CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, updating tools to check Microsoft 365 and Google Workspace settings against security baselines.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Organizations can now more effectively assess and improve their cloud service configurations, potentially reducing the risk of security breaches and compliance issues.
Industries affected
The updates affect federal civilian agencies, though the tools are open-source and can be used by any organization.
Users affected
Administrators and security teams can run the tools to identify misconfigurations and ensure adherence to best practices.
