NIST published two reports addressing security in Open Radio Access Networks. The final report, IR 8625, analyzes the security of the AI-driven RAN Intelligent Controller and outlines future zero-trust architecture directions. A second document, draft IR 8623, maps O-RAN ALLIANCE security specifications to Cybersecurity Framework 2.0 outcomes for federal agencies. Public comments on the draft…
October 17, 2026 By Charlie Mitchell / August 11, 2026 The Wiley law firm has posted an analysis of National Institute of Standards and Technology draft guidance on artificial intelligence data center cybersecurity, explaining the elements of the voluntary NIST document prepared in line with a…
10/13/2026 | Press release | Archived content Quality Control Review of the Warren Averett LLC FY 2024 Single Audit of the Civil Air Patrol (Report No. DOWIG-2027-005) Oct. 13, 2026 Oct 15 2026 Report No.: DOWIG-2027-005 Report Type: Evaulation Component: Evaluations What We Did: The objective of…
Publish Date October 16, 2026 The National Institute of Standards and Technology (NIST), National Security Agency’s Super Intelligence Security Center (NSA SISC) and Cybersecurity and Infrastructure Security Agency (CISA) published .
That is the context behind the National Institute of Standards and Technology’s Special Publication 800-171 Revision 3 and the current pause in CMMC Phase II implementation.
CISA is aware of critical authentication bypass vulnerability CVE-2026-102764, affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and later); organizations using older versions must upgrade first.
Publish Date October 16, 2026 CISA and the Federal Bureau of Investigation (FBI) released a Public Service Announcement (PSA) warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections.
Ivanti failed to issue an out-of-band patch for a high-severity defect in Ivanti Connect Secure after finding it in June. Attackers tracked as UTA0576 exploited the vulnerability in the wild starting October 1, chaining three zero-days to bypass authentication and execute code. Volexity researchers observed the threat actor stealing credentials and dumping Active Directory metadata…
The AICPA issued a practice aid on October 13, 2026, to help auditors navigate the impact of artificial intelligence on financial statement audits. The guidance addresses how organizations use AI in financial reporting and how audit firms utilize AI tools during engagements. It provides a framework for evaluating AI-related risks, understanding control impacts, and determining…
Cisco has alerted customers that hackers are actively exploiting a critical vulnerability in its Secure Email Gateway product. The flaw, identified as CVE-2026-76519, allows unauthenticated remote attackers to write arbitrary files and execute commands with root privileges. The issue affects the Advanced Malware Protection feature when specific conditions regarding file reputation services and Content Scanner…