New Forescout Data Reveals Slow Progress Toward Quantum-Safe Security

Despite growing awareness of quantum computing risks, nearly 90% of SSH servers globally remain vulnerable to future quantum-enabled attacks due to slow adoption of post-quantum cryptography (PQC) standards. The root cause lies in inadequate vulnerability management and configuration practices — organizations lack full visibility into their cryptographic asset inventories, making it impossible to prioritize or plan migration effectively. This matters because adversaries may already be harvesting encrypted data today using 'harvest now, decrypt later' strategies, meaning the window to act is shorter than most assume. The uneven progress across IT and cyber-physical systems further amplifies risk, as legacy operational technology (OT) environments are notoriously difficult to update. A structured, multi-year migration plan backed by rigorous asset discovery is urgently needed.