A Guardian article explores why many people want to write a book but struggle to begin or finish. Experts like Jami Attenberg and Marita Golden describe writing as a powerful act of imagination and self-affirmation. They recommend reading extensively, researching subjects, and setting a firm start date to overcome procrastination. For those who have stopped,…
The CAS Board issued a final rule on September 1, 2026, that raises the threshold for full CAS coverage and Disclosure Statement submission from $50 million to $100 million. The rule also updates statutory exemptions and clarifies how CAS applies to multiple-award Indefinite Delivery Contracts. DoW issued a class deviation on July 30, 2026, to…
NIST, the NSA Super Intelligence Security Center, and CISA released a new guideline on October 16, 2026, to help organizations manage incidents involving highly capable AI systems. The document outlines ten voluntary core practices divided into five stages of the incident management lifecycle, including preparation, detection, response, recovery, and reporting. It builds on NIST SP…
NIST SP 1800-35 provides practical implementation guidance for zero trust in hybrid environments, building on the foundational model in NIST SP 800-207. This guidance helps mainframe operators apply resource-level authorization and identity checks to regulated workloads. The article notes that 53% of organizations expressed concern about mainframe security in a 2025 survey. Implementation challenges include…
The Treasury Department reports that bank-account ownership and Taxpayer Identification Number checks became fully operational on September 30, 2026. These measures, tied to Executive Order 14249, screen payments before disbursement to prevent fraud and waste. Treasury states it has screened over 1.1 billion payments totaling $3.7 trillion, stopping about 13,500 payments worth $175 million intended…
CISA issued an advisory for two vulnerabilities in Moxa AIG-302 ThingsPro Edge firmware versions 1.4.0 and earlier. The flaws, identified as CVE-2026-109812 and CVE-2026-109813, allow attackers with adjacent network access to steal sensitive data or compromise communications. Moxa has released firmware version 1.4.1 to fix the issues, which users can install via the device web…
Symantec researchers reported that Russian government-linked hackers compromised two defense companies and a law enforcement agency in NATO countries. The group, known as Swallowtail or APT28, targeted a naval shipbuilder, an aircraft engine manufacturer, and a police agency. Analysts observed hands-on-keyboard activity where human operators manually stole credentials from the shipbuilder over a week. The…
Hitachi Energy is aware of vulnerabilities affecting RTU500 product versions listed in the document. If exploited, these vulnerabilities can impact the confidentiality, integrity, and availability of the product. The advisory identifies specific firmware versions, such as 13.5.1 through 13.5.4, as affected by issues like NULL pointer dereference. Users are directed to refer to the Recommended…
Date Issued Thursday, October 15, 2026 Submitting OIG Department of War OIG Other Participating OIGs Department of War OIG Agencies Reviewed/Investigated Department of War Report Number DOWIG-2027-005 Report Type Inspection / Evaluation Agency Wide Yes Number of Recommendations 0 Questioned Costs…