Loading story…
ImmuniWeb has released a free tool to assess website compliance with post-quantum cryptography (PQC) standards. The tool analyzes SSL/TLS configurations for NIST quantum-resilient encryption, PCI DSS, and HIPAA compliance, and can be integrated into CI/CD pipelines. Recent data shows only 10.63% of tested systems are PQC-compliant, highlighting a significant gap in quantum-era security readiness.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
3 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcecyberscoop.com
Open sourcehelpnetsecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security leaders are increasingly concerned about the impact of quantum computing on existing cryptographic systems, as quantum-inspired algorithms and quantum-ready software begin to appear in enterprise and defense environments. While most organizations are not yet running quantum computers, quantum software is being integrated into mission-critical workflows, often without security teams' full awareness. This integration poses new challenges for visibility, validation, and compliance, requiring CISOs and security operations teams to adapt their approaches to risk management and technology vetting. Despite growing awareness of the quantum threat, a recent survey by the Trusted Computing Group (TCG) reveals that 91% of businesses lack a formal roadmap for migrating to quantum-safe algorithms. Although many security professionals express confidence in their understanding of quantum risks, actual technical preparation remains limited, with most organizations' cryptographic libraries and hardware security modules not yet ready for post-quantum standards. The gap between perceived readiness and actual progress suggests that enterprises may be underestimating the complexity and timeline required to achieve true post-quantum security.
Jun 30, 2026
The cryptocurrency industry is facing a significant security risk due to its failure to adopt post-quantum cryptography (PQC) standards, leaving user data and transactions vulnerable to future quantum computing threats. A recent ImmuniWeb report revealed that none of the 2,138 web applications and 146 mobile apps tested in the sector currently support the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM), the new post-quantum encryption standard published by NIST. This lack of adoption means that encrypted transactions and sensitive user data could be exposed once quantum computers become capable of breaking current cryptographic algorithms. The report also highlighted that over 7.8 million user records from cryptocurrency platforms are already circulating on the dark web, underscoring the urgency of the threat. Despite the overall poor sector performance, exchanges like Coinbase, UPbit, and Crypto.com were identified as the most secure, with the fewest security findings, demonstrating that robust security is achievable. However, the absence of ML-KEM support across all tested exchanges indicates a sector-wide lag in migrating to quantum-resistant encryption. Compounding the issue, nearly one-third of exchanges still support outdated protocols such as TLS 1.0 and 1.1, further exposing encrypted traffic to interception. The research also found that 45% of exchanges lacked a web application firewall, making them susceptible to AI-driven threats like automated scraping, impersonation, and infrastructure mapping. The increasing use of generative AI in development, without adequate security oversight, is introducing new vulnerabilities and expanding attack surfaces. Persistent issues such as 74% of web applications using outdated software or libraries and 67% failing GDPR compliance continue to plague the industry. Internationally, the NIST PQC standards, including ML-KEM, ML-DSA, and SLH-DSA, have set the baseline for quantum-resistant encryption, with most countries aiming for full quantum resistance by 2035. While there is broad agreement on the need for PQC, there are differences among countries regarding recommended algorithms and the use of hybrid post-quantum/traditional encryption schemes. Most governments, including the U.S. and U.K., advise against quantum key distribution in favor of PQC. The slow adoption of these standards in the cryptocurrency sector stands in stark contrast to the urgency expressed by global standards bodies and governments. The current state of security in the sector, combined with the looming threat of quantum computing, presents a critical challenge that requires immediate attention and coordinated action. Without rapid migration to PQC, the confidentiality and integrity of cryptocurrency transactions and user data remain at significant risk. The industry must prioritize the implementation of NIST-approved PQC standards to safeguard against both present and future threats. Failure to do so could result in catastrophic breaches once quantum computers become operationally viable for cryptanalysis. The situation is further complicated by the global nature of cryptocurrency, necessitating harmonized international standards and compliance efforts. As adversaries continue to harvest encrypted data for future decryption, the window for proactive defense is rapidly closing. The sector's response in the coming years will determine its resilience against the quantum threat.
Jun 29, 2026
Cybersecurity leaders are raising alarms about the accelerating timeline for quantum computing to break current public encryption methods, a milestone known as Q-Day. Experts warn that Q-Day could arrive as soon as 2030, threatening to undermine the core trust mechanisms of the internet, including HTTPS, digital certificates, and public-key infrastructure. In response, governments and industries are developing plans to transition to post-quantum cryptography (PQC), but concerns remain that critical sectors such as banking, healthcare, and government may not be fully prepared in time. One of the earliest operational changes in anticipation of quantum threats is the reduction of SSL/TLS certificate lifespans to 47 days. This move, aligned with evolving browser requirements and NIST guidance, is designed to improve crypto agility and security hygiene, helping organizations adapt to a future where static cryptography is no longer viable. Security executives emphasize the need for urgent action, drawing parallels to the unpreparedness seen during the rapid adoption of AI, and stress that building operational readiness for PQC is now a strategic imperative for digital trust and business continuity.
Jun 29, 2026