Group Audit Standard Series: Implementing the Risk-Based Approach | Resources | AICPA & CIMA Oct 21, 2026 · 1 min read Statement on Auditing Standards (SAS) 149, Special Considerations — Audits of Group Financial Statements (Including the Work of Component Auditors and Audits of Referred-to…
Lower Saucon Township Council is set to authorize the advertisement of its preliminary 2027 budget, which includes a 1.75-mill increase in property taxes. The new total tax rate will reach 7.49 mills, with 5.99 mills allocated to the general fund and 1.5 mills to the fire fund. Officials estimate this change will add $152.04 to…
The US Department of the Treasury reported that total outstanding federal debt reached $40.4 trillion on October 19. This figure includes both debt held by the public and intragovernmental holdings. The debt increased by $294.9 billion from September 18 and rose by $2.42 trillion compared to the previous year. Accrued interest expense for September totaled…
ConnectWise suspended its Cloud Backup, SaaS Security, and Cloud Management services after an unidentified threat actor accessed a sensitive API credential. Researchers from Huntress observed sign-in activity across nearly 1,000 Entra tenants, with over 300 sign-ins appearing successful. The compromised credential allowed attackers to bypass multi-factor authentication and access Microsoft 365 applications like Exchange Online…
CISA has republished a vendor advisory detailing multiple vulnerabilities in Hitachi Energy MicroSCADA X SYS600 product versions 10.7 and 10.8. The issues include a CSV injection flaw and an incorrect implementation of the authentication algorithm that could allow unauthorized access or privilege escalation. Researchers from Sandia National Laboratories reported the vulnerabilities to CISA. The advisory…
The CAS Board issued a final rule on September 1, 2026, that raises the threshold for full CAS coverage and Disclosure Statement submission from $50 million to $100 million. The rule also updates statutory exemptions and clarifies how CAS applies to multiple-award Indefinite Delivery Contracts. DoW issued a class deviation on July 30, 2026, to…
NIST, the NSA Super Intelligence Security Center, and CISA released a new guideline on October 16, 2026, to help organizations manage incidents involving highly capable AI systems. The document outlines ten voluntary core practices divided into five stages of the incident management lifecycle, including preparation, detection, response, recovery, and reporting. It builds on NIST SP…
NIST SP 1800-35 provides practical implementation guidance for zero trust in hybrid environments, building on the foundational model in NIST SP 800-207. This guidance helps mainframe operators apply resource-level authorization and identity checks to regulated workloads. The article notes that 53% of organizations expressed concern about mainframe security in a 2025 survey. Implementation challenges include…
The Treasury Department reports that bank-account ownership and Taxpayer Identification Number checks became fully operational on September 30, 2026. These measures, tied to Executive Order 14249, screen payments before disbursement to prevent fraud and waste. Treasury states it has screened over 1.1 billion payments totaling $3.7 trillion, stopping about 13,500 payments worth $175 million intended…
CISA issued an advisory for two vulnerabilities in Moxa AIG-302 ThingsPro Edge firmware versions 1.4.0 and earlier. The flaws, identified as CVE-2026-109812 and CVE-2026-109813, allow attackers with adjacent network access to steal sensitive data or compromise communications. Moxa has released firmware version 1.4.1 to fix the issues, which users can install via the device web…