Skip to content

27 October 2026

NIST publishes a high-level road map for moving to post-quantum cryptography

Generic image of server racks in a data centre room, with a mobile monitor cart in front of them. It is not a picture of NIST, its campus or the report.
Generic image of server racks in a data centre room, with a mobile monitor cart in front of them. It is not a picture of NIST, its campus or the report..Photo: Brett Sayles / Pexels, Pexels License

The US National Institute of Standards and Technology (NIST) released a final report on 27 October 2026: NISTIR 8547, Transition to Post-Quantum Cryptography Standards. It sets out NIST's approach to moving from quantum-vulnerable algorithms to quantum-resistant standards, and identifies quantum-vulnerable algorithms in existing NIST standards. NIST says National Security Memorandum 10 established the year 2035 as the primary target for federal migration. Executive Order 14412 accelerated this timeline, requiring federal high-value assets and high-impact systems to migrate by 2030 for key establishment and 2031 for digital signatures. NIST says NISTIR 8547 supports these migration timelines.

Country profile: United States

IQGov summarises the source in its own words and links to it.

More news in brief

All news
Generic photo, not a Swiss document: an Austrian and a Portuguese passport and a Bulgarian identity card on a grey surface. It does not show the new Swiss biometric identity card.

2 Nov 2026

Switzerland opens applications for an optional biometric identity card

From 2 November 2026, Swiss citizens can apply, if they wish, for a new identity card with a chip holding a facial image and two fingerprints, a federal announcement of 19 October 2026 says. The federal release says the fee for the biometric card is the same as for the chipless card, and recommends the biometric card for people travelling within the EU who want an ID that can also be read and checked electronically. It says the card is to be distinguished from the electronic proof of identity (e-ID). Südostschweiz reported on 31 October 2026 an adult fee of 65 francs plus 5 francs for delivery.

23 Oct 2026

Nextgov reports GSA signed its first direct OneGov deal with a small business

The General Services Administration (GSA) has signed a OneGov agreement with US AI. Nextgov reports that US AI is a North Bethesda, Maryland, company and that it is GSA's first direct-to-government OneGov deal with an 8(a) certified small business. GSA's listing offers federal agencies up to 30 per cent off eligible software licences, plus two-week proof-of-value pilots for $1, on a FedRAMP High-authorised platform. GSA describes the offer as a limited-time offering that expires on 30 September 2028. The entry shows no signing date. GSA lists these terms under the US AI entry.

Aerial view of the Virginia State Capitol in Richmond, a white columned building on a hill, with downtown office buildings behind it and autumn trees in front.

Richmond · 23 Oct 2026

Virginia orders a statewide plan against AI-driven cyberattacks

Governor Abigail Spanberger signed Executive Directive 6 on 23 October. It tells the Secretary of Public Safety and Homeland Security to set up a Cyber Consortium, which must adopt a statewide cyberattack prevention and response plan and an infrastructure-hardening plan that address AI-related risks. AI companies are to be asked to share with the Cyber Consortium the confidential briefings and reports they give other government bodies, including New York's Department of Financial Services under the RAISE Act and the European AI Office. The secretary is to aim for briefings on AI risks at least quarterly, and a tabletop exercise at least yearly. Other states will be invited to join.

Street-level view of Kioi Tower at Tokyo Garden Terrace Kioicho in Tokyo, with a colourful flower sculpture in the plaza in front of its entrance and two taxis passing on the road

22 Oct 2026

Japan's Digital Agency says a vendor breach may have exposed personal data

Japan's Digital Agency said on 22 October that data may have leaked after a third party accessed the cloud environment of Studio, whose service ran part of its website. The agency lists five categories of potentially affected contact-form submissions, each a maximum, together at most 13,323, including up to 3,661 enquiries about its vaccination certificate app, plus 35 staff or contractor accounts. The agency says the scope is being examined and no misuse has been confirmed. Aomori Prefecture said on 21 October that data on 206 event applicants, collected by its contractor on Studio, may have leaked.