[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKGv-9FZSwd5vkFlh9EIHZu8tir7Eo4TWIOhJ6pjVibg":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":106},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"d346b24f-afb0-4faf-a017-f6cef384db2b","CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster","cisa-updates-scubagear-and-scubagoggles-and-says-microsoft-365-checks-get-faster-979dfb","CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, new versions of the open-source tools it publishes to check Microsoft 365 and Google Workspace settings against its security baselines. The agency calls ScubaGear v2.0 the most comprehensive update to that tool since its 2022 launch. ScubaGoggles, which launched in 2023, gets a new baseline and enhanced Gemini controls. Both tools belong to CISA’s Secure Cloud Business Applications project, known as SCuBA, which writes configuration guidance for the … More → The post CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster appeared first on Help Net Security.","CISA has released updated versions of its open-source security tools, ScubaGear v2.0 and ScubaGoggles v1.1.0. These tools help federal agencies check Microsoft 365 and Google Workspace configurations against security baselines. ScubaGear v2.0 offers a more comprehensive update, now directly calling Microsoft's APIs for faster and more accurate assessments, while ScubaGoggles v1.1.0 introduces an assured controls baseline and enhanced Gemini controls for Google Workspace.","CISA releases updated open-source tools ScubaGear v2.0 and ScubaGoggles v1.1.0 for cloud security checks.","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2026\u002F10\u002F28\u002Fcisa-scubagear-scubagoggles-update\u002F","https:\u002F\u002Fimg.helpnetsecurity.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002F28102646\u002Fcisa-2026.webp","2026-10-28T09:38:17+00:00","2026-10-28T10:00:07.051202+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"CISA","vendor",{"name":21,"type":22},"ScubaGear","product",{"name":24,"type":22},"ScubaGoggles",{"name":26,"type":22},"Microsoft 365",{"name":28,"type":22},"Google Workspace",{"name":30,"type":31},"REST API","technology","02371804-cf6d-4449-98de-f1a2d4d9b266",{"id":32,"icon":34,"name":35,"slug":36},null,"Tools","tools",[38,40,45,50],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21,24],{"controls":58,"vendors":105},[59,88],{"slug":60,"name":61,"problem":62,"products":63},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"orca-security","Orca Security","\u002Fvendor-logos\u002Forca-security.png","orca-cloud-security-platform","Orca Cloud Security Platform","https:\u002F\u002Forca.security\u002Fplatform\u002F","Agentless cloud security platform for posture, vulnerabilities and data exposure.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"slug":89,"name":90,"problem":91,"products":92},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.",[93,99],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":94,"product_name":95,"url":97,"description":98},"vanta","Vanta","\u002Fvendor-logos\u002Fvanta.png","https:\u002F\u002Fwww.vanta.com\u002F","Automated evidence collection and continuous monitoring for ISO 27001, SOC 2, NIS2 and other frameworks.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":100,"product_name":101,"url":103,"description":104},"drata","Drata","\u002Fvendor-logos\u002Fdrata.png","https:\u002F\u002Fdrata.com\u002F","Continuous control monitoring and audit readiness across security frameworks.",[],{"slug":107,"title":108,"body":109,"framework_refs":110,"framework_notes":118},"cisa-updates-scubagear-and-scubagoggles-to-strengthen-cloud-configuration-auditing","CISA Updates ScubaGear and ScubaGoggles to Strengthen Cloud Configuration Auditing","This news highlights the ongoing challenge federal agencies and organizations face in continuously verifying that cloud environments like Microsoft 365 and Google Workspace are configured securely against established baselines. Misconfigured cloud services remain one of the most common and exploitable weaknesses in enterprise environments, often going undetected without dedicated tooling. CISA's updates to ScubaGear and ScubaGoggles demonstrate that automated, API-driven configuration checks are essential to keeping pace with rapidly evolving cloud platforms. Without regular, structured configuration assessments, organizations risk drifting from secure baselines over time — a condition known as configuration drift — which can silently expose sensitive data and systems to attack.",[111,112,113,114,115,116,117],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","CIS Control 18: Penetration Testing","NIS2 Article 21(2)(b)","CIS Control 16: Application Software Security",{"NIS2 Article 21(2)(b)":119,"CIS Control 18: Penetration Testing":120,"NIST SP 800-53 SI-2: Flaw Remediation":121,"CIS Control 16: Application Software Security":122,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":123,"CIS Control 4: Secure Configuration of Enterprise Assets and Software":124,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":125},"NIS2 mandates incident handling and security of network and information systems, including proper configuration of cloud services; automated baseline checks like those provided by ScubaGear help demonstrate ongoing compliance with this obligation.","Regular configuration audits using tools like ScubaGear serve as a form of ongoing security assessment, complementing penetration testing by continuously validating that cloud environments remain hardened between formal tests.","Misconfigured cloud settings are functionally equivalent to unpatched flaws; SI-2 requires organizations to identify and correct such weaknesses promptly, which CISA's updated tooling facilitates through faster, API-driven assessments.","Microsoft 365 and Google Workspace are enterprise SaaS applications; CIS Control 16 requires secure configuration and ongoing assessment of application security settings, which is the core function of the updated SCuBA tools.","Cloud configuration weaknesses are a form of technical vulnerability; this control requires organizations to systematically identify and address them, which is precisely what CISA's SCuBA tooling enables at scale.","ScubaGear and ScubaGoggles directly support CIS Control 4 by automating checks that cloud configurations adhere to secure, approved baselines — exactly what this control requires for all enterprise software, including SaaS platforms.","ScubaGear's configuration checks include verification of identity and access control settings in Microsoft 365, directly supporting this function by ensuring authentication policies meet security baselines."]