Microsoft will replace the Windows Production PCA 2011 code-signing certificate before it expires on October 19, 2026, then move Windows production signing toward post-quantum cryptography in 2027. The transition described in KB5125813 could break software and deployment processes that hardcode certificate identities, algorithm names, or signature parameters.

Source

Microsoft is warning that post-quantum cryptography cannot be deployed safely by simply swapping encryption algorithms. Threat modeling must first uncover hidden cryptographic dependencies, ownership gaps, and architecture limits that automated scanners may miss. Scanners cannot see the whole cryptographic picture

Source

A preliminary quantum algorithm from AWS cryptographer Daniel R. Simon claims polynomial-time progress on the Dihedral Coset Problem (DCP), a problem connected to lattice mathematics behind post-quantum cryptography (PQC). The result could affect long-term security assumptions, but it does not currently break ML-KEM, ML-DSA, or any deployed cryptographic system.

Source

Hewlett Packard Enterprise (HPE) and EigenQ (a cybersecurity company focused on post-quantum security) are taking a retrofit-first approach to post-quantum security, allowing organizations to add quantum-resistant protection to existing server infrastructure instead of replacing entire estates. The PCIe-based solution targets defense, government, critical infrastructure, healthcare, and financial services customers facing tighter security and compliance timelines.

Source