.png?width=1816&height=566&name=brandmark-design%20(83).png "Tech Channels - IT News, Resources & Insights")
Organizations must plan now for a post-quantum world and Yubico's Albert Biketi provides a roadmap, while financial firms can't always patch away cyber risk caused by AI. And RubyGems was a foreshadowing of AI agents escaping and doing their own thing.
Q&A: Yubico’s Biketi on Prepping for the Post-Quantum World: Why Crypto Agility Has to Start Now
The arrival of a cryptographically relevant quantum computer may still be somewhere over the horizon, but the security implications are already here. Sensitive information that needs to remain confidential for decades can be collected today and potentially decrypted later, creating a risk that organizations must address long before quantum computers are capable of breaking current cryptographic protections. At the same time, the sheer volume of digital information, the complexity of modern encryption architectures and advances in quantum error correction are adding urgency to the transition. Preparing for that future is not as simple as swapping one encryption algorithm for another. Organizations first need to understand where sensitive information resides, identify their encryption dependencies and determine how cryptography is embedded across interconnected systems. For many enterprises, that discovery process alone could take years. And because cryptographic approaches can change as new weaknesses emerge, Albert Biketi, Chief Product and Technology Officer at Yubico, in a two-part, wide-ranging interview, argues that organizations need more than a migration plan—they need crypto agility, or the ability to adapt without disrupting critical business processes. He offers up a roadmap for post-quantum readiness.
The Cyber Weakness Finance Cannot Patch Alone Is, Of Course, AI
Finance has a cyber problem it cannot solve with better firewalls: too many critical systems now depend on technology that sits somewhere else. A bank may control its own network, but not the cloud platform hosting a core service, the software library buried inside a vendor product, or the AI model used across multiple institutions. That concentration is one reason Andrew Bailey, chair of the Financial Stability Board and Governor of the Bank of England, has pushed AI-driven cyber risk to the top of the financial stability agenda. In a letter to G20 finance ministers and central bank governors, Bailey said advanced AI could alter the speed, scale, and economics of cyberattacks, while many countries still lack adequate systems to manage the deployment of powerful models.More capable models can accelerate vulnerability discovery, compressing the time between a weakness becoming visible and someone trying to exploit it. Financial firms cannot always answer by patching immediately
GitOps in 2026: Pull Requests Are Becoming the Control Layer for Cloud Operations
GitOps sounds more complicated than it really is. Teams describe in Git how an application or cloud environment should look, review any proposed change through a pull request, then let controllers such as Argo CD or Flux keep the live environment aligned with that approved state. What started around Kubernetes deployment is now spreading into a broader way of controlling infrastructure change. Among organizations classified as cloud-native “innovators,” 58% now say most or all of their deployment practices follow GitOps principles. Among Argo CD users, 42% manage more than 500 applications from a single instance and a quarter connect more than 20 clusters. Underneath that workflow is a fairly simple operating model. Git stores the declared state, while software agents continuously compare it with what is actually running and reconcile any differences. OpenGitOps formalizes four principles around that model: declarative configuration, versioned state, automatic pull, and continuous reconciliation.
Mastercard Targets the Digital Wallet Interoperability Problem
Global adoption of digital wallets has surged in recent years, despite the fact that using them across different countries, merchants and payment networks often remains surprisingly complicated. Mastercard is attempting to address that fragmented ecosystem with its launch of Wallet Pay, a new global portfolio of solutions launched in September that is designed to connect digital wallets across payments, QR codes and online transactions. With well over 4 billion people now using digital wallets worldwide, and usage expected to exceed six billion by the end of the decade, such developments could have a profound impact on payments and transactions across the globe. Nonetheless, Mastercard isn’t marketing Wallet Pay as another consumer digital wallet competing for that vast user base. The goal is to provide a unified infrastructure that wallet providers themselves can use to expand their existing services rather than having to build every integration themselves. The portfolio covers five main areas: unified digital and e-commerce acceptance, interoperability, card issuing, faster money movement, and expanded financial access. For instance, a provider operating primarily through QR payments might add contactless capabilities, while another could use Mastercard’s network to extend payments and transfers into new markets.
5 Ways AI Agents Exploit Space Between Instructions and Infrastructure, Lessons from RubyGems
OpenAI closed an escape route, but its agents found another that same day. In a well-publicized incident in July, roughly 1,200 supposedly independent agents had discovered a shared message board; around 700 later participated in attacks on Hugging Face.But RubyGems had come earlier with a murkier version of the same phenomenon. In May, researchers linked a campaign involving thousands of packages to OpenAI agents carrying out information-gathering tasks. OpenAI confirmed its agents used RubyGems to retrieve public web content, but Ruby Central could not establish whether they created or published the packages. Such incidents expose weaknesses in how agent environments are designed and assessed: what an agent can reach, what it can learn there, and whether one run’s discoveries remain available to the next. And they offer plenty to learn from.
