Trusted compliance intelligence
for the Defense Industrial Base

Cyber News

[Virtual Event] Cybersecurity Outlook 2027

Cyber News

[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI

Cyber News

Dagster: Open-source cloud-native data pipeline orchestrator

Dagster is an open source orchestrator for data pipelines. It decides what runs, in what order, and when. It also tracks how the tables, datasets, machine learning models, and reports it manages connect to the data they came from. When a source table goes bad, the tables built from it carry the problem forward. Dagster’s lineage graph shows which ones sit downstream, and that list is the starting point for fixing a broken dashboard or

Cyber News

Who collects the keys when an AI agent retires?

Think about the last time a good engineer left your company. Someone collected the laptop and the badge. IT revoked their logins before the end of the day. Their manager reassigned the open tickets, and HR filed their records somewhere they’ll stay for years, in case anyone ever challenges a decision they made. Now think about the last time an AI agent left. Someone probably deleted it from the dashboard. I’ve started describing agents as

Cyber News

CISOs say OT will survive a cyberattack, but their engineers aren’t so sure

Ask industrial security chiefs whether their plants would keep running through a full IT compromise, and every one who answered the SANS 2026 ICS/OT survey says yes. Thirty-eight percent expect to run indefinitely on islanded ICS/OT systems, and 62% expect to get by temporarily on manual controls. None foresee degradation or a halt. The 696 practitioners SANS surveyed, the people who would run those manual controls, are less sure. Only 15% said their critical processes

Cyber News

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with HTTP/2 enabled are affected, according to Red Hat, which ships the server as part of Red Hat Enterprise Linux. An attacker who can reach the

Cyber News

Bots pose as AI agents, AI agents pose as humans, and defenses believe both

Over one week in October, an online marketplace took 414,210 visits from traffic wearing the name of a widely used consumer AI agent. Every visit went for the sign-in page, and every one returned errors. Behind the name was a credential stuffing operation, with attackers running stolen username and password pairs against the site in bulk. The fake agent was busier than the real ones. Its volume came to about one and a half times

Cyber News

ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients

ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access. In an advisory posted on its site, the company said there is no evidence that the incident involves a compromise of its infrastructure or a vulnerability in the ScreenConnect software. "Our initial assessment suggests the activity may involve

Cyber News

Hackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill

As AI model training and distillation increase, AI tokens are becoming a piping hot currency for threat actors. Cloud hosting provider Railway found out the hard way; it has confirmed a near 26-hour battle against attackers targeting AI provider credentials to sell to AI ‘transfer stations’ for use in model distillation. The crooks generated about $740,000 in fraudulent AI usage charges using the stolen credentials and potentially had access to up to 100,000 workspace credentials. Railway said the attacker’s database searches looked for AI provider keys by name before anything else; some queries also targeted cloud, database, and payment service credentials. The company disclosed the incident on October 22 , and posted a follow-up report this week. Because of the ongoing investigation, it is not able to share the specific details and scale of the exploits, but advised users to revoke and reapply sensitive environmental variables stored on Railway prior to October 21. “AI credentials are becoming the new credit card numbers,” said David Shipley of Beauceron Security. “So-called LLMjacking is expected to displace Cryptojacking as a cheap, scalable way to make money.” A 26-hour battle

Threat Intelligence

ISC Stormcast For Thursday, November 12th, 2026 https://isc.sans.edu/podcastdetail/10176, (Thu, Nov 12th)

Government Cloud

Dynamics 365 Customer Insights - Journeys: Create event experience that match your business structure by supporting leads, contacts, or both​

Align event registrations with the way your organization manages customer data. By supporting lead-based registration journeys and existing matching rules, you can avoid unnecessary Contact creation, improve data quality, and ensure event attendees follow the same lead management process used across your business.​ Configure event registration forms to create or update Contacts, Leads, or both Leads and Contacts ​ Apply existing matching, deduplication, and update rules to event registrations for more consistent and accurate customer data.​ Register attendees without requiring a Contact record, enabling lead-only registration scenarios and sales-driven qualification processes.​ GA date: June CY2027 Preview date: February CY2027

Government Cloud

Dynamics 365 Project Operations: Archive project cost actuals with long-term retention

Organizations managing high volumes of project transactions need to retain historical cost data without allowing years of completed transactions to continually increase the volume of active operational data. This capability enables organizations to archive processed project staging table cost actuals for long-term retention while preserving access to historical records when needed. Administrators can archive eligible project cost actuals for selected legal entities and date ranges using the Archive with Dataverse long-term retention workspace. The archive process moves eligible cost actuals and related transaction records to long-term storage, while providing visibility into job status and progress and continued access to archived records after the process completes. This capability helps organizations manage growing project transaction volumes while retaining the historical cost information required for financial history, audit, and business needs. It is available for Dynamics 365 Project Operations deployments that work with other Dynamics 365 ERP applications and requires Archive with Dataverse long-term retention. GA date: March CY2027 Preview date: September CY2026

Government Cloud

Outlook: Copilot Chat Sheet UX Update for Mobile

Copilot Chat in Outlook on iOS and Android is getting updated! You'll notice smoother animations, improved strings, and some small changes to the header, such as the new/temporary chat button being moved behind the ... button. GA date: December CY2026

Government Cloud

Dynamics 365 Customer Insights - Journeys: Send each message only once with deduplication for SMS and custom channels

Deduplicates recipients by contact point, so each phone number or custom channel address gets the message once per send. Eliminates manual post-send clean-up, wasted messaging spend and the customer annoyance of duplicate texts. Brings SMS and custom channels to parity with email's built-in deduplication. GA date: December CY2026

Government Cloud

Dynamics 365 Customer Insights - Journeys: Build audiences faster with reusable segment templates

Segment templates help you build audiences without recreating queries for each campaign. Choose a built-in template for common scenarios such as event attendance or email engagement, or save your own segment query as a reusable custom template. Add placeholders with hint text to guide marketers through entering campaign-specific values, reducing repetitive setup while keeping audience criteria consistent. GA date: November CY2026

Government Cloud

Microsoft 365: [Education] Practice presentations with Speaker Coach in Learning Activities

In learning activities, students can rehearse presentations, receive feedback on their delivery, and practice again with targeted suggestions to improve clarity and confidence. #education GA date: December CY2026

Government Cloud

Microsoft Edge: Top sites in Edge search bar

Adding easy access to top sites in Edge search bar on desktop. Users can add, edit, remove, or hide top sites. Admins can control available to this feature using the NewTabPageManagedQuickLinks and NewTabPageQuickLinksEnabled policies. GA date: January CY2027

Government Cloud

Power Automate: Credentials - Integration with Delinea secret server

Power Automate will support Delinea Secret Server as an external credential provider for desktop flows. Organizations can securely use credentials managed in Delinea for machine sign-in and credential retrieval during attended and unattended automation. GA date: March CY2027

Government Cloud

Power Automate: Direct triggers for desktop flows

Desktop flows will support direct triggers, enabling automations to start in response to supported events without requiring an intermediary cloud flow. This simplifies automation design and reduces the effort required to connect desktop flows to business processes. GA date: March CY2027 Preview date: January CY2027

Government Cloud

Dynamics 365 Finance: Submit only validated records to Dynamics 365 Finance

The write to business rules engine configuration experience introduces an option to submit only records that have successfully passed Account structure validation. When enabled, Business Performance Planning filters the writeback dataset and submits only records marked as valid by account structure validation to the business rules engine writeback process. Records that have not passed validation are excluded from the submission so users can review and correct them before attempting to write them to Dynamics 365 Finance. More info: https://learn.microsoft.com/en-us/dynamics365/finance/business-performance-planning/bpp-bud-reg-write GA date: November CY2026

Government Cloud

Microsoft 365: [Education] Microsoft Learning Zone - Minecraft connected lessons

Bring Minecraft Education to every classroom with AI-powered tools that match curriculum goals to Build Challenges, blend lessons with project-based learning, launch directly from Learning Zone, and give you full visibility into participation, completion, and student understanding. #education GA date: February CY2027

Government Cloud

Microsoft 365 admin center: Cross-Tenant Orchestrated Migration

Cross-Tenant Orchestrated Migration for User Data Migration (UDM) and Shared Data Migration (SDM) allows customers to move their Microsoft 365 data from one Microsoft tenant to another. UDM includes the ability to move user mailboxes, OneDrive accounts, Teams chats, and Teams meetings. SDM includes the ability to move M365 Groups, SharePoint Sites, Group Mailboxes, and teams and channels. More info: TBD GA date: December CY2026

Cyber News

Chinese AI Project Scouts Spies in Taiwan Chip Industry

The CCP built a Big Data system to scrape reams of information and learn about individuals abroad, to potentially target and exploit them. Think Alice Huang Lite.

Cyber News

Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise

The package adds public-private cyber responders, an AI-focused team run by the economic ministry, and more leeway to use the government's new active cyber-defense powers.

Government Cloud / Cloud Security

Ornith-1.0-9B and Ornith-1.0-35B models now available on Amazon SageMaker JumpStart

DeepReinforce AI's Ornith-1.0-9B and Ornith-1.0-35B models are now available on Amazon SageMaker JumpStart, expanding the portfolio of foundation models available to AWS customers. These two models are part of the Ornith 1.0 family of open-source, self-scaffolding agentic coding models released under the MIT license, achieving state-of-the-art performance among open-source models of comparable size on coding benchmarks such as Terminal-Bench 2.1, SWE-Bench, NL2Repo, and OpenClaw. These models address different agentic coding challenges with specialized capabilities: Ornith-1.0-9B is a lightweight 9B-parameter dense model post-trained on Qwen 3.5 9B, designed for efficient single-GPU deployment. With a 256K-token context window and 32 decoder layers, it is well-suited for individual developers and small teams running agentic coding workflows on a single GPU — including laptops with consumer-grade hardware. Its self-improving training framework uses reinforcement learning to jointly optimize scaffold generation and solution rollouts, enabling the model to discover better search trajectories and generate higher-quality code solutions. Ornith-1.0-35B is a 35B-parameter Mixture-of-Exper

Government Cloud / Cloud Security

DeepSeek-V4-Pro, DeepSeek-V4-Flash, and DeepSeek-V4.1-Flash models now available on Amazon SageMaker JumpStart

DeepSeek's DeepSeek-V4-Pro, DeepSeek-V4-Flash, and DeepSeek-V4.1-Flash models are now available on Amazon SageMaker JumpStart, expanding the portfolio of foundation models available to AWS customers. These three open-weight Mixture-of-Experts (MoE) language models, released under the MIT license, deliver frontier-class performance across reasoning, coding, and agentic workloads while activating only a fraction of their total parameters per token, enabling high efficiency at scale. These models address different AI challenges with specialized capabilities: DeepSeek-V4-Pro is designed for complex reasoning and high-quality text generation at flagship scale. This 1.6T-parameter MoE model activates 49B parameters per token and supports a 1M-token context window, making it well-suited for long-document analysis, multi-step reasoning, and demanding generation tasks that require maximum model capacity. DeepSeek-V4-Flash delivers strong performance at significantly lower compute cost as an efficient 284B-parameter MoE model activating 13B parameters per token. It supports the same 1M-token context window as V4-Pro, making it ideal for latency-sensitive and cost-conscious production deploym

Cyber News

Baker Tilly notifies clients of data breach at third-party provider

The Baker Tilly Advisory Group is notifying clients that a data breach has compromised certain personal information about them and their dependents.

Threat Intelligence

ARTEX and AI-Powered Red Teaming Tools: What Defenders Need to Know

Learn what Unit 42 discovered about attacker use of AI-powered red team tools, and how to mitigate these attacks.

Cyber News

Active ScreenConnect attacks breach MSPs, impact dozens of organizations

ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices.

Government Cloud

Publish a Sheets canvas as a standalone link

Earlier this year we introduced Sheets canvas , which uses Gemini to turn spreadsheet data into interactive mini-apps like dashboards, kanban boards, and calendars. Starting today, you can publish a Sheets canvas directly to its own link, granting others read-only access to interact with the mini-app without sharing the full source spreadsheet. The published link is separate from the spreadsheet URL and has its own audience setting, so you can publish a canvas to your whole organization even if the file itself is shared with a smaller group. For example: An events coordinator can publish a conference agenda as a filterable schedule for hundreds of attendees while only the planning team edits the source sheet. A program manager can publish a launch timeline from the team's tracker, giving stakeholders across the company a live view of milestones without edit access to the spreadsheet. A learning and development lead can publish a course calendar so anyone in the company can see upcoming sessions, while the training team manages the data source. You can only publish a Sheets canvas that you have edit access to. To publish, click the icon in the canvas toolbar, then click the “Publish

Government Contracting

The Covington Monthly Protest 3-Pack — Inaugural Edition

Welcome to The Covington Monthly Protest 3-Pack, which highlights (in 500 words or less) three significant bid protest decisions released in the prior month and offers key takeaways.  The October 2026 picks illustrate:  (1) How an ill-designed attempt to fix an inadvertent spill of contractor proprietary information can doom a procurement award; (2) The dangers...

Cyber News

eMudhra revokes 8 more CA certificates after private key mishap

Certificate authority eMudhra has revoked eight additional intermediate CA certificates after an investigation into its recent certificate security incident found improper handling of private keys during the certificate-generation process.

Cyber News

AI Raises the Stakes for Cyber Resilience

An organization's ability to quickly recover from a business disruption will be a competitive advantage in an era of AI-driven threats and business enablement.

Government Cloud

Organize and communicate complex information with numbered and nested lists in Google Chat

You can now use numbered lists and nested lists in your Google Chat messages. Numbered lists work well for step-by-step instructions, rankings, and agendas. Nested lists let you break a main point into smaller details, which helps for meeting notes, project plans, and status updates. You can mix bulleted and numbered lists in the same message and nest items up to five levels deep. Start a numbered list from the formatting toolbar or by typing "1." at the start of a line. Lists can be created in Google Chat on the web and will display for everyone in the conversation on web, Android, and iOS. Support for creating lists on Android and iOS will follow. Getting started Admins: There is no admin control for this feature. End users: There is no end user setting for this feature. Visit the Help Center to learn more about formatting messages in Google Chat . Developers: Chat apps can send numbered and nested lists using standard Markdown syntax through the Google Chat API. Visit the Google Chat API documentation to learn more . Rollout pace Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on November 10, 2026 Availability Availabl

Cloud Security

CVE-2026-125926 - Server-side request forgery in the server registration and update API in mcp-gateway-registry

Bulletin ID: 2026-180-AWS Publication Date: 11/11/2026 13:00 PM PST Description: MServer-side request forgery (SSRF) in the server registration and update API in Amazon mcp-gateway-registry before 1.35.0 might allow an authenticated remote user to send requests from the gateway to internal network services and cloud instance metadata endpoints and read the responses via a crafted request Impacted versions: >= v1.0.3 AND <= 1.34.0 Refer to the article for the most up-to-date and complete information.

Cloud Security

CVE-2026-100307 - Missing authorization on the external management API in mcp-gateway-registry enables privilege escalation to registry administrator

Bulletin ID: 2026-179-AWS Publication Date: 11/11/2026 12:30 PM PST Description: Missing authorization in the external management API in Amazon mcp-gateway-registry 1.0.9 through 1.24.7 might allow an authenticated remote user to assign the registry administrator scope to their own identity group and obtain administrative control of every registered gateway asset via a crafted group import request. Impacted versions: >= 1.0.9 AND <= 1.24.7 Refer to the article for the most up-to-date and complete information.

CMMC

We polled attendees at our latest CMMC Summit. Their answers show where the DIB stands nearly four months after the July 13 Phase 2 pause. Some highli...

We polled attendees at our latest CMMC Summit. Their answers show where the DIB stands nearly four months after the July 13 Phase 2 pause. Some highlights: 87% kept their #CMMC work moving after the pause. 66% have budgeted under $50,000, up from 62% in 2025 and 49% in 2024. 49% already use AI to draft their security plans and policies. Read the full report → https://lnkd.in/ec6JzQPS

Government Cloud / Cloud Security

AWS Network Security Manager now available in AWS European Sovereign Cloud and Additional New Regions

AWS Network Security Manager is now available in AWS European Sovereign Cloud Region and Thirty-One new Regions Today, AWS announces the general availability of AWS Network Security Manager in the AWS European Sovereign Cloud Region and additional regions. Network Security Manager is a comprehensive network security management solution designed to simplify security policy deployment and enforcement at scale. Network Security Manager supports AWS WAF and AWS Shield in AWS European Sovereign Cloud Region. The additional regions are: US East (Ohio);  US West (N. California); US West (Oregon); Asia Pacific (Mumbai); Asia Pacific (Hong Kong); Asia Pacific (Taipei); Asia Pacific (Seoul); Asia Pacific (Osaka); Asia Pacific (Hyderabad); Asia Pacific (Singapore); Asia Pacific (Sydney); Asia Pacific (Melbourne); Asia Pacific (Malaysia); Asia Pacific (New Zealand); Asia Pacific (Thailand); Asia Pacific (Johor); Asia Pacific (Tokyo); Canada (Central);  Canada West (Calgary); Mexico (Central); Europe (Frankfurt); Europe (Zurich); Europe (Stockholm); Europe (Ireland); Europe (Milan); Europe (Spain); Europe (London); Europe (Paris); Israel (Tel Aviv); South America (São Paulo), Africa (Cape Town)

Cyber News

Notion says Fireworks breach exposed customer AI chat transcripts

Notion, the digital workspace platform, disclosed that a security breach at its AI infrastructure provider, Fireworks AI, exposed Notion AI chat transcripts in a small number of workspaces.

Defense News

DoD pushes out 3 loans totaling $450M to bolster US space companies

One industry source told Breaking Defense that the reason for the spate of new loan announcements is that the Pentagon “needed to finalize loans by the end of the fiscal year.”

Cyber News

N-able Takes N-central Platform Offline After Discovery of 33 Flaws

The RMM provider also released a hotfix as one of recommended mitigations to address public exploits for the alleged zero-days that allow for attacker takeover.

Government Cloud / Cloud Security

AWS Cloud WAN now supports Flow Logs

AWS Cloud WAN now supports VPC Flow Logs, giving you central visibility into IP traffic across your global network. Flow Logs capture detailed information for each flow, so you can understand how traffic moves across your core network without leaving your AWS Cloud WAN account. Until now, network administrators had to stitch together VPC Flow Logs from many VPCs, accounts, and Regions to see traffic across their global network. They often depended on other teams for access to those logs. Cloud WAN Flow Logs give core network owners one consolidated view of traffic between VPCs, Regions, and on-premises networks connected over AWS Direct Connect, AWS Site-to-Site VPN, or SD-WAN. You can use this data to troubleshoot connectivity and performance problems, plan capacity from historical bandwidth trends, find unusual traffic patterns, and keep records for security and compliance. Flow log records include IP addresses, ports, protocol, traffic volume, and packet-loss counters, along with Cloud WAN metadata such as segment, Region, service insertion hops and attachment details. You can turn on Flow Logs for an entire core network, a single core network edge, or individual attachments. Yo

Cloud Security

Ease of use and secure defaults in the new AWS experience

Starting on Amazon Web Services (AWS) is now more straightforward and more secure by default than it’s ever been. Over the past several months, we rolled out a new AWS experience that changes how you start building. It brings together a set of sensible, secure defaults, and taken one at a time, it’s easy to

Threat Intelligence

The global socket: how threat actors are weaponizing GSocket for stealthy C2

Threat actors are deploying GSocket on compromised Linux servers to keep encrypted remote access after the original vulnerability is patched. Learn how to detect, investigate, and remediate this activity.

Government Cloud / Cloud Security

Amazon EKS Provisioned Control Plane now offers a 24 GB etcd database on 4XL and 8XL tiers

Amazon Elastic Kubernetes Service (Amazon EKS) now offers a larger 24 GB etcd database, up from 16 GB, for 4XL and 8XL Provisioned Control Plane clusters. etcd is the key-value store in the Kubernetes control plane that holds your cluster state, so its size limits how many Kubernetes objects your cluster can store. With 50% more capacity, you can run bigger clusters with more pods, jobs, events, and custom resources. The larger database gives more headroom to workloads that create and update many Kubernetes objects, such as large-scale AI/ML training and inference, batch processing, and CI/CD pipelines. When the etcd database fills up, you can’t add or change objects in your cluster, so the extra headroom helps keep these workloads running as they scale. To get the larger database, choose the 4XL or 8XL tier of Provisioned Control Plane on a cluster running EKS version 1.34 or later. Existing clusters on the 4XL and 8XL tiers running these versions get the larger database automatically, with no action required. The 24 GB etcd database is available in all commercial AWS Regions where Provisioned Control Plane is available. To learn more, see the Amazon EKS Provisioned Control Plane

CMMC

Why DoD paused CMMC: inside the RFI results with Jason Miller

We'll say it again: the CMMC Phase 2 pause affects the C3PAO assessment requirement but does not change your DFARS 7012 obligations. NIST SP 800-171, SPRS scoring, and FedRAMP Moderate equivalency still apply, and the False Claims Act is still holding contractors accountable. Jason Miller, Executive Editor at Federal News Network, joins That CMMC Show to walk through his two-part FNN series on the pause. His reporting draws on DoD’s own RFI summaries and task force recommendations. We cover: • Why the pause happened, according to Jason’s sources • What the RFI found on cost: about $47,000 on average for a Level 2 assessment, versus SBA’s estimate of up to $600,000 • Whether there are enough assessors (the RFI says yes) • Options on the table, including a phased Level 2 restart for a subset of contractors and grant or loan programs for small businesses • How Rev 2 vs. Rev 3 and the coming FAR CUI rule could split requirements across DoD and civilian work 0:00 Intro: Jason Miller, Federal News Network 2:39 What the pause changed and what it didn’t 3:35 Why DoD paused CMMC 8:53 The cost question: $600K vs. $47K 10:03 Contractors pulling back on DFARS 7012 work 11:30 Why DoD h

Defense News

Poland says Pentagon supports permanent US base, with decision expected in December

Warsaw has identified four potential locations for a base that could accommodate 5,000 US troops and their families, and is offering to spend up to $4.4 billion on supporting infrastructure.

Government Cloud / Cloud Security

Amazon Cognito now supports user pool session management

Amazon Cognito now supports session management for user pools, giving you visibility into and control over the sessions your users establish when they sign in to your applications. Single sign-on (SSO) sessions are created when a user signs in through managed login and let them access other app clients without re-authenticating. Token sessions are created when a user signs in to an app client and receives tokens. Session management lets you list a user's active SSO and token sessions across all devices and app clients and revoke any of them on demand. You can also now configure how long each app client reuses an SSO session before requiring re-authentication, instead of the previous fixed one-hour duration. Each session includes details such as session type, app client ID, device type, last activity time and location, and initial sign-in time, so you can build your own end-user or admin session experiences. You can revoke an individual session, optionally with its linked sessions, or use global sign-out to end all sessions associated with one user. You can also set a maximum number of active token sessions per user. Session management is available for user pools in the Essentials o

Defense News

EU sets out $3.4B defense budget for 2027, boosts Ukraine spending

The new fiscal uplift comes in the wake of Ukraine President Volodymyr Zelenskyy telling European leaders last month that “we need at least €70 billion more from you.”

Cloud Security

Part 4 – Cybersecurity journeys: What I’d tell my younger self

Over the past few weeks, I’ve introduced you to people who fell into security from the most unexpected places, who work in domains you’ve probably never heard of, and who were honest about what the job is like after the excitement fades and the real work begins. This is the final post in a four-part