Encryption

apple_AdobeStock_283005101_Editorial_Use_Only

Brief

Apple releases quantum-resistant code and verification tools

discord_AdobeStock_434393592_Editorial_Use_Only

Discord implements end-to-end encryption for voice and video calls

Bloggers touch screen smartphone light night city, girls using in hands mobile phone closeup, online wi-fi internet, woman texting text message

Bloggers touch screen smartphone light night city, girls using i

Apple and Google roll out end-to-end encrypted RCS messaging

<body>Interview with Daniel dos Santos: Post-Quantum Cryptography and the Risks No One Is Talking About</body>

<body><h3>Interview with Daniel dos Santos: Post-Quantum Cryptography and the Risks No One Is Talking About</h3></body>

<body>Post-quantum cryptography (PQC) is quickly shifting from theory to inevitability. In this segment, Daniel dos Santos, VP of Research at Forescout, explains why PQC isn’t the most immediate threat today—but still demands early attention as standards solidify and timelines accelerate.</body>

<body><p>Post-quantum cryptography (PQC) is quickly shifting from theory to inevitability. In this segment, Daniel dos Santos, VP of Research at Forescout, explains why PQC isn’t the most immediate threat today—but still demands early attention as standards solidify and timelines accelerate.</p></body>

<body>The discussion highlights overlooked risks beyond encrypted traffic, including digital signatures, firmware integrity, and blockchain systems. Daniel also emphasizes the real challenge: migration. While client-side adoption is already underway, organizations face major hurdles identifying and upgrading servers, legacy systems, and unmanaged assets like IoT and OT.</body>

<body><p>The discussion highlights overlooked risks beyond encrypted traffic, including digital signatures, firmware integrity, and blockchain systems. Daniel also emphasizes the real challenge: migration. While client-side adoption is already underway, organizations face major hurdles identifying and upgrading servers, legacy systems, and unmanaged assets like IoT and OT.</p></body>

<body>The bottom line: PQC migration is unavoidable. Starting early—especially with crypto inventory and planning—will make the transition far less painful.</body>

<body><p>The bottom line: PQC migration is unavoidable. Starting early—especially with crypto inventory and planning—will make the transition far less painful.</p></body>

<body>RSAC Interview: Multi-Channel Impersonation: Why Legacy Controls Are Failing</body>

<body><h3>RSAC Interview: Multi-Channel Impersonation: Why Legacy Controls Are Failing</h3></body>

<body>As social engineering expands past just email to include text messages, chat apps, social platforms, and live video calls, traditional point solutions are struggling to keep up. In this segment, Bobby Ford explains how AI-powered impersonation and deepfake-enabled campaigns are exposing critical gaps in legacy defenses, and why organizations must evolve toward a unified social engineering defense platform that connects Digital Risk Management and Human Risk Management. He’ll outline what modern security programs need: real-time cross-channel visibility, behavior-driven detection, and strategies designed around how people actually communicate and make decisions today.</body>

<body><p>As social engineering expands past just email to include text messages, chat apps, social platforms, and live video calls, traditional point solutions are struggling to keep up. In this segment, Bobby Ford explains how AI-powered impersonation and deepfake-enabled campaigns are exposing critical gaps in legacy defenses, and why organizations must evolve toward a unified social engineering defense platform that connects Digital Risk Management and Human Risk Management. He’ll outline what modern security programs need: real-time cross-channel visibility, behavior-driven detection, and strategies designed around how people actually communicate and make decisions today.</p></body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/doppelrsac">https://securityweekly.com/doppelrsac</a> to learn how Doppel helps organizations defend against AI-powered impersonation, phishing, and multi-channel social engineering threats with a modern Human Risk Management approach.</body>

<body><p>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/doppelrsac">https://securityweekly.com/doppelrsac</a> to learn how Doppel helps organizations defend against AI-powered impersonation, phishing, and multi-channel social engineering threats with a modern Human Risk Management approach.</p></body>

<body>RSAC Interview: OT: Segmented Today, Breached Tomorrow</body>

<body><h3>RSAC Interview: OT: Segmented Today, Breached Tomorrow</h3></body>

<body>As the worlds of IT and OT converge, traditional network segmentation falls short, exposing risks in the critical environments that keep energy flowing and shelves stocked. Conventional security tools fail to identify these gaps, with serious repercussions for operators. At runZero, we empower defenders to win by default through comprehensive discovery, rapid detection of critical exposures, and unique segmentation analysis that does not depend on span ports, credentials, or on-device agents. runZero provides real-time insights into even the most sensitive environments — quickly, safely, and securely.</body>

<body><p>As the worlds of IT and OT converge, traditional network segmentation falls short, exposing risks in the critical environments that keep energy flowing and shelves stocked. Conventional security tools fail to identify these gaps, with serious repercussions for operators. At runZero, we empower defenders to win by default through comprehensive discovery, rapid detection of critical exposures, and unique segmentation analysis that does not depend on span ports, credentials, or on-device agents. runZero provides real-time insights into even the most sensitive environments — quickly, safely, and securely.</p></body>

<body>This segment is sponsored by runZero. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/runzerorsac">https://securityweekly.com/runzerorsac</a> to learn more about them!</body>

<body><p>This segment is sponsored by runZero. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/runzerorsac">https://securityweekly.com/runzerorsac</a> to learn more about them!</p></body>

<body>RSAC Interview: Securing the Next Billion Users: Why the Browser is the Front Line for Agentic AI</body>

<body><h3>RSAC Interview: Securing the Next Billion Users: Why the Browser is the Front Line for Agentic AI</h3></body>

<body>The enterprise is facing a fundamental shift: the next billion knowledge workers will not be human, they will be AI agents. While these agents offer exponential productivity, they operate at machine speed without human guardrails like MFA or skepticism, creating a massive security blind spot. Ramin Farassat discusses the "Agentic Paradox" and how a new approach to browser security is required to provide architectural immunity for the modern, hybrid workforce of both humans and agents.</body>

<body><p>The enterprise is facing a fundamental shift: the next billion knowledge workers will not be human, they will be AI agents. While these agents offer exponential productivity, they operate at machine speed without human guardrails like MFA or skepticism, creating a massive security blind spot. Ramin Farassat discusses the "Agentic Paradox" and how a new approach to browser security is required to provide architectural immunity for the modern, hybrid workforce of both humans and agents.</p></body>

<body>Learn more about how Menlo Security protects both humans and agents at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/menlorsac">https://securityweekly.com/menlorsac</a>.</body>

<body><p>Learn more about how Menlo Security protects both humans and agents at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/menlorsac">https://securityweekly.com/menlorsac</a>.</p></body>

<body>RSAC Interview: The Threat Curve Has Reset: Why AI Made “Solved” Attacks Dangerous Again</body>

<body><h3>RSAC Interview: The Threat Curve Has Reset: Why AI Made “Solved” Attacks Dangerous Again</h3></body>

<body>AI hasn’t just evolved cyberattacks—it has reset the threat curve entirely. New research shows that even “solved” problems like phishing and business email compromise are immature and dangerous again, with attackers using AI and autonomous agents to launch hyper-personalized, multi-channel attacks at scale. This session explores what Phishing 3.0 really means for security leaders—and why defending trust now requires a fundamentally new approach.</body>

<body><p>AI hasn’t just evolved cyberattacks—it has reset the threat curve entirely. New research shows that even “solved” problems like phishing and business email compromise are immature and dangerous again, with attackers using AI and autonomous agents to launch hyper-personalized, multi-channel attacks at scale. This session explores what Phishing 3.0 really means for security leaders—and why defending trust now requires a fundamentally new approach.</p></body>

<body>This segment is sponsored by IRONSCALES. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/IRONSCALESrsac">https://securityweekly.com/IRONSCALESrsac</a> to learn more about them!</body>

<body><p>This segment is sponsored by IRONSCALES. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/IRONSCALESrsac">https://securityweekly.com/IRONSCALESrsac</a> to learn more about them!</p></body>

Encryption

Apple releases quantum-resistant code and verification tools

Discord implements end-to-end encryption for voice and video calls

Apple and Google roll out end-to-end encrypted RCS messaging

Post Quantum Migration Struggles, AI Threats, and Modern Defenses – Bobby Ford, HD Moore, Eyal Benishti, Ramin Farassat, Daniel dos Santos – ESW #457

Microsoft to block legacy TLS connections for POP and IMAP in Exchange Online

Now’s the time to get working on post-quantum cryptography

Kyber ransomware targets Windows and ESXi with post-quantum encryption claims

BlackBerry survey reveals government security risks from consumer messaging apps

Fast Five

Selected by the SC Media Editorial team every Tuesday.