Attackers chained two now-patched AhsayCBS flaws to deploy web shells, XMRig miners, and a Python backdoor tied to its host.
ML-DSA and SLH-DSA are final, FN-DSA is pending, and 9 round-3 candidates remain. Dates, deadlines, migration steps.