diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f94c5078b..086d4d6d1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -202,7 +202,7 @@ jobs:
         python builder.pyz build -p ${{ env.PACKAGE_NAME }} downstream
 
   macos:
-    runs-on: macos-14 #latest
+    runs-on: macos-15 #latest
     steps:
     - uses: aws-actions/configure-aws-credentials@v4
       with:
@@ -220,7 +220,7 @@ jobs:
         python3 codebuild/macos_compatibility_check.py
 
   macos-x64:
-    runs-on: macos-14-large #latest
+    runs-on: macos-15-large #latest
     steps:
     - uses: aws-actions/configure-aws-credentials@v4
       with:
@@ -287,7 +287,7 @@ jobs:
 
 
   localhost-test-macos:
-    runs-on: macos-14 # latest
+    runs-on: macos-15 # latest
     steps:
     - uses: aws-actions/configure-aws-credentials@v4
       with:
diff --git a/crt/aws-c-io b/crt/aws-c-io
index bfb0819d3..1ec8081f2 160000
--- a/crt/aws-c-io
+++ b/crt/aws-c-io
@@ -1 +1 @@
-Subproject commit bfb0819d3906502483611ce832a5ec6b897c8421
+Subproject commit 1ec8081f208ef8d51381889eda3bda9756fd5bb5
diff --git a/src/main/java/software/amazon/awssdk/crt/io/TlsCipherPreference.java b/src/main/java/software/amazon/awssdk/crt/io/TlsCipherPreference.java
index 480ffeef4..f1da77179 100644
--- a/src/main/java/software/amazon/awssdk/crt/io/TlsCipherPreference.java
+++ b/src/main/java/software/amazon/awssdk/crt/io/TlsCipherPreference.java
@@ -76,7 +76,12 @@ public enum TlsCipherPreference {
      * This security policy was the system default before PQ was enabled by default, specifically
      * aws-c-io's AWS_IO_TLS_CIPHER_PREF_TLSV1_0_2023_06.
      */
-    TLS_CIPHER_PREF_TLSv1_0_2023(10);
+    TLS_CIPHER_PREF_TLSv1_0_2023(10),
+
+    /**
+     * The latest recommended non-Post-quantum enabled TLS Policy. This policy may change over time.
+     */
+    TLS_CIPHER_NON_PQ_DEFAULT(11);
 
     private int val;