Java 27 is now available with hybrid post-quantum key exchange for TLS 1.3, giving Java teams a migration path toward quantum-resistant communications without abandoning current cryptography. The release also makes G1 the default garbage collector in every environment and adds performance and productivity improvements aimed at AI-heavy workloads.

Source

OpenSSL 4.1.0 alpha 1 gives security teams an early test build with DTLS 1.3 and hardware-accelerated post-quantum cryptography. The release improves performance on several server architectures, but it also removes legacy platform and configuration options that may affect existing build pipelines.

Source

Cloudflare’s Automatic Key Exchange is now reducing TLS 1.3 origin handshake delays while automatically shifting eligible connections to post-quantum protection. The rollout has cut HelloRetryRequests from about 52% to 3.7%, lowered p90 handshake latency by more than 150 ms, and helped post-quantum origin traffic grow to roughly 45 billion connections per day.

Source

The G7 Cybersecurity Working Group is urging organizations to begin their post-quantum cryptography (PQC) migration now, warning that quantum computers could threaten widely used public-key encryption sooner than expected. Attackers can already collect encrypted data and store it for future decryption, making long-lived government, personal, and business information an immediate concern.

Source