42
30
Switzerland's Federal Government Is Replacing Microsoft on 3k Computers
Switzerland's Federal Chancellery launched a pilot replacing Microsoft 365 with open-source openDesk on 3,000 federal workstations by end of 2027.
Switzerland launched a CHF 9 million pilot to migrate 3,000 federal workstations (about 7% of the federal workforce) from Microsoft 365 to the German open-source openDesk suite, targeting completion by end of 2027. The move follows a successful 172-employee proof of concept (PoC BOSS) and the 2024 EMBAG open-source law, driven by digital sovereignty concerns about foreign access to Swiss government data. The Swiss Army's Cyber Command plans a faster migration, replacing Microsoft 365 with openDesk by October 2026, while Microsoft is investing over CHF 325 million in Swiss AI and cloud infrastructure.
32
60
55
55
55
60
Severity Is Not a Strategy: What CISA BOD 26-04 Means for the Future of Federal Software Security
CISA's BOD 26-04 replaces severity-based federal patching with risk-based remediation deadlines of 3, 14, or 60 days.
CISA's Binding Operational Directive 26-04, released June 10, 2026, replaces BOD 19-02 and BOD 22-01 for Federal Civilian Executive Branch agencies and shifts remediation prioritization from CVSS scores to risk context. Agencies assess four factors: public exposure, KEV listing, exploit automatability, and whether exploitation grants partial or total asset control, resulting in 3-, 14-, or 60-day remediation windows or next-upgrade fixes. In CISA's first review at a large civilian agency, only 1% of vulnerabilities required three-day remediation while over 60% could wait for future system upgrades. The directive also requires forensic analysis when exploitation is suspected, and Checkmarx argues the same risk-based logic must extend upstream into software development and SBOM-driven exposure management.
58
42
60
60
30
55
Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail
A whistleblower alleges USPS is rushing untested IT systems that could reject thousands of mail-in ballots ahead of the 2026 midterm elections.
A whistleblower complaint released by Sen. Richard Blumenthal says USPS is deploying three new, largely untested IT systems — including the Federal Ballot Mail Portal — that could reject entire ballot batches over single scan errors. The systems were developed in weeks without standard testing or interoperability checks, and USPS allegedly continued work despite court injunctions against its rule changes. House Oversight Democrats demanded USPS halt implementation, and election experts warn the design could lead to new lawsuits and mass ballot denials.
42
30
42
42
60
60
30
What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies
CISA officials outline future plans for the CDM program, emphasizing speed, automation, unified data, and data-driven federal risk management.
Speaking at an Elastic Federal Cyber Defense Breakfast, CISA officials described next steps for the Continuous Diagnostics and Mitigation (CDM) program that supplies cybersecurity tools to federal agencies. Acting deputy program manager Richard Grabowski named velocity, unification, and data-driven risk management as core goals, including a three-year roadmap to expand SIEM-as-a-Service. Federal CISO Mike Duffy urged aggregating demand across agencies, buying outcomes rather than products, and designing acquisition for continuous improvement. CISA's Matt House tied the program's evolution to post-SolarWinds needs for a government-wide common operating picture.
22
Jail time for Maine child in 764 marks turning point in federal law enforcement
A 17-year-old from Maine became the first minor federally adjudicated for 764 extremist crimes, including child exploitation, signaling a policy shift on prosecuting juveniles.
The FBI said a Maine teenager is the first child federally charged and adjudicated for crimes tied to the nihilistic violent extremist collective 764, part of The Com network. Charges include conspiracy to sexually exploit a child, distributing CSAM, interstate threats, cyberstalking, and identity theft. The case marks a turning point in federal policy on prosecuting juveniles and continues heightened enforcement: Kyle Spitze was sentenced to 77 years and Alexis Chavez to 40 years in related cases. The FBI is investigating more than 500 subjects connected to 764 and its offshoots nationwide.
48
Lawmakers seek watchdog review of federal hacking of Americans
Sen. Wyden and Rep. Casar asked the GAO to review the federal government's use of spyware and hacking tools against Americans.
Sen. Ron Wyden and Rep. Greg Casar sent a letter to the Government Accountability Office requesting a review of federal law enforcement hacking operations, including spyware use, Rule 41 hacking powers, and acquisition of hacking tools. The letter cites ICE's confirmed work with spyware vendor Paragon and concerns about abuse of invasive surveillance capabilities. The lawmakers note the government publishes no annual reports on hacking operations unlike wiretaps.
42
42
30
55
42
30
55
30
55
30
55
30
60
55
55
55
30