At a 2024 post-quantum cryptography conference hosted by NIST, researchers from the UK National Cyber Security Centre published new estimates of what it would actually cost to run a quantum attack against AES encryption - moving beyond theoretical math to model real hardware constraints. The work is archived by
NIST.