Two Clocks Are Running Out at Once, and Almost Nobody Is Watching Both

Every CISO I talk to right now is juggling two deadlines that feel unrelated and aren’t. One is the slow-motion arrival of quantum computers capable of breaking the public-key cryptography that underpins basically everything — TLS, SSH, JWTs, code-signing. The other is the much faster arrival of AI-assisted coding tools that are shipping security-critical code nobody has fully reviewed.