Analysis and practical architecture, newest first.
The .gh, .sl and .as hijacks show how compromised DNS can produce trusted but unauthorized certificates. Learn how DNS and PKI teams should respond.
Microsoft’s PQC TLS pilot tests how X.509 infrastructure handles an ML-DSA-87 trust anchor and whether Category 5 belongs at every level of the hierarchy.
A vendor-reported AI attack shows why decrypted content must retain its untrusted provenance before an agent can invoke tools or send data.
Connect SPIFFE workload identity, AI/ML-BOM, CBOM, and runtime telemetry to identify which AI agent workflows will break during PQC migration.
Every AI agent adds cryptographic dependencies. PQC migration must map the identities, protocols, libraries, and workflows that depend on them.
What the HAWK result and reduced-round AES research reveal about AI-assisted cryptanalysis, human verification, and operational crypto-agility.
Discovery tools can find cryptography. Migration requires a connected view of dependencies, ownership, business criticality, and high-value assets.
