[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGiqfrBuv6jSmTgzpew2VNA1-G5FCyINpRgMwMAOIrXI":3},{"article":4,"iocs":48,"watch_terms":49,"solutions":50,"lesson":128},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"c47a6604-1fb6-465c-930d-541521d928f0","Post-quantum authentication: Why organizations should start testing certificate ecosystems now","post-quantum-authentication-why-organizations-should-start-testing-certificate-e-146958","Prepare for post-quantum authentication by testing certificate ecosystems now. Learn how Microsoft’s PQC TLS Pilot Program helps advance future readiness. The post Post-quantum authentication: Why organizations should start testing certificate ecosystems now appeared first on Microsoft Security Blog.","Microsoft has launched a Post-Quantum Cryptography (PQC) TLS Pilot Program to help organizations prepare for future authentication systems. While much PQC discussion focuses on data confidentiality, authentication systems relying on certificates and PKI also need to evolve. The program aims to test interoperability and operational readiness with new algorithms, encouraging organizations to inventory certificate dependencies and begin testing now.","Microsoft launches PQC TLS Pilot Program to test post-quantum authentication readiness.","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002F2026\u002F10\u002F08\u002Fpost-quantum-authentication-why-organizations-should-start-testing-certificate-ecosystems-now\u002F","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002FMS_Actional-Insights_Lock.jpg","2026-10-08T20:44:28+00:00","2026-10-08T22:00:12.499147+00:00",7,[17,20,23,25,27],{"name":18,"type":19},"Microsoft Defender","product",{"name":21,"type":22},"Post-quantum cryptography","technology",{"name":24,"type":22},"PKI",{"name":26,"type":22},"TLS",{"name":28,"type":29},"Microsoft","vendor","0493c7e9-989a-4692-b4e6-136f5ec09675",{"id":30,"icon":32,"name":33,"slug":34},null,"Cryptography","cryptography",[36,38,43],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[28,18],{"controls":51,"vendors":124},[52,79,107],{"slug":53,"name":54,"problem":55,"products":56},"patch-management","Automated patch management","Known holes get closed in days, not months.",[57,64,72],{"vendor_slug":58,"vendor_name":28,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":53,"product_name":76,"url":77,"description":78},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":80,"name":81,"problem":82,"products":83},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[84,92,99],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":94,"url":97,"description":98},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"slug":108,"name":109,"problem":110,"products":111},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.",[112,118],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":113,"product_name":114,"url":116,"description":117},"drata","Drata","\u002Fvendor-logos\u002Fdrata.png","https:\u002F\u002Fdrata.com\u002F","Continuous control monitoring and audit readiness across security frameworks.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":119,"product_name":120,"url":122,"description":123},"vanta","Vanta","\u002Fvendor-logos\u002Fvanta.png","https:\u002F\u002Fwww.vanta.com\u002F","Automated evidence collection and continuous monitoring for ISO 27001, SOC 2, NIS2 and other frameworks.",[125],{"slug":58,"name":28,"logo_path":59,"roles":126},[127],"reported_by",{"slug":129,"title":130,"body":131,"framework_refs":132,"framework_notes":143},"organizations-must-begin-testing-post-quantum-certificate-ecosystems-now","Organizations Must Begin Testing Post-Quantum Certificate Ecosystems Now","The transition to post-quantum cryptography (PQC) represents one of the most significant infrastructure overhauls in modern cybersecurity, yet many organizations have not yet inventoried or assessed their certificate and PKI dependencies. Authentication systems — not just encrypted data — are vulnerable to future quantum computing attacks, meaning digital signatures, TLS certificates, and identity frameworks must all be upgraded. Waiting until quantum computers are operationally capable creates a 'harvest now, decrypt later' risk, where adversaries collect encrypted traffic today to break it tomorrow. Organizations that delay testing interoperability and operational readiness with new PQC algorithms risk catastrophic authentication failures when the transition becomes mandatory. Proactive participation in programs like Microsoft's PQC TLS Pilot is essential to avoid rushed, error-prone migrations under pressure.",[133,134,135,136,137,138,139,140,141,142],"NIST SP 800-208 (Recommendation for Stateful Hash-Based Signature Schemes)","NIST FIPS 203 \u002F 204 \u002F 205 (Post-Quantum Cryptography Standards)","NIST CSF 2.0 - Protect (PR.DS): Data Security","NIST SP 800-57 (Key Management Recommendations)","CIS Control 3: Data Protection","CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 16: Application Software Security","ITIL Service Transition - Change Management","GDPR Article 32 (Security of Processing - appropriate technical measures)","NSA CNSA 2.0 Suite (Commercial National Security Algorithm Suite)",{}]