Back Ground.News

CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and ...

Ground.News • October 28, 2026

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster

CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, new versions of the open-source tools it publishes to check Microsoft 365 and Google Workspace settings against its security baselines. The agency calls ScubaGear v2.0 the most comprehensive update to that tool since its 2022 launch. ScubaGoggles, which launched in 2023, gets a new baseline and enhanced Gemini controls. Both tools belong to CISA’s Secure Cloud Business Applications project, k…

CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and Google Workspace

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) offers two free tools to help organizations find security misconfigurations in Microsoft 365 and Google Workspace. ScubaGear and ScubaGoggles compare cloud settings against recommended security baselines, giving administrators a clearer view of weaknesses that need attention. Both are available to government agencies and private businesses. The tools […]

There is no tracked Bias information for the sources covering this story.

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Releases Major Updates to ScubaGear and ScubaGoggles Tools On October 27, 2026, CISA announced significant updates to its ScubaGear and ScubaGoggles tools, aimed at improving cloud security for Microsoft 365 and Google Workspace. ScubaGear v2.0 introduces direct REST API calls for faster and more accurate assessments, while ScubaGoggles v1.1.0 adds an assured controls baseline and enhanced Gemini-focused controls. These tools help organizations identify security misconfigurations against established baselines. The updates are part of CISA's Secure Cloud Business Applications (SCuBA) project, which began in 2022. Both tools are available to federal agencies and private enterprises, enhancing their ability to secure cloud environments. The updates reflect ongoing collaboration between CISA and industry partners to address evolving cybersecurity threats. 4 sources 34

CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and ...

The full story

Extracted Entities

Platforms (2)

Tools (2)