Loading story…
The UK National Cyber Security Centre has updated its TLS guidance to recommend post-quantum cryptography configurations for general use and protection of government OFFICIAL information. The recommendations cover both hybrid post-quantum/traditional and pure post-quantum options, following the IETF’s publication of RFC 10024 for hybrid key agreement in TLS 1.3. A subsequent NCSC CTO weekly summary reinforced the call for organisations to begin migration now.
The NCSC urges organisations running TLS 1.2 or earlier to move to TLS 1.3, the only TLS version supporting post-quantum cryptography, and begin deploying post-quantum protection. Its migration timeline calls for high-priority activities to be completed by 2031. Security leaders should incorporate TLS upgrades and post-quantum deployment into migration plans; further NCSC guidance on IPsec and post-quantum TLS authentication is planned.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
The NCSC published updated TLS guidance recommending hybrid and pure post-quantum configurations suitable for general use and protecting government OFFICIAL information. It urged organisations to begin post-quantum migration and move from TLS 1.2 or earlier to TLS 1.3, the only version supporting post-quantum cryptography.
The IETF published RFC 10024, “Post-quantum traditional hybrid key agreement mechanisms for TLS 1.3.” Its publication preceded the NCSC's updated TLS guidance.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cybersecurity leaders are raising alarms about the accelerating timeline for quantum computing to break current public encryption methods, a milestone known as Q-Day. Experts warn that Q-Day could arrive as soon as 2030, threatening to undermine the core trust mechanisms of the internet, including HTTPS, digital certificates, and public-key infrastructure. In response, governments and industries are developing plans to transition to post-quantum cryptography (PQC), but concerns remain that critical sectors such as banking, healthcare, and government may not be fully prepared in time. One of the earliest operational changes in anticipation of quantum threats is the reduction of SSL/TLS certificate lifespans to 47 days. This move, aligned with evolving browser requirements and NIST guidance, is designed to improve crypto agility and security hygiene, helping organizations adapt to a future where static cryptography is no longer viable. Security executives emphasize the need for urgent action, drawing parallels to the unpreparedness seen during the rapid adoption of AI, and stress that building operational readiness for PQC is now a strategic imperative for digital trust and business continuity.
Jun 29, 2026
Germany has published joint national guidance for migrating to **post-quantum cryptography (PQC)**, adopting the European Union’s risk-based transition timetable. Issued by the interior and digital ministries and the Federal Office for Information Security, the guidance calls for high-risk use cases to become quantum-safe as soon as possible and no later than the end of **2030**, medium-risk use cases by **2035**, and low-risk use cases as far as possible by 2035. Organizations are expected to assign migration ownership, develop implementation plans, establish an initial cryptographic inventory and begin migration by December 31, 2026. The dates are currently recommendations rather than universally binding requirements; German authorities are expected to make deadlines binding before year-end, while existing cybersecurity laws already impose cryptographic risk-management duties on many regulated entities. The guidance recommends hybrid combinations of classical and post-quantum algorithms, supplier coordination, crypto-agile procurement and emergency planning. It does not explicitly include the pilot projects required by the EU roadmap. Although the arrival of quantum computers capable of breaking RSA remains uncertain, long-lived systems and **harvest-now-decrypt-later** attacks make delayed migration a confidentiality risk today. Security leaders should prioritize cryptographic discovery and risk classification, identify dependencies on suppliers, and build migration plans around data-retention needs and system replacement cycles.
Oct 17, 2026
The U.S. government is accelerating post-quantum cryptography adoption across federal systems and the defense industrial base, with new executive and Defense Department directives setting milestones for agencies and contractors to support PQC by 2030 and use it by 2031. Reporting on the Pentagon’s strategy says the Cybersecurity Maturity Model Certification program will be updated with quantum-resistant requirements, while broader federal policy frames a two-track quantum strategy that combines defensive migration with continued national quantum advancement. Officials and industry sources warn that many contractors remain unprepared, even as governments and security agencies increasingly cite **Harvest Now, Decrypt Later** as a current risk to long-lived sensitive data. At the same time, industry is arguing that organizations cannot delay deployment waiting for better algorithms, even as implementation flaws raise fresh concerns around today’s standards. Cloudflare said `ML-DSA`, standardized alongside `ML-KEM`, is imperfect but the most practical near-term signature option and remains central to its plan for full post-quantum security by 2029. Separate research coverage highlighted practical key-recovery attacks against buggy `ML-DSA` implementations, including failures involving nonce reuse and corrupted signing randomness, underscoring that migration urgency must be matched by rigorous engineering, testing, and protections against side-channel and randomness-leakage failures.
Jul 14, 2026