Loading story…
The OpenSSL Conference 2025 is scheduled for October 7–9 in Prague, bringing together key stakeholders in cryptography and security. The event will feature sessions with project maintainers, compliance leaders, and policymakers, with a focus on regulatory obligations and post-quantum cryptography. Networking and discussions will address current and future security challenges in the open-source cryptographic ecosystem.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cybersecurity leaders are raising alarms about the accelerating timeline for quantum computing to break current public encryption methods, a milestone known as Q-Day. Experts warn that Q-Day could arrive as soon as 2030, threatening to undermine the core trust mechanisms of the internet, including HTTPS, digital certificates, and public-key infrastructure. In response, governments and industries are developing plans to transition to post-quantum cryptography (PQC), but concerns remain that critical sectors such as banking, healthcare, and government may not be fully prepared in time. One of the earliest operational changes in anticipation of quantum threats is the reduction of SSL/TLS certificate lifespans to 47 days. This move, aligned with evolving browser requirements and NIST guidance, is designed to improve crypto agility and security hygiene, helping organizations adapt to a future where static cryptography is no longer viable. Security executives emphasize the need for urgent action, drawing parallels to the unpreparedness seen during the rapid adoption of AI, and stress that building operational readiness for PQC is now a strategic imperative for digital trust and business continuity.
Jun 29, 2026
Lightship Security, an accredited cryptographic security test laboratory and part of Applus+ Laboratories, together with the OpenSSL Corporation, has announced the submission of OpenSSL version 3.5.4 to the Cryptographic Module Validation Program (CMVP) for FIPS 140-3 validation. This submission signifies that the OpenSSL 3.5.4 codebase is complete and that all cryptographic algorithms included in the module have successfully passed both NIST testing and independent laboratory review. The FIPS 140-3 validation is a critical compliance requirement for cryptographic modules used in government and regulated industries, ensuring that the cryptographic implementations meet stringent security standards. The final step remaining in the process is the CMVP’s review and the issuance of the official FIPS 140-3 certificate. OpenSSL 3.5, which was released in April 2025, introduced support for post-quantum cryptographic (PQC) algorithms such as ML-KEM, ML-DSA, and SLH-DSA, aligning with NIST’s ongoing PQC standardization efforts. The submission of version 3.5.4 for FIPS validation is particularly significant as it represents the first move toward a FIPS-validated, PQC-ready cryptographic module, which is essential for organizations preparing for the advent of quantum computing threats. The OpenSSL 3.5.4 FIPS Object Module is designed to be open-source and standards-compliant, making it suitable for deployment across a wide range of government and industry applications. Once the FIPS 140-3 certification is granted, organizations will be able to deploy OpenSSL 3.5.4 in environments that require validated cryptographic solutions, thereby enhancing their security posture and compliance. The collaboration between Lightship Security and the OpenSSL Corporation underscores a commitment to maintaining validated, standards-based cryptography in one of the world’s most widely used open-source libraries. OpenSSL is foundational to internet infrastructure, embedded systems, and enterprise applications, making this validation effort highly impactful. The successful completion of NIST and independent laboratory testing demonstrates the robustness and reliability of the cryptographic algorithms implemented in OpenSSL 3.5.4. The FIPS 140-3 validation process is rigorous, involving detailed technical scrutiny and compliance checks, which OpenSSL 3.5.4 has now largely completed. The announcement has been recognized as a significant milestone in the ongoing effort to provide secure, compliant, and future-proof cryptographic solutions. Organizations across sectors are expected to benefit from the availability of a FIPS-validated, PQC-ready OpenSSL module. The move also supports broader industry and governmental initiatives to prepare for quantum-resistant cryptography. The final certification, once issued, will enable widespread adoption of OpenSSL 3.5.4 in regulated environments. This development is expected to influence cryptographic best practices and compliance strategies globally. The partnership between Lightship Security and the OpenSSL Corporation is anticipated to continue driving innovation and assurance in open-source cryptography.
Jul 12, 2026
Security leaders are increasingly concerned about the impact of quantum computing on existing cryptographic systems, as quantum-inspired algorithms and quantum-ready software begin to appear in enterprise and defense environments. While most organizations are not yet running quantum computers, quantum software is being integrated into mission-critical workflows, often without security teams' full awareness. This integration poses new challenges for visibility, validation, and compliance, requiring CISOs and security operations teams to adapt their approaches to risk management and technology vetting. Despite growing awareness of the quantum threat, a recent survey by the Trusted Computing Group (TCG) reveals that 91% of businesses lack a formal roadmap for migrating to quantum-safe algorithms. Although many security professionals express confidence in their understanding of quantum risks, actual technical preparation remains limited, with most organizations' cryptographic libraries and hardware security modules not yet ready for post-quantum standards. The gap between perceived readiness and actual progress suggests that enterprises may be underestimating the complexity and timeline required to achieve true post-quantum security.
Jun 30, 2026