The 47-day certificate era is coming - and your #discovery tools are about to break. ⏳🔒 Nearly all security and infrastructure teams know about Ballot SC-081v3 passed by the CA/Browser Forum: • March 15, 2026: Validity capped at 200 days • March 15, 2027: Ceiling drops to 100 days • March 15, 2029: Mandatory 47-day max lifespan We talk often about auto-renewals, but we aren't talking enough about discovery. If your discovery strategy relies on active network port scans run m

Mexico is in the developing stage of PQC adoption. The country faces elevated quantum risk due to classical cryptography across financial services, government systems, and telecom networks. Movement has begun through national cybersecurity reform and early PQC capability building, but Mexico still has no formal PQC migration roadmap. Government Posture: Cybersecurity Plan 2025–2030 Mexico’s Digital Transformation and Telecommunications Agency launched the National Cybersecur

Australia has moved from awareness to structured execution under the Australian Signals Directorate (ASD) and Australian Cyber Security Centre (ACSC) guidance. It is not the loudest, but it is the most disciplined in the Five Eyes on migration planning. 1. National Mandate: ASD and ACSC’s PQC Transition Framework The ACSC’s Planning for Post Quantum Cryptography guidance (2022–2025) sets a three stage LATICE based timeline: Refined transition plan by end 2026 Migration begun

#PQC and #Data: The Three #Cryptographic Domains Post-quantum risk is about the data being protected, not the algorithms themselves. Every cryptographic dependency maps to one of three data states. If you do not know which state you are protecting, you do not know what you are securing. #Data in #Motion Information moving across networks or channels. TLS sessions, VPN tunnels, 5G key agreement, SWIFT messages, API calls. Quantum relevance: interception and harvest. If the con

The disclosure of 73,932 compromised Fortinet firewall URLs is not just another VPN incident. It is a cryptographic governance failure at global scale and a perfect illustration of why organisations must treat HNDL (Harvest Now, Decrypt Later) and HNFL (Harvest Now, Forge Later) as present-tense operational risks rather than abstract quantum-era hypotheticals. The incident was empirically documented by Volodymyr "Bob" Diachenko, who discovered the attacker-controlled server c

Why organisations are suddenly asking about #QBOM and what it may actually mean Over the past 48 hours we have seen a surge of calls from Indian organisations and global vendors operating in India. The question has been: “What is a QBOM, and do we need to produce one?” The confusion comes from India’s National Quantum Mission report. It references QBOM in the glossary, but does not define it, scope it, mandate it, attach a schema, or link it to procurement or certification. S