Security1 hOctober 28, 2026, 16:38

CISA releases ScubaGear 2.0 and ScubaGoggles 1.1.0

CISA updated its open-source cloud configuration checkers: ScubaGear 2.0 for Microsoft 365 and ScubaGoggles 1.1.0 for Google Workspace. ScubaGear now makes direct REST API calls for faster, more accurate assessments, while ScubaGoggles adds an assured controls baseline and enhanced Gemini controls.

Help Net Security

Open source

CISA releases ScubaGear 2.0 and ScubaGoggles 1.1.0

ScubaGear 2.0 is the biggest update since its 2022 launch
Checks cover Entra ID, Exchange, Teams, SharePoint and Power Platform
ScubaGoggles 1.1.0 adds assured controls and Gemini controls
ScubaGear passed 30,000 downloads by 2024

#CISA#Microsoft#Google#Gemini

Tencent's Hy Memory 2.0 Tested: Quality Depends on the LLM Writer

ShengShu livestreams two weeks of Motubrain 2.0 training before open-source release

Tsinghua, ModelBest and OpenBMB release PilotDeck 2.0 agent OS

Security

CISA releases ScubaGear 2.0 and ScubaGoggles 1.1.0

Tencent's Hy Memory 2.0 Tested: Quality Depends on the LLM Writer

ShengShu livestreams two weeks of Motubrain 2.0 training before open-source release

Tsinghua, ModelBest and OpenBMB release PilotDeck 2.0 agent OS

CVE-2026-96951: Windows Mark-of-the-Web bypass exploited in the wild