HAWK PQC withdrawal and Perl regex CVE

Post-quantum signature work and a core language runtime both saw concrete security movement. An AI-assisted lattice reduction forced the withdrawal of one NIST candidate while Perl received a CVE for heap memory errors in its matcher.

HAWK withdrawn from NIST PQC signatures

Anthropic produced an AI-assisted lattice attack showing that HAWK-n key recovery reduces to the shortest vector problem in dimension n/2 + 1. The result halves the effective dimension that underpins the scheme's claimed security. NIST subsequently recorded the official withdrawal of HAWK from its post-quantum cryptography signatures round.

Perl CVE-2026-15534 for regex heap access

Perl versions through 5.45.1 perform out-of-bounds heap reads and writes while matching regular expressions. The flaw is caused by an undersized superlinear cache inside S_regmatch and has been assigned CVE-2026-15534. Users of the affected releases face a memory-safety defect in a fundamental interpreter path.