Preparing space for Q-day.

Summary

---

T-Minus: Space-Cyber Briefing

"Preparing space for Q-day."

Host: Maria Varmazas, N2K Networks
Guest: Eddie Zurvigan, CEO of Quantum Exchange
Date: July 12, 2026

---

Episode Overview

This episode focuses on the impending challenges and necessary preparations in the space sector as we approach “Q-day”—the moment when quantum computers pose a real threat to classical encryption. Host Maria Varmazas and guest Eddie Zurvigan delve into the intersection of quantum innovation, cybersecurity, satellite communications, and policy, highlighting the urgency to make space infrastructure resilient in a post-quantum future.

---

Key Discussion Points & Insights

1. The Quantum Executive Order and Its Context

• Quantum Innovation EO (executive order) Highlights
  • The June 22, 2026 executive order “Ushering in the Next Frontier of Quantum Innovation” is designed to boost quantum technology in U.S. agencies and industries, with space technology called out specifically.
  • The EO is recognition of both the speed of quantum’s progress and adversarial gains in the field.
  • Quantum is not new, but pressure to transition is now immense, especially for critical infrastructure like satellites.
  • (04:45) Maria Varmazas: “The executive order that recently came out about Quantum was huge, not just on the cybersecurity side, but also on the space side.”
  • (05:17) Eddie Zurvigan: “It’s an incredible technological run that for 50 years...everything that we do in the digital world has been secured by essentially three algorithms.”

2. The Race Against Adversaries

• There is no clear “Q-day” date, but adversaries are investing heavily—perhaps more than the U.S.—in quantum capabilities.
• Recent breakthroughs (referenced: Deep Seek) suggest adversaries may be further along than previously thought.
• Ultimately, when adversaries can break current encryption, they won’t announce it—they’ll silently exploit it.
• (07:24) Eddie Zurvigan: “We just know they’re probably a little further advanced than we gave them credit for...they only have to be right once; on defense, you’ve got to be overwhelming in your response.”

3. Unique Space Domain Challenges

• Space is not just a transport layer; it’s an ecosystem of long-lived, hard-to-access assets.
• Threat vectors include satellite-to-satellite authentication, satellite-ground handshakes, and ground station vulnerabilities.
• Once launched, satellites are difficult or impossible to update physically; crypto choices must be effectively “future proof.”
• (09:03) Eddie Zurvigan: “The biggest issue with space is that...the encryption that’s on the satellite when it’s launched is what it’s going to have.”

4. Crypto Agility: Architecture over Algorithms

• The ability for systems to adapt to new cryptographic algorithms is now crucial (“crypto agility”).
• NIST may approve more quantum-resistant algorithms, so security can’t be “set and forget.”
• The real need: an architectural solution enabling seamless, scalable change—like in-air refueling of an aircraft—rather than a one-off math fix.
• Quantum Exchange's model: separating key generation/delivery and using a control/management plane.
• (10:32) Eddie Zurvigan: “This is an architectural problem, it’s not a math problem...If you treat it as a math problem, you’re beholden to the algorithm that maybe today works but might not work tomorrow.”

5. Aligning Policy, Budgets, and Reality

• Agencies and CISOs increasingly grasp quantum’s urgency, shifting conversations from “Is this real?” to implementation details.
• Biggest current obstacle: funding. The threat is recognized, but without budgets to match, solutions stall.
• Executive orders set direction, but legislative (Congressional) backing and funding is required to implement change.
• (15:17) Eddie Zurvigan: “My biggest worry is not that people understand the problem and are willing to do something about it, but the lack of funding in order to move this forward.”

6. Direct Call to the Space Industry

• Concern: Commercial and some government space projects are not prioritizing security at the level Fed agencies are.
• As satellites are increasingly deemed critical infrastructure, they must be brought under stricter regulatory mandates, especially regarding post-quantum readiness.
• (17:55) Eddie Zurvigan: “I’m not seeing the level of attention...on some of these big, big space projects that we’re seeing...we’ve got to come now, convince them that hey, this is something that needs to be done now…”

7. Final Thoughts: AI and Quantum—The Looming Storm

• Forthcoming integration of AI’s “brains” and quantum’s “brawn” could create unprecedented digital threats.
• The moment to architect robust, adaptable systems is now—after launch, it’s too late.
• (19:03) Eddie Zurvigan: “It’s not gon[na be] too long before we have this deadly combination of AI and quantum getting together...as I like to call AI the brains and quantum the brawn and really create a wreaking havoc on our digital world.”

---

Notable Quotes & Memorable Moments

• On the Irreversibility of Space Decisions

  • “You can't send the Maytag repairman up to fix the encryption. The encryption that's on the satellite when it's launched is what it's going to have.”
    — Eddie Zurvigan [09:03]

• On Policy and Budget Alignment

  • “My biggest worry is not that people understand the problem and are willing to do something about it, but the lack of funding in order to move this forward.”
    — Eddie Zurvigan [15:17]

• On the Coming Synergy of AI and Quantum

  • “Anything that we can do to further the case that architecture is what ultimately will guide us I think is time well spent and money well spent.”
    — Eddie Zurvigan [19:03]

---

Timestamps for Key Segments

• [02:11] – Episode setup and Quantum EO background
• [05:17] – Why quantum matters now; NIST and post-quantum transition
• [07:24] – U.S. vs. adversaries in quantum; risk and uncertainty
• [09:03] – Space-specific quantum risks: authentication, ground link vulnerabilities
• [10:32] – Crypto agility: architectural vs. algorithmic solutions
• [15:17] – Call for budget alignment with emerging threats
• [17:55] – Concerns about commercial space sector’s lag
• [19:03] – Closing thoughts: necessity of architecture and future risks

---

Takeaways for Space Industry Leaders

• Start architecting for crypto agility—static solutions will not suffice.
• Advocate for and secure the necessary budget before adversaries exploit quantum advances.
• Treat satellites as critical infrastructure and adhere to emerging post-quantum regulatory mandates.
• Understand the urgency: space assets cannot be retrofitted post-launch and time is running short as AI and quantum advance together.
• Plan for an evolving threat landscape, not a one-off “Q-day.”

---

End of summary.

Transcript

[Maria Varmazas]

You're listening to the Cyberwire Network powered by N2K.

[N2K CyberWire Announcer]

If you are heading to Black Hat USA this year, make plans to visit the Spectre Ops Kennel Club. As the creators of Bloodhound, the Spectre Ops team will host talks, workshops and hands on sessions aimed at helping you understand AI accelerated attack paths to the latest identity tradecraft and how to build your own open graph collector. Visit SpectreOps IE to pre register and learn more. While you're at the Spectrops Kennel club, visit the N2K CyberWire podcast studio where we'll be capturing expert perspectives and conversations from across Black Hat. We'll see you there.

[Eddie Zurvigan]

Are all batteries the same?

[N2K CyberWire Announcer]

That's like asking if all soccer players are the same. Take Messi, the most decorated player ever. Is there any other player who has achieved that? No, just him.

[Eddie Zurvigan]

Now take Duracell.

[N2K CyberWire Announcer]

Is there any other battery with power boost ingredients inside? No, just Duracell. Remember, goats only trust goats because they're built different and Messi only trusts Duracell.

[Eddie Zurvigan]

Well, I got to tell you, I'm, I'm a little concerned because I don't see the attention from a security standpoint on some of these big, big space projects that we're seeing. I'm not seeing the level of attention that, that I'm seeing in other call it on the Fed side, Fed, civilian and Dow. It's really beholden on us that kind of really stress this and make sure that especially as satellites are considered critical infrastructure, that they fall under some of the governing bodies, if you will, in regulatory environment regarding critical infrastructure that are really pushing this kind of post quantum mandate.

[Maria Varmazas]

Welcome. I'm Maria Varmazas and you're listening to T Minus Space Cyber Briefing. In this show we examine the evolution of cybersecurity in the global and orbital infrastructure and that powers, protects and connects our lives. On June 22, 2026, the Trump administration issued an executive order titled Ushering in the Next Frontier of Quantum Innovation. Its goal is to strengthen quantum technology development in key US Agencies and industries. Space technology got a specific call out in the Quantum eo, as one might shorthand it. And in my chat today with Eddie Zurvagon, CEO of Quantum Exchange, we focus on space specific cyber considerations for when we officially enter a post quantum world. And that day is coming fast. So how can an industry that historically has not exactly been known for its agility even keep ahead of fast accelerating risk? That Q day in the mirror is indeed closer than it may appear.

[Eddie Zurvigan]

Eddie Zurbigan, CEO of Quantum Exchange I've been in the role for about six years. Prior to that, I was a recovering banker slash investor at Morgan Stanley, where I spent the better part of 15 years investing in what I would call transformational technologies. Companies like Digital Globe, which became Maxar, which was the first high resolution, commercially available satellite imaging company. Another company that's been in the news a lot lately, Bloom Energy. So was an original investor back in 2007 when I was with Morgan Stanley, investing in the need for distributed power generation, which is now really coming full circle as AI data centers take the front page in terms of the need for distributed power. And then when the opportunity about six years ago came about to take over as CEO of a company that I had been previously an investor in, I really jumped at the opportunity, not knowing exactly when the market would materialize, but knowing that it would be the most consequential transformation in the digital economy that certainly we've seen in many, many years. And excited to be a part of it with what we think is superior technology.

[Maria Varmazas]

Oh, fantastic. Well, Eddie, I'm so excited to be speaking with you because the timing is just perfect given your area of expertise and what's been going on in current events. The executive order that recently came out about Quantum was huge, not just on the cybersecurity side, but also on the space side. And I'm wondering if you could maybe give me a bit of, given your area of expertise, some context around this eo. And why now? Why is Quantum suddenly getting all of this emphasis? I mean, it's not a brand new thing, but why in this moment is this happening?

[Eddie Zurvigan]

Well, I think obviously 2016, NIST was kind of in charge or charged with the task of kind of figuring out the next algorithms that will take us into the post Quantum age. And, you know, you have to take a step back and realize that it's an incredible technological run that for 50 years, basically everything that we do in the digital world has been secured by essentially three algorithms. And they have changed a little bit over time, but essentially there are three algorithms that have kind of underpinned our security. And in that period of time, it's an extraordinary technological run. But unfortunately for us, the kind of compute capabilities that Quantum brings into the equation now are exactly the compute capabilities that will eviscerate asymmetric encryption, which is what we've relied on. And so NIST 2016 was in charge with looking at, okay, what are going to be the algorithms that are going to take us into the next generation, if you will, of encryption and the first one was approved in 2024, which was ML10ML chem 1024. And then HQC was added last year. And so now you're starting to see the actionable algorithms come into play. Right. Prior to that, you couldn't really do anything because there wasn't a NIST approved algorithm. So as it relates to the federal government, which would be probably closest to understanding the severity of the problem. Right. They are now actionable. And I think it really took us into overdrive last summer with Deep Seek and the release of Deep Seek and I guess the new understanding that maybe the other side of the ledger was much more advanced, if you will, than maybe we had previously given them credit for.

[Maria Varmazas]

Yeah, yeah, I know I'm jumping around a little bit, but I'd love for you to speak a little bit about that too, before we get into sort of what this all means for space and such, broadly the landscape of quantum. Right now. Where are United States compared to maybe our adversaries? Where are we? Are we about only even playing field or does it seem like we're falling behind?

[Eddie Zurvigan]

Well, unfortunately, like, like many problems that have some specific date, this one does not. We don't know where, where our adversaries are. We just know they're probably a little further advanced than we gave them credit for. And they're also spending a lot of money towards it. Right. Much more so in the recent past to what we have spent here in the US So that combination is not a, not a good combination for us. And you know, I was, I was listening to Nikesh Aurora's earnings call a couple of weeks ago where he talked about Mythos and using Mythos and, and the realization that 30% of the mythos false positives, right, from, from a cyber perspective still require attention. And when you think about adversaries, they only have to be right once on the defense. You've gotta be overwhelming in terms of your response. So that's created a, that's created a, a rather long, long pole terms of what we need to solve for. But suffice to say, when the adversary has the capability, they will not be broadcasting it to the world.

[Maria Varmazas]

Absolutely. Makes sense. Yeah, appreciate that. So let's bring it to the space domain and drill in a little bit there. I imagine for some of my listeners who are maybe less aware of what's going on within the space domain regarding quantum and quantum communications, they might be thinking of space as sort of just a transport layer. Can you give me a sense of the, of the very broad implications of, of you know, of quantum for space. And let's just start there and then drill into where we're going with this.

[Eddie Zurvigan]

So as it relates to the security aspects to it, there are a couple of threat vectors that kind of surface. One is the ability to authenticate the space assets. Meaning there are going to be a lot of inter. Interspatial communications. Right. Between satel. Right. Inter satellite communications that need to be authenticated. Are you really talking to who you think you're talking to and not being spoofed? Right. So that's, that's not even getting to the ground. And then obviously the comms between the satellites and the ground station are ripe for an attack. Why? Because we know exactly when the satellite is going to actually do the handshake, if you will, from a cryptographic perspective, because it's when that the ground station and the satellite can communicate and then you have from the ground station in which is also another vulnerability. The biggest issue with space is that unfortunately like a lot of terrestrial networks, you can't send the Maytag repairman up to fix the encryption. The encryption that's on the satellite when it's launched is what it's going to have. And many of these satellites are long lived assets that need to be up there for a while and others are rather short lived. So it's less, less of an issue. But, but any meaningful constellation up there has to consider post quantum crypto and the agility that you need to meet these threats as they come due, truly.

[Maria Varmazas]

So yeah, how do you essentially future proof something like that that you know, has a lifespan in terms of not just years but potentially decades.

[Eddie Zurvigan]

Yeah, that's, you know, that's a, it's a really good question because many people throw around the term crypto agility and crypto agility means, you know, the ability to handle new, not only threats, but new algorithms as they come due. There's NIST has another something like 44 algorithms that are still in review that could be approved. So it's clear to me that they don't think this is a one and done, set it and forget it, whatever you want to call it. This again, Unlike the last 50 years, this is going to be an evolving threat that we're going to have to meet head on. And so therefore, as I like to articulate, not only internally but with our team, but also as it relates to customers and thought leaders on the subject, this is an architectural problem. It's not a math problem or a physics problem. And if you treat it as a math problem, then you're beholden to the algorithm that maybe today works but might not work tomorrow. And even then you might have to change. ML Chem 1024 might become ML Chem 2048. And what do you do in order to be able to change, but more importantly be able to do this at scale without bringing down the network? And so much of what we talk about is what is and what is not crypto agility. To us, what crypto agility is is the ability to manage your cryptography without affecting your network. In other words, I like to simplify it by saying what we do is in air refueling of the jet, the jet doesn't have to land in order for it to be refueled and then take off. We can accommodate changes in algorithm, audit, auditability, automation, anything that needs to happen. That when you have a management plane that is now taking over your encryption and that's what we do, we create a management plane by separating key gener and delivery from the data plane and putting in its own control plane, much like we did with identity and access management years ago.

[Maria Varmazas]

Now that we have a sense of perhaps what needs to be done in a post quantum world for space cybersecurity, let's take a quick break now and when we get back we'll kick up on policy wise what needs to happen next. Stay tuned.

[N2K CyberWire Announcer]

This episode is supported by Black Hat usa. If you follow the research, you know a lot of it breaks on. Black Hat stages hundreds of peer reviewed briefings, more than 100 hands on trainings, and the largest business hall in Black Hat's history. Six days to learn the skills you'll need tomorrow, August 1st through the 6th. Use code CYBERWIRE for 200 off your briefings [e-mail] we'll see you in Vegas. AI is making phishing attacks faster, more convincing and harder for people to spot. And traditional security awareness and phishing training weren't designed for this level of attack. HOX Hunt helps security teams prepare employees for the attacks they face every day with personalized phishing training that adapts to each employee and reduces risky behavior over time for it and security leaders looking to strengthen their human layer of defense without adding more manual work. Visit hoxhunt.com cyberwire to learn more. That's h o x h u n t.com cyberwire.

[Maria Varmazas]

And we're back. Let's continue on with my conversation with Eddie Zurvigan, CEO of Quantum Exchange. I'm thinking agility is not often a word that we hear in the context of anything space related. Which is, you know, a shame. And I know people are really working hard to change that, but it's just, it's the reality of the years it takes to get a mission into, into orbit. And it's a fascinating challenge of when the on the ground reality is changing so fast. How can these systems that take so long to make and stay so long on orbit, how can they possibly keep up? So it's not a. It's certainly not a hopeless situation. I just. It's a fascinating adaptation that systems that we're all interacting with have to, have to make. And I'm wondering also about what other unique challenges our space systems are dealing with in the context of quantum that maybe we haven't mentioned. Is there, is there anything else that our listeners should know?

[Eddie Zurvigan]

Well, I think also I think what I spend a lot of time in D.C. advocating for is to align budget with the problem. Right. I think this problem has come much faster than anyone previously thought. And what I mean by that is I think people are starting to realize that. Yeah, sure. The. I mean, you know, five, six years ago when I started, I would have a conversation with a ciso and we'd spend the first half hour of the conversation talking about quantum, you know, computers and why the threat, the ability to. The ability to be able to back into the private key from the public, all that stuff. Now it's not at all now, it's basically, how do you fit into my network? Exactly. And I think that's a much better conversation to have. And as you get to federal agencies, whether it be civilian, Department of War, it's clear that there's a recognition of the threat that's there. And now we need to align federal budget to it. And given the dysfunctionality in our federal government right now, my worry is, my biggest worry is not that people understand the problem and are willing to do something about it, but the lack of funding in order to move this forward. I can't see of a bigger issue, certainly with regards to the federal government and soon to be the critical industries such as healthcare, financial services, critical infrastructure. But first, the government, right? They're the closest to the problem. They understand the threat. And so we need to get money behind the understanding in order to really make this work.

[Maria Varmazas]

I'm wondering, did you find the executive order to be a heartening sign or is it just not enough of a concrete movement?

[Eddie Zurvigan]

Well, I mean, obviously executive orders on the, on the executive side of things. Right. So they don't control the purse strings. That. That's up to Congress.

[Maria Varmazas]

Yeah.

[Eddie Zurvigan]

But, but I think it, it stresses the severity of the problem. We moved the timeline in from 2035 to 2030. I think that's, that's a pretty good indicator of where they think directionally this is going. So now we just need Congress to match that from, from a budget perspective. And it doesn't take a whole heck of a lot of money, especially if you want to do it right and you want to do it in a way that gives you, as you mentioned, maximum flexibility in the future, which is everything. The last thing you want is to have to put in place a whole system that needs to be ripped and replaced at some point in the future.

[Maria Varmazas]

Yeah, absolutely. And I'm wondering also the takeaway for folks in the space industry about essentially future proofing, if one can really do such a thing. But building in that agility, what do you think that folks in the industry should also know?

[Eddie Zurvigan]

Well, I got to tell you, I'm, I'm a little concerned because I don't see the attention from a security standpoint on some of these big, big space projects that we're seeing. I'm not seeing the, the level of attention that, that I'm seeing in other call it on the Fed side, Fed civilian and Dow. And so the first thing is we've got to come now, convince them that hey, this is something that needs to be done now and then start thinking about it. Architectural. As I mentioned, once you launch a satellite, it's really tough to, to, to correct things because obviously you can't get out the satellite, the physical, the, the physical changes that need to be made. So I think it's, it's, it's, it's really beholden on us to kind of really stress this and, and make sure that especially as satellites are considered critical infrastructure, that they fall under some of the governing bodies, if you will, in regulatory environment regarding critical infrastructure that are really pushing this kind of post quantum mandate.

[Maria Varmazas]

That's a fascinating, fascinating point there, Eddie. I want to be mindful of your time. If there's anything else you want to leave our audience with before we close out the floor is yours?

[Eddie Zurvigan]

Yeah, no, I think it's been a great conversation. I really appreciate you taking leadership and ownership on this very, very important issue, especially as it relates to space, because of exactly the points that I make, which is you can't send the Maytag repairman up there to fix it once it's done. So it's really, really important that we get it right and we get it done soon because it's not gon too long before we have this deadly combination of AI and quantum getting together and as I like to call AI the brains and quantum the brawn and really create a wreaking havoc on our on our on our digital world. And so anything that we can do to further the the case that architecture is what ultimately will guide us I think is is time well spent and money well spent well.

[Maria Varmazas]

Eddie, thank you so much for speaking to me and our whole audience about this. This is an extremely important topic and I greatly appreciate your time and expertise on this. So thank you so much for joining me today.

[Eddie Zurvigan]

Thank you so much Maria. Really appreciate the time.

[Maria Varmazas]

And that's T Minus Space Cyber Briefing brought to you by N2K CyberWire. If you like what you heard today, you will also enjoy our newsletter, Signals and Space. You'll get research and notes pulled together by our producer Ethan Cook and me, along with this week's top Space Cyber news stories. Subscribe by visiting TheCyberWire.com newsletters We'd love to know what you think of this podcast. Your feedback ensures we deliver the insights that keep you a step ahead in the rapidly changing cybersecurity landscape. If you like our show, please share a rating and review in your podcast app. Please also fill out the survey in the show notes or send an email to spacen2k.com we are proud that N2K CyberWire is part of the daily routine of the most influential leaders and operators in the public and private sector. From the Fortune 500 to many of the world's preeminent intelligence and law enforcement agencies, N2K helps cybersecurity professionals grow, learn and stay informed. As the nexus for discovery and connection, we bring you the people, the technology and the ideas shaping the future of secure innovation. Learn [e-mail] thanks for listening to T Minus. I am your host, Maria Varmazes. This show is produced by Ethan Cook and Liz Stokes. We're mixed by Elliot Peltzman and Trey Hester with original music by Elliot Peltzman. Our executive producer is Jennifer Iban with content strategy by Mayan Plout. Peter Kilpe is our publisher. See you next week.

[Eddie Zurvigan]

T minus.

[N2K CyberWire Announcer]

Hi, Ryan Reynolds here for Mint Mobile. Are you looking for a beach read this summer? May I suggest your big wireless bill? It's got suspense, mystery, a slightly flat

[Eddie Zurvigan]

emotional arc, and a shocking twist where

[N2K CyberWire Announcer]

you realize you've been overpaying the entire time. Fortunately, though, Mint's story is better. Every plan $15 a month, even unlimited. That's it. Happy ending.

[Eddie Zurvigan]

Zero tears.

[N2K CyberWire Announcer]

Give it a [e-mail] Switch upfront payment

[Maria Varmazas]

$45 for three months, $90 for six months or 180 or 12 month Plan required $15 per month equivalent taxes and fees. Extra initial plan term only greater than 50 gigabytes may slow when network is busy. See terms.