CISA releases ScubaGear 2.0 and ScubaGoggles 1.1.0
Original title: CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster
ScubaGear now calls Microsoft 365 REST APIs directly, and ScubaGoggles adds an assured baseline plus Gemini controls.
CISA published ScubaGear v2.0 and ScubaGoggles v1.1.0, open-source tools that compare Microsoft 365 and Google Workspace settings with CISA security baselines. The agency calls ScubaGear 2.0 its most comprehensive update since the 2022 launch and says direct REST API calls make assessments faster and more accurate. ScubaGoggles 1.1.0 adds an assured controls baseline and enhanced controls for Gemini. Both tools are part of the Secure Cloud Business Applications project.
- ScubaGear baselines cover Entra ID, Defender for Office 365, Exchange, OneDrive, Power BI, Power Platform, SharePoint, and Teams.
- Results are written as HTML, JSON, and CSV after Rego policy checks.
- In 2024, CISA reported more than 30,000 ScubaGear downloads since October 2022.
- ScubaGoggles baselines include Gmail, Calendar, Chat, Classroom, Drive and Docs, Meet, Sites, and Groups.
From the original article
2 min read at helpnetsecurity.com
CISA released ScubaGear v2. 0 and ScubaGoggles v1. 1.
By Mirko Zorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.