Enterprise Readiness for Post-Quantum Cryptography
Security leaders are increasingly concerned about the impact of quantum computing on existing cryptographic systems, as quantum-inspired algorithms and quantum-ready software begin to appear in enterprise and defense environments. While most organizations are not yet running quantum computers, quantum software is being integrated into mission-critical workflows, often without security teams' full awareness. This integration poses new challenges for visibility, validation, and compliance, requiring CISOs and security operations teams to adapt their approaches to risk management and technology vetting.
Despite growing awareness of the quantum threat, a recent survey by the Trusted Computing Group (TCG) reveals that 91% of businesses lack a formal roadmap for migrating to quantum-safe algorithms. Although many security professionals express confidence in their understanding of quantum risks, actual technical preparation remains limited, with most organizations' cryptographic libraries and hardware security modules not yet ready for post-quantum standards. The gap between perceived readiness and actual progress suggests that enterprises may be underestimating the complexity and timeline required to achieve true post-quantum security.
Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
3 events from the most recent confirmed update back to the earliest known activity.
Industry reporting highlights growing enterprise focus on quantum security risks
Reporting describes quantum computing as moving into real-world workflows and warns that organizations face rising 'harvest now, decrypt later' risks if they delay updating security programs. It emphasizes that enterprises need quantum-aware security frameworks and that post-quantum cryptography is emerging as the most future-proof approach.
NIST leads standardization of post-quantum cryptographic algorithms
NIST is identified as leading efforts to standardize post-quantum cryptography, a key milestone shaping how organizations prepare for quantum-era encryption risks. The reference does not provide a specific event date, so the publication date is used as a fallback.
TCG report finds most businesses unprepared for post-quantum migration
A new Trusted Computing Group report says most organizations understand the quantum threat to current cryptography but lack formal roadmaps and technical readiness for post-quantum migration. It also finds core systems such as crypto libraries and hardware security modules are largely not ready for post-quantum integration.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
2 references tracked. Mallory keeps watching after this page renders.
See the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Related stories
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
C-Suite Readiness for Post-Quantum Cryptography and Emerging Quantum Risk
Enterprise security leaders are split on how urgently to prepare for **post-quantum cryptography (PQC)** as quantum computing remains an uncertain but potentially disruptive threat to widely used public-key algorithms such as **RSA**. Some CIOs and CISOs characterize quantum as a low near-term priority due to unclear timelines, while others argue preparation is unavoidable and should begin now as a business risk decision rather than a purely technical one. In healthcare specifically, a PwC survey of 381 global healthcare executives (May–July 2025) found organizations are **cutting cybersecurity budgets** under financial pressure even as threats intensify, with **data protection** the top spending driver but only **35%** reporting data risk controls across the full data lifecycle (vs. **44%** cross-industry). Healthcare leaders cited **cloud-related threats**, **quantum computing risks**, and attacks on **connected products** as areas of lowest preparedness; in pharma/life sciences, more than half reported they have not started quantum-resistant measures, and only **7%** plan to allocate budget toward quantum readiness in 2026—highlighting a gap between acknowledged quantum risk and funded mitigation.
Apr 1, 2026
Post-Quantum Cryptography Migration and Its Impact on Security Infrastructure
Security experts are intensifying efforts to develop and implement post-quantum cryptography (PQC) in anticipation of the eventual arrival of quantum computers capable of breaking current encryption algorithms, a milestone referred to as "Q-Day." The transition to PQC is recognized as a complex, multi-year process that requires not only new cryptographic algorithms but also significant changes to cybersecurity infrastructure, including the adoption of hybrid solutions and the integration of PQC into zero-trust architectures. High-security sectors are particularly urged to begin migration early to mitigate the risk of "harvest now, decrypt later" attacks, where adversaries collect encrypted data now to decrypt once quantum capabilities are available. Industry analysts highlight that the migration to post-quantum encryption presents unique challenges compared to previous cryptographic upgrades, as it involves extensive updates to hardware, software, and system architectures. While some areas, such as blockchain, are not immediately threatened by quantum computing, the scale and complexity of the migration require coordinated efforts across security, product management, and IT operations. Experts emphasize the need for proactive planning and the adoption of best practices to ensure a smooth transition before quantum computers become a practical threat to digital security.
May 5, 2026
Quantum Computing Threats Prompt Urgent Shift to Post-Quantum Cryptography
Cybersecurity leaders are raising alarms about the accelerating timeline for quantum computing to break current public encryption methods, a milestone known as Q-Day. Experts warn that Q-Day could arrive as soon as 2030, threatening to undermine the core trust mechanisms of the internet, including HTTPS, digital certificates, and public-key infrastructure. In response, governments and industries are developing plans to transition to post-quantum cryptography (PQC), but concerns remain that critical sectors such as banking, healthcare, and government may not be fully prepared in time. One of the earliest operational changes in anticipation of quantum threats is the reduction of SSL/TLS certificate lifespans to 47 days. This move, aligned with evolving browser requirements and NIST guidance, is designed to improve crypto agility and security hygiene, helping organizations adapt to a future where static cryptography is no longer viable. Security executives emphasize the need for urgent action, drawing parallels to the unpreparedness seen during the rapid adoption of AI, and stress that building operational readiness for PQC is now a strategic imperative for digital trust and business continuity.
Apr 17, 2026