• •Analysis of NIST data by 808bits reveals 492 FIPS 140-2 security certificates remain active with only 23 days until the standard's sunset.
• •The FIPS 140-2 standard is being phased out in favor of FIPS 140-3, which requires more rigorous security testing.
• •It remains unclear how many of these active certificates belong to systems that have already reached end-of-life versus those that represent ongoing compliance gaps.

NIST records indicate 492 cryptographic modules are still operating under the FIPS 140-2 standard with less than a month before its official retirement. This transition follows the 2019 rollout of FIPS 140-3, which aligns closer with international ISO standards to address evolving cybersecurity threats. Despite the impending deadline, the persistence of these legacy certifications suggests a significant lag in enterprise-wide hardware and software migration. Whether these remaining modules will be formally revoked or grace-period extended remains the central concern for security administrators managing compliance deadlines.