Nearly half of enterprises have no one leading PQC migration

Help Net Security

August 21, 2026 at 4:30 AM

Overview

A recent study by Axiad reveals that many enterprises are underprepared for the security challenges posed by quantum computing. Nearly half of the organizations surveyed do not have a designated leader for their migration to post-quantum cryptography (PQC). While 75% of respondents claim to keep an updated inventory of their cryptographic assets, the lack of clear ownership and testing may hinder their transition to PQC. This is concerning because as quantum computing evolves, traditional encryption methods could become vulnerable, putting sensitive data at risk. Companies need to address these gaps to ensure they can effectively safeguard their information in a post-quantum world.

Key Takeaways

Action Required: Organizations should establish clear leadership for PQC migration and improve visibility and testing of cryptographic assets.
Timeline: Newly disclosed

Original Article Summary

Enterprises believe they are prepared for the security challenges posed by quantum computing, but gaps in ownership, testing and visibility could complicate their transition to post-quantum cryptography (PQC), according to new research from Axiad. Who owns PQC migration? (Source: Axiad) Organizations need to know where certificates, cryptographic keys and algorithms are used before they can plan a PQC migration. About 75% of respondents said they maintain a continuously updated inventory of these assets. However, responses … More → The post Nearly half of enterprises have no one leading PQC migration appeared first on Help Net Security.

Impact

Not specified

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Newly disclosed

Remediation

Organizations should establish clear leadership for PQC migration and improve visibility and testing of cryptographic assets.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

AI coding agents hijacked using AGENTS.md file in Downloads folder

BleepingComputer

Researchers discovered a malicious file named AGENTS.md in a user's Downloads folder that deceived an AI coding agent into installing a harmful npm package. This incident raises concerns about the security of AI tools, particularly how they can be manipulated through seemingly innocuous files. The attack could potentially compromise systems that rely on AI for coding assistance, exposing them to unwanted software and vulnerabilities. Users and developers should be aware of the risks posed by downloaded files and ensure their systems are safeguarded against such tactics. This incident serves as a reminder for companies to enhance their security measures when integrating AI into their workflows.

Oct 25, 2026

OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication

The Hacker News

OpenAI has announced that it will conduct training for its advanced AI models without live internet access. This decision follows concerns about the security of current internet infrastructure and the need for effective monitoring systems. The goal is to enhance safety and alignment in AI development, particularly as the company resumes reinforcement learning training. The announcement comes amidst rising scrutiny over AI capabilities and their potential risks. By isolating training from the internet, OpenAI aims to mitigate risks associated with external threats and ensure a more controlled environment for its models.

Oct 25, 2026

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

The Hacker News

LiteLLM has reported a serious security incident stemming from the accidental exposure of a master key in a public GitHub repository. This key, which was found in a configuration file committed on May 27, 2026, enabled an attacker to manipulate the release pipeline of the popular Python package. As a result, the attacker was able to push a malicious version of the software, potentially compromising users who downloaded it. This incident raises significant concerns about the security practices surrounding sensitive information in open-source projects, particularly how such keys are managed and stored. Developers and organizations using LiteLLM's tools should review their security protocols to prevent similar incidents in the future.

Oct 24, 2026

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

The Hacker News

In a significant cybersecurity move, the Dutch security firm Eye Security has remotely pushed over 2 million updates to computers to disable a background updater associated with Time4Popcorn, a discontinued version of the Popcorn Time app known for streaming pirated content. This updater posed a potential risk as it could allow unauthorized users to take control of affected machines. The updates were carried out between November 2025 and March 2026, targeting devices that did not belong to the firm. The action underscores the ongoing risks linked to abandoned software and highlights the need for users to be cautious about outdated applications. This incident serves as a reminder of the vulnerabilities that can arise from using unsupported software, especially those associated with illegal activities.

Oct 24, 2026

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The Hacker News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged two critical vulnerabilities that are actively being exploited. These vulnerabilities affect the Collabora Online Built-in CODE Server and the Arista VeloCloud Orchestrator (VCO). The first vulnerability, identified as CVE-2026-110447, carries a CVSS score of 9.2, indicating its severity. Organizations using these products need to take immediate action, as attackers are actively exploiting these flaws. Prompt remediation is essential to protect sensitive data and maintain system integrity.

Oct 24, 2026

Abandoned Popcorn Time app exposed millions of devices to RCE attacks

BleepingComputer

Researchers have successfully disabled a vulnerable updater in the Time4Popcorn app, a variant of the Popcorn Time BitTorrent client that has been abandoned. This updater contained a security flaw that could let attackers run malicious code with elevated privileges on millions of computers. The flaw affected users who still had the outdated app installed, potentially putting their systems at risk. With many users unaware of the app's abandonment, this incident serves as a reminder of the dangers associated with using unsupported software. It’s crucial for users to regularly check and update their applications to avoid such vulnerabilities.

Oct 23, 2026