Loading story…
The U.S. government is accelerating post-quantum cryptography adoption across federal systems and the defense industrial base, with new executive and Defense Department directives setting milestones for agencies and contractors to support PQC by 2030 and use it by 2031. Reporting on the Pentagon’s strategy says the Cybersecurity Maturity Model Certification program will be updated with quantum-resistant requirements, while broader federal policy frames a two-track quantum strategy that combines defensive migration with continued national quantum advancement. Officials and industry sources warn that many contractors remain unprepared, even as governments and security agencies increasingly cite Harvest Now, Decrypt Later as a current risk to long-lived sensitive data.
At the same time, industry is arguing that organizations cannot delay deployment waiting for better algorithms, even as implementation flaws raise fresh concerns around today’s standards. Cloudflare said ML-DSA, standardized alongside ML-KEM, is imperfect but the most practical near-term signature option and remains central to its plan for full post-quantum security by 2029. Separate research coverage highlighted practical key-recovery attacks against buggy ML-DSA implementations, including failures involving nonce reuse and corrupted signing randomness, underscoring that migration urgency must be matched by rigorous engineering, testing, and protections against side-channel and randomness-leakage failures.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
6 events from the most recent confirmed update back to the earliest known activity.
The new DoD strategy sets broad milestones requiring all DoD systems to support post-quantum cryptography by the end of 2030 and to employ it before the end of 2031.
DefenseScoop reported that the U.S. Department of Defense released a new post-quantum cryptography strategy that will update CMMC to incorporate quantum-resistant requirements for the defense industrial base.
Cloudflare's article states that NIST standardized the post-quantum algorithms ML-KEM and ML-DSA in 2024, establishing the baseline for near-term migration away from RSA and ECC.
A June 2026 paper by Daniel J. Bernstein described two practical attacks that can recover a full ML-DSA secret key from a public key and two signatures in under a second when implementations have specific randomness bugs such as duplicated coefficients or nonce reuse.
On July 7, 2026, the White House convened nearly 100 participants from government, industry, and academia to coordinate execution of recent U.S. quantum policy actions, including executive orders on quantum innovation and post-quantum cryptography migration. The summit also highlighted a DOE-led push toward a fault-tolerant, scientifically relevant quantum computer by 2028 and framed PQC migration around a shared 2030 deadline.
King & Spalding reported on new executive orders that mobilize a two-front federal quantum strategy, reflecting a U.S. government policy move on quantum security and adoption.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
9 references tracked. Mallory keeps watching after this page renders.
postquantum.com
Open sourcepostquantum.com
Open sourcedefensescoop.com
Open sourceblog.cloudflare.com
Open sourcecodeby.net
Open sourcekslaw.com
Open sourcecsrc.nist.gov
Open sourcedigital-strategy.ec.europa.eu
Open sourcefalcon-sign.info
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cybersecurity leaders are raising alarms about the accelerating timeline for quantum computing to break current public encryption methods, a milestone known as Q-Day. Experts warn that Q-Day could arrive as soon as 2030, threatening to undermine the core trust mechanisms of the internet, including HTTPS, digital certificates, and public-key infrastructure. In response, governments and industries are developing plans to transition to post-quantum cryptography (PQC), but concerns remain that critical sectors such as banking, healthcare, and government may not be fully prepared in time. One of the earliest operational changes in anticipation of quantum threats is the reduction of SSL/TLS certificate lifespans to 47 days. This move, aligned with evolving browser requirements and NIST guidance, is designed to improve crypto agility and security hygiene, helping organizations adapt to a future where static cryptography is no longer viable. Security executives emphasize the need for urgent action, drawing parallels to the unpreparedness seen during the rapid adoption of AI, and stress that building operational readiness for PQC is now a strategic imperative for digital trust and business continuity.
Jun 29, 2026
Recent developments in post-quantum cryptography are addressing the growing threat posed by quantum computers to traditional digital signatures and encrypted communications. The National Institute of Standards and Technology (NIST) has approved new post-quantum digital signature algorithms, such as ML-DSA (FIPS 204) and SLH-DSA (FIPS 205), to replace vulnerable mechanisms like RSA and elliptic curve signatures. These algorithms are designed to ensure the integrity and authenticity of digital documents and communications, even in the face of future quantum attacks. The focus on hybrid key exchanges, such as X25519MLKEM, is also gaining traction to mitigate "harvest now, decrypt later" (HNDL) threats, where adversaries collect encrypted data today to decrypt it once quantum capabilities become available. In parallel, industry innovation is bringing quantum-resistant technologies into operational environments. Forward Edge-AI has delivered its Isidore Quantum One-Way Data Diode to National Central University in Taiwan, marking a significant step in quantum-safe data protection for critical infrastructure. This device uniquely combines unidirectional data flow with NIST-approved post-quantum encryption (AES-256 GCM and ML-KEM), addressing the limitations of traditional data diodes that lack encryption and are vulnerable to HNDL attacks. The Isidore Quantum solution also offers deployment flexibility across both fiber and copper networks, reducing costs and accelerating adoption of quantum-safe communications.
Jun 29, 2026
Security experts are intensifying efforts to develop and implement post-quantum cryptography (PQC) in anticipation of the eventual arrival of quantum computers capable of breaking current encryption algorithms, a milestone referred to as "Q-Day." The transition to PQC is recognized as a complex, multi-year process that requires not only new cryptographic algorithms but also significant changes to cybersecurity infrastructure, including the adoption of hybrid solutions and the integration of PQC into zero-trust architectures. High-security sectors are particularly urged to begin migration early to mitigate the risk of "harvest now, decrypt later" attacks, where adversaries collect encrypted data now to decrypt once quantum capabilities are available. Industry analysts highlight that the migration to post-quantum encryption presents unique challenges compared to previous cryptographic upgrades, as it involves extensive updates to hardware, software, and system architectures. While some areas, such as blockchain, are not immediately threatened by quantum computing, the scale and complexity of the migration require coordinated efforts across security, product management, and IT operations. Experts emphasize the need for proactive planning and the adoption of best practices to ensure a smooth transition before quantum computers become a practical threat to digital security.
Jul 12, 2026