Google bumps up Q Day deadline to 2029, far sooner than previously thought

Ars Technica's Feb–Mar 2026 security feed highlights a rapidly worsening threat landscape: Google accelerates its Q‑Day timeline to 2029 (push to move off RSA/EC), multiple supply‑chain compromises (Trivy scanner backdoored, invisible‑unicode attacks on repositories, malicious packages targeting dYdX), self‑propagating/wiping malware (notably affecting Iran), large router infections/botnet activity, a powerful iPhone exploit in the wild (DarkSword) and additional iOS flaws added to CISA’s known‑exploited list, disclosed IP‑KVM vulnerabilities that expose BIOS‑level access, high‑impact wiper on