Kloud9

10/05/2026

Cybersecurity compliance claims carry real consequences for defense contractors. Honeywell Aerospace recently agreed to pay more than $2 million to settle allegations involving failure to meet NIST SP 800-171 requirements. https://tinyurl.com/26xa3cue

The Justice Department announced today that Honeywell Aerospace Inc. has agreed to pay $2,042,518 to resolve allegations that it is liable under the False Claims Act for failing to comply with cybersecurity requirements in a contract with the U.S. Department of Defense. Honeywell Aerospace, a corpor...

09/30/2026

CMMC Phase 2 is paused, but core cybersecurity obligations remain. Defense contractors still need accurate self-assessments and strong protection for federal data. https://tinyurl.com/3maypzfy

The United States Department of War recently announced the immediate suspension of the implementation of Phase 2 of the Cybersecurity Maturity Model Certification (CMMC) Program, which had been scheduled to take effect on November 10, 2026.

09/28/2026

Remote access shouldn't mean automatic trust. Microsoft is pushing identity-first controls that evaluate users, devices, and risk before granting access. https://tinyurl.com/3yw2ncmm

09/25/2026

Three employee computers were enough for attackers to steal corporate data from Levi Strauss. This goes to show that security awareness can be as important as the tools you buy.

Using social engineering, a threat actor accessed the computers of three employees and exfiltrated data from them.

09/23/2026

PCI DSS and the NIST Cybersecurity Framework can work together. Mapping controls across both can clarify security priorities and reduce duplicated compliance work.

PCI SSC has published a document which maps the PCI Data Security Standard (PCI DSS) v4.0.1 to the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) 2.0. 

09/21/2026

HIPAA technical safeguards cover access control, audit logs, authentication, integrity, and transmission security. AWS has released guidance to help correctly configure each control in cloud systems. https://tinyurl.com/yfcd6t33

09/18/2026

A social engineering attack reportedly exposed data belonging to 1.6 million RingCentral users. Building robust security systems still relies on people's ability to recognize manipulation. https://tinyurl.com/3yuvcnk5

The hackers published the allegedly stolen information, including names, addresses, email addresses, and phone numbers.

09/16/2026

This month, Microsoft patched critical flaws in Entra ID, Azure Arc, and Exchange Online - a reminder that even cloud environments require active vulnerability management and prompt updates. https://tinyurl.com/54u69z49

Microsoft has patched multiple maximum-severity vulnerabilities in Entra ID, Azure Arc, and Exchange Online that allowed attackers to gain remote code ex*****on and escalate privileges.

09/14/2026

Attackers are posing as IT support in Microsoft Teams to deliver malware. More than ever, employees must verify unexpected help desk requests before installing anything. https://tinyurl.com/4fy7my57

A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a fake lock screen.

09/11/2026

An Ohio healthcare vendor breach affected 3.8 million patients. Remember: HIPAA risk doesn't stop at your network; your third-party vendors need the same scrutiny as your internal systems. https://tinyurl.com/yd8h89vz

Security incidents have resulted in the exposure of patient data at United Technology Systems, Meridian Health Plan of Illinois, and Little Flower Security incidents have resulted in the exposure of patient data at United Technology Systems, Meridian Health Plan of Illinois, and Little Flower Childr...