Home / Cybersecurity / Eclypses Partners with Sterling to Deploy Payload-Level Post-Quantum Cryptography across…
Eclypses Partners with Sterling to Deploy Payload-Level Post-Quantum Cryptography across Federal Systems
quantumcomputingreport.com Aug 19, 2026

Eclypses Partners with Sterling to Deploy Payload-Level Post-Quantum Cryptography across Federal Systems

Curated by · TechCapsules ·

AI-summarised brief · reviewed before publication

Eclypses has partnered with IT solutions integrator Sterling to deploy its MicroToken Exchange platform across U.S. federal government systems. This collaboration aims to mitigate “harvest now, decrypt later” cyber threats by implementing payload-level post-quantum cryptography. Eclypses provides FIPS 140-3 validated software that replaces reusable keys with single-use tokens, ensuring intercepted data remains unusable to adversaries with cryptanalytically relevant quantum computers. The solution integrates NIST standards, including ML-KEM, and deploys via containerized software without requiring network re-architecture. Sterling will incorporate this technology into its federal practice to help agencies meet OMB Memorandum M-26-15 compliance. Federal civilian agencies must submit post-quantum migration plans by October 22, 2026. The joint platform supports automated cryptographic inventory and zero-trust modernization for high-value assets. Led by Eclypses CEO David Gomes and Sterling CTO Chris Cyr, the partnership addresses urgent security needs in cloud, AI, and edge environments while adhering to strict federal deadlines for securing production data against emerging quantum computing risks.

💡 Why It Matters

  • · Federal agencies face an imminent October 2026 deadline to submit post-quantum migration plans, creating urgent demand for non-disruptive security solutions.
  • · This partnership offers a rapid deployment path that secures data at the payload level, bypassing the need for complex network re-architecture during a critical compliance window.
Capsules Cybersecurity Partnership Quantum Computing
Read full article on quantumcomputingreport.com
More in Cybersecurity →
Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
thehackernews.com · Aug 19

Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

A bespoke JavaServer Pages web shell, linked to the Clop ransomware group, was deployed after exploiting CVE‑2026‑12569 in PTC Windchill and FlexPLM servers. The shell decrypts all Windchill keystore credentials, maps the application’s file vault, and can execute arbitrary Java code via a custom class loader. It enables rapid lateral movement, data exfiltration, and persistence without additional tools, targeting engineering data and LDAP credentials that could compromise entire enterprise networks. The attack demonstrates a tailored, application‑specific threat model.

💡 The shell’s ability to harvest privileged credentials in one step turns a single PLM breach into a full‑network compromise, exposing sensitive product designs and corporate infrastructure. Its custom design bypasses traditional defenses, underscoring the need for targeted monitoring of critical PLM environments.

The Pokémon Company Cancels 30th Anniversary Card Orders Following ‘Cyber Incident,’ Warns of Customer Data Breach
ign.com · Aug 19

The Pokémon Company Cancels 30th Anniversary Card Orders Following ‘Cyber Incident,’ Warns…

The Pokémon Company has cancelled all 30th Anniversary Card orders linked to a cyber incident that exposed customer data. The breach involved CEVA, the logistics partner handling European shipments, and may have compromised names, addresses, phone numbers, emails, and order contents. Pokémon Center staff notified affected customers via email, explaining the data exposure. The company has not clarified why orders were cancelled or the extent of the impact, leaving many pre‑orders voided. The incident adds to ongoing concerns over card scarcity and scalping.

💡 The cancellation signals a severe breach of consumer trust, potentially eroding confidence in Pokémon’s digital sales channels. It also underscores the vulnerability of third‑party logistics in protecting personal data.

European Space Agency Confirms Server Breach
infosecurity-magazine.com · Aug 19

European Space Agency Confirms Server Breach

Europe’s space agency confirmed that hackers accessed servers outside its corporate network last month, compromising data used for unclassified collaborative engineering. ESA said a forensic analysis is underway and only a small number of external servers appear affected. The breach was first hinted at in a BreachForums post on Dec. 18, where a threat actor claimed to have exfiltrated over 200 GB, including private Bitbucket repositories, source code, CI/CD pipelines, API tokens, configuration files and hard‑coded credentials. ESA has informed stakeholders, secured potentially affected devices and will issue updates. Experts warn the stolen information could enable supply‑chain attacks, underscoring the growing attack surface of distributed space‑technology collaborations and the sector’s struggle to meet EU cybersecurity mandates and to protect future mission data.

💡 The incident proves that seemingly low‑value engineering data can serve as a gateway for deeper supply‑chain sabotage, compelling space agencies to tighten security around open‑collaboration frameworks.

Bybit Strengthens Security Defences Against Evolving Crypto Threats, Intercepting $700 Million in Potential User Losses
prnewswire.co.uk · Aug 19

Bybit Strengthens Security Defences Against Evolving Crypto Threats, Intercepting $700 Million in…

Bybit, the world’s second‑largest crypto exchange, released its H1 2026 Risk & Security Report detailing a multi‑layered defense upgrade after a February 2025 hack that stole roughly $1.46 billion. The new system combines user‑account safeguards, full‑coverage on‑chain monitoring and AI‑assisted threat detection to shorten detection‑to‑response times. In the first half of 2026 the platform blocked over 30,000 dubious withdrawal attempts, shielding nearly 20,000 users from more than $700 million in potential losses, with an average initial review of 4.7 minutes and 95 % completed within ten minutes. Bybit also flagged $212 million in suspicious on‑chain funds, blacklisted over 10,000 malicious addresses, and handled ten token‑project security incidents without any platform losses, often acting faster than rival exchanges.

💡 Bybit’s rapid, AI‑driven interception demonstrates that real‑time, data‑centric security can materially protect users and curb fraud in a market where billions are routinely targeted.

StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
thehackernews.com · Aug 19

StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal…

Check Point Research has uncovered a global cybercrime operation dubbed StopAndProtect that hijacks nearly 2,000 WordPress sites to deliver a multi‑component malware toolkit. The campaign begins with a ClickFix‑style social‑engineering prompt that triggers a PowerShell command, launching .NET downloaders and loaders which install ransomware, a SMB/USB worm, lock‑screen modules, a VBS spreader, a chat utility and credential stealers. The actors also exfiltrate files, screenshots and WhatsApp data, using a custom WordPress MU plugin that permits arbitrary file uploads and remote code execution. Researchers observed operational‑security mistakes that exposed infection logs and over 700 data archives, including internal development tools. Most compromised sites run outdated WordPress versions with dozens of known vulnerabilities, facilitating the fake CAPTCHA injection against unsuspecting visitors worldwide.

💡 By turning compromised blogs into a distributed malware delivery network, the attackers bypass traditional defenses and reach victims directly through trusted web traffic, dramatically widening the attack surface.

Web3 Platform Mixin Network Hit by $200m Crypto Hack
infosecurity-magazine.com · Aug 19

Web3 Platform Mixin Network Hit by $200m Crypto Hack

Hong Kong‑based decentralized finance project Mixin Network disclosed a cyber‑attack that compromised its cloud service provider’s database on September 23, 2023, resulting in the loss of roughly $200 million in cryptocurrency. The breach forced the platform to suspend deposit and withdrawal services while transfers remained operational, and Mixin enlisted Google and blockchain security firm SlowMist to investigate. Founder Feng Xiaodon addressed users in a live Mandarin briefing on September 25, outlining remediation steps, and the project later reported a $30 million drop in total value locked, according to DeFi Llama. Launched in 2017, Mixin’s XIN token supports cross‑chain transactions for about 10,000 DApps. The incident ranks as the fifth‑largest crypto hack outside exchanges, trailing incidents such as Ronin, Poly Network, BNB Bridge and Wormhole.

💡 The hack exposes the vulnerability of “decentralized” platforms that still depend on centralized cloud infrastructure, challenging the core security premise of Web3.