Loading story…
France's cybersecurity agency, ANSSI, said it will stop certifying security products that lack post-quantum or quantum-resistant encryption beginning in 2027. Because ANSSI certification is required for products used by French government agencies and critical infrastructure operators, the policy will effectively force a phaseout of older encryption technologies across those sectors.
ANSSI official Samih Souissi said the move is intended to accelerate France's transition to quantum-safe cryptography as concerns grow over future attacks against current encryption standards. The agency also signaled a broader market shift by urging businesses to prioritize purchasing quantum-safe products by 2030, extending pressure beyond the public sector and regulated operators.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
ANSSI official Samih Souissi said businesses should purchase only quantum-safe products by 2030. The guidance extends France's post-quantum transition beyond government and critical infrastructure procurement.
France's cybersecurity agency ANSSI announced a policy change under which it will stop certifying security products that do not include quantum-resistant encryption beginning in 2027. Because ANSSI certification is required for products used by French government agencies and critical infrastructure operators, the move will phase out older encryption approaches in those sectors.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cybersecurity leaders are raising alarms about the accelerating timeline for quantum computing to break current public encryption methods, a milestone known as Q-Day. Experts warn that Q-Day could arrive as soon as 2030, threatening to undermine the core trust mechanisms of the internet, including HTTPS, digital certificates, and public-key infrastructure. In response, governments and industries are developing plans to transition to post-quantum cryptography (PQC), but concerns remain that critical sectors such as banking, healthcare, and government may not be fully prepared in time. One of the earliest operational changes in anticipation of quantum threats is the reduction of SSL/TLS certificate lifespans to 47 days. This move, aligned with evolving browser requirements and NIST guidance, is designed to improve crypto agility and security hygiene, helping organizations adapt to a future where static cryptography is no longer viable. Security executives emphasize the need for urgent action, drawing parallels to the unpreparedness seen during the rapid adoption of AI, and stress that building operational readiness for PQC is now a strategic imperative for digital trust and business continuity.
Jun 29, 2026
The U.S. Treasury Department has launched a **Quantum-Readiness Task Force** to help banks, market infrastructure operators, technology providers, and other financial-sector stakeholders prepare for the transition from current cryptographic standards to **post-quantum cryptography**. Treasury said the group will coordinate migration planning across the sector as concerns grow that future quantum computers could break widely used encryption protecting financial records, payment systems, and market transactions, including through the current **"harvest now, decrypt later"** risk. The task force will focus on vendor and third-party readiness, digital asset and emerging technology risks, critical dependencies, interoperability, and **cryptographic agility** so institutions can replace vulnerable algorithms without disrupting operations. The move follows a January roadmap from the **G7 Cyber Expert Group** that set a nonbinding **2035** target for the financial sector’s post-quantum transition, and aligns with a June executive order and subsequent OMB guidance directing federal agencies and critical infrastructure sectors to accelerate preparation for quantum-enabled cyber threats; broader industry concern has also been reinforced by recent quantum threat timeline reporting from the Global Risk Institute.
Aug 24, 2026
NIST released its first post-quantum cryptography (PQC) standards in August 2024, setting a 2035 deadline to phase out vulnerable algorithms. Federal agencies are mandated to inventory cryptographic assets, assess quantum risk, and transition to NIST-approved PQC, with key milestones in 2030 and 2035. Agencies and vendors must act now to avoid operational vulnerabilities and ensure compliance with federal policy.
Jun 29, 2026