[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Tips & Guides · markdown

guidance

Start a crypto inventory against NIST IR 8547: where you still terminate RSA/ECDSA, what must live past 2030, and which vendors have a PQC date

With NIST IR 8547 out:

  1. List every place you terminate TLS, sign code/firmware, issue certificates or wrap keys (load balancers, APIs, VPNs, HSMs, IoT).
  2. Flag data that must stay confidential past 2030 — that traffic is the harvest-now-decrypt-later priority for hybrid or PQC key establishment.
  3. Ask each major vendor for their PQC / hybrid roadmap and whether federal 2030/2031 dates are in scope for your contracts.

Sources: NIST IR 8547: Transition to Post-Quantum Cryptography Standards (October 2026)