Helpnetsecurity CISA Releases Major Updates to ScubaGear and ScubaGoggles Tools
Article Content
- •CISA updated ScubaGear and ScubaGoggles to enhance cloud security assessments.
- •ScubaGear v2.0 now uses direct REST API calls for improved speed and accuracy.
- •ScubaGoggles v1.1.0 introduces an assured controls baseline for Google Workspace.
On October 27, 2026, CISA announced significant updates to its ScubaGear and ScubaGoggles tools, aimed at improving cloud security for Microsoft 365 and Google Workspace. ScubaGear v2.0 introduces direct REST API calls for faster and more accurate assessments, while ScubaGoggles v1.1.0 adds an assured controls baseline and enhanced Gemini-focused controls. These tools help organizations identify security misconfigurations against established baselines. The updates are part of CISA's Secure Cloud Business Applications (SCuBA) project, which began in 2022. Both tools are available to federal agencies and private enterprises, enhancing their ability to secure cloud environments. The updates reflect ongoing collaboration between CISA and industry partners to address evolving cybersecurity threats.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (10)
Common questions
What improvements were made to ScubaGear?
How does ScubaGoggles enhance Google Workspace security?
Who can use these tools?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects… 
Chinese Actor Compromises US Government Networks via PHP2Shell Exploit A suspected Chinese nation-state actor exploited vulnerabilities in Palo Alto Networks firewalls using a chained PHP2Shell exploit and a Linux kernel privilege escalation flaw. The attack, which began on October 23, targeted 25 servers across the US, Japan, Taiwan, and South Korea, with a focus on US…