CYBERSECURITYTRACKER
Permanent story citation

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11581

As cited

Copy frozen at (site build).

cloud saas

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster

CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, updated open-source tools for validating Microsoft 365 and Google Workspace configurations against federal security baselines. ScubaGear v2.0 marks the most significant update since the tool's 2022 launch, while ScubaGoggles adds a new baseline and enhanced Gemini controls as part of CISA's Secure Cloud Business Applications (SCuBA) project.

Why it matters: Organizations using Microsoft 365 or Google Workspace should evaluate the updated tools to assess their cloud security posture against CISA baselines and remediate any configuration gaps.

VendorsMicrosoftGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary