Three PQC deadlines hit CISOs’ desks this year. One already passed quietly. One just got paused. The third isn’t moving — and it’s the one with real teeth. FIPS 140-2 → Historical (Sept 21, 2026): NIST’s CMVP moved every FIPS … Read More
[caf_filter id='9570']
The PQC gap sitting right inside your build pipeline
“Harvest now, decrypt later” (HNDL) has dominated the post-quantum cybersecurity narrative for years. But on October 1, the NSA formally framed a second, equally critical threat and most modern cryptographic inventories aren’t equipped to catch it. Here’s how the NSA … Read More
The Public Web Is Moving to Post-Quantum CAs. Is Your Infrastructure Ready?
Every certificate securing HTTPS today runs on RSA or ECDSA math that quantum computers will eventually break. On September 29, Cloudflare said it’s becoming a public Certificate Authority built for what comes next — and the design shows exactly how … Read More
The IETF just standardized the exact post-quantum key exchange already running in your browser — and Cloudflare’s own data shows most servers on the internet still don’t know they support it.
RFC 10024, published August 10, 2026, formalizes three hybrid mechanisms for TLS 1.3, pairing ML-KEM (FIPS 203) with classical elliptic curve exchange so a break in either the lattice math or the curve math alone doesn’t break the session: The … Read More
ML-KEM is mathematically sound. The library shipping it wasn’t — and for eight months, nobody noticed
ML-KEM is mathematically sound. The library shipping it wasn’t — and for eight months, nobody noticed. In August, researchers (including Anthropic’s Nicholas Carlini) disclosed two implementation flaws in wolfSSL’s hand-optimized ML-KEM decapsulation code. Both are now patched, but the mechanism … Read More
October 22, 2026 isn’t a typo — it’s 28 days out, and it’s the date every U.S. federal civilian agency owes OMB a completed post-quantum migration plan
Here’s what changed and why it matters even if you’re not a federal CISO: The mandate. OMB Memorandum M-26-15, issued June 24 under Executive Order 14412, gave civilian agencies 120 days to submit PQC migration plans — risk-based system prioritization, … Read More
A spreadsheet listing your RSA certificates is not a Cryptographic Bill of Materials. It’s a liability with a fancier name
Entrust recently expanded its Cryptographic Security Platform specifically to address this gap—adding CBOM import/export, dependency mapping, and Ansible-based certificate automation. The vendor matters less than the broader industry signal: static crypto inventories are getting deprecated in favor of systems that connect … Read More
Why Single-Point Scanners Miss 50% of Your Crypto—And How QuantVision Fixes It
As organizations brace for the Post-Quantum Cryptography (PQC) transition mandated by NIST and global compliance frameworks, one foundational task stands in every CISO’s way: Building a complete Cryptographic Bill of Materials (CBOM). You cannot migrate what you cannot see. But … Read More
You can’t get to PQC without TLS 1.3.
If you are leading cybersecurity or post-quantum readiness efforts, this isn’t just a best practice—it is the foundational prerequisite for quantum resilience. As organizations gear up for Post-Quantum Cryptography (PQC) migration, many overlook a critical dependency: your network layer must … Read More
Navigating Post-Quantum Cryptography in Practice: Lessons from OpenSSL and Enterprise Deployment
The migration to Post-Quantum Cryptography (PQC) is transitioning rapidly from theoretical standardization to real-world software integration. For enterprise engineering teams and CISOs, understanding how foundational cryptographic libraries implement PQC—and how these changes impact network performance—is critical to building a secure, … Read More