CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster

This news highlights the ongoing challenge federal agencies and organizations face in continuously verifying that cloud environments like Microsoft 365 and Google Workspace are configured securely against established baselines. Misconfigured cloud services remain one of the most common and exploitable weaknesses in enterprise environments, often going undetected without dedicated tooling. CISA's updates to ScubaGear and ScubaGoggles demonstrate that automated, API-driven configuration checks are essential to keeping pace with rapidly evolving cloud platforms. Without regular, structured configuration assessments, organizations risk drifting from secure baselines over time — a condition known as configuration drift — which can silently expose sensitive data and systems to attack.