can build their own verifiers for TDX attestation when network isolation or custom policy requirements prevent using Intel's service.
Agent Name Service (ANS) enables offline, sub-millisecond verification of agent identity before sensitive data is transmitted, using cryptographic methods separate from authorization frameworks like OAuth 2.0. Born from OWASP and IETF standards, ANS provides versioned identities, transparency logs, and short-lived status tokens for efficient agent management in autonomous AI systems. The service allows clients to verify server identity through three checks before sharing credentials, addressing security challenges in agent-to-agent communication.
Researchers using Claude solved the century-old Chinese gold bar cipher mystery by proving the 1933 Shanghai bars were never encrypted at all—the 263 letters were deliberately arranged with perfectly uniform frequency distribution, which no actual cipher could produce. The case, unsolved for 30 years on cryptography lists, demonstrates statistical analysis can identify non-ciphers.
JDK 27 is now generally available as build 35, the second release candidate with no P1 bugs reported since August 20. The release includes nine JEPs covering garbage collection defaults, post-quantum cryptography, structured concurrency, and vector APIs, plus hundreds of smaller enhancements and thousands of bug fixes.
toluTag is an open-source passive NFC tag using NXP SE05x secure elements to sign ECDSA messages verifiable on Ethereum, enabling physical objects to authenticate on-chain without requiring central servers or extractable private keys.