CISA updates ScubaGear v2.0, ScubaGoggles v1.1.0, speeds Microsoft 365 checks

These updated, open-source utilities are designed to audit Microsoft 365 and Google Workspace configurations against established security baselines.

The agency has labeled the ScubaGear v2.0 release as the most thorough revision to that particular tool since its debut in 2022.

For ScubaGoggles, which first appeared in 2023, the update brings a new baseline alongside improved Gemini controls.

These instruments are part of CISA’s Secure Cloud Business Applications effort, referred to as SCuBA.

This project is responsible for developing configuration guidance for various applications.

Earlier coverage

• 'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants Oct 27
• Warp discloses breach exposing AI agent logs, user telemetry data Oct 27
• Sekoia introduces self-hosted deployment for organizations with strict data controls Oct 27