A critical security flaw in Cisco’s Identity Services Engine (ISE), catalogued as CVE-2025-20286 with a near-maximum CVSS score of 9.9, is sending shockwaves throughout enterprise IT and cloud security communities alike. The vulnerability, disclosed by Cisco earlier this week and corroborated by...
If you work for a U.S. government agency and you haven’t heard about CISA’s Binding Operational Directive 25-01, you might want to check your inbox, or possibly your junk folder—because ignoring this directive is about as hazardous to your career as leaving “12345” as your admin password...
audit & assessment
bod 25-01
cisa
cloud compliance
cloud hardening
cloud security
cyber policy
cybersecurity
federal it
google workspace
government securityiamsecurity
it governance
microsoft 365
multi-factor authentication
remote work security
saas security
scuba project
security baselines
threat mitigation