Triumvirate Cybersecurity

10/01/2026

It's October 1st, so you know what that means: everything is pumpkin flavored and it's time to brush up on your knowledge as part of Cybersecurity Awareness Month! 🎃

Starting next week, we'll be sharing a post each week this month with tips and information aligned with Cybersecurity and Infrastructure Security Agency's Securing the Next 250 theme! Catch a sneak peek below and sign up for our newsletter to get the updates sent straight to your inbox! 📨

https://www.triumviratecyber.org/post/cybersecurity-awareness-month-2026

09/14/2026

With the 60-day CMMC review period ending, we (maybe optimistically) expect DoD's findings to arrive soon! While Phase 2 remains paused, that doesn't mean the requirements have disappeared. Read on for more about the current status and what to watch for!

08/20/2026

Welcome news for small businesses in Ohio seeking to upskill their teams: the 𝗢𝗵𝗶𝗼 𝗧𝗲𝗰𝗵𝗖𝗿𝗲𝗱 program has announced their next application period opens 𝗢𝗰𝘁𝗼𝗯𝗲𝗿 𝟭𝘀𝘁!

There are some changes from the previous iteration of the program, such as a $𝟭,𝟬𝟬𝟬 reimbursement per credential for up to 𝟯𝟬 𝗲𝗺𝗽𝗹𝗼𝘆𝗲𝗲𝘀 ($30K max per application period). It's a great way for SMBs to help their employees build skills and get tech-related certifications!

Read more on the TechCred website:

Providing direct financial assistance to employers for workforce training.

07/14/2026

Yesterday, the DoD officially paused Phase 2 of CMMC rollout. Here's our breakdown of the announcement and what it means for organizations pursuing compliance! TL;DR: Yes, you still need to meet the requirements!

Yesterday, the DoD officially paused Phase 2 of CMMC rollout. We'll dig into what it means for organizations pursuing compliance. Yes, you still need to meet the requirements!

04/18/2026

Cyber threats from Iranian-backed and aligned actors have drastically increased since the end of February, and it’s not just military targets they’re hitting

Whether you’re in the defense industry, local/state government, healthcare, finance, or public utilities, it’s crucial to understand the heightened risk of nation-state and politically-motivated cyberattacks

Join us at the GoCyber Collective monthly meeting next month to learn about recent developments and how organizations can protect themselves, their clients, and their communities! More info below

Email from GoCyber Collective May Meeting: Global Tensions Ratchet Up Attacks Cyberattacks Boom During Iran War GoCyber Collective Breakfast Meeting Date: Wednesday May 20th Time: 7:30 AM - 9:15 AM Pl

04/14/2026

🤖 Did Anthropic create a real-world Ultron? The internet is abuzz with discussion about their new language model, Claude Mythos, which has not been released publicly (yet) due to its uncanny ability to discover and exploit software vulnerabilities

In this article, we discuss the model, why it’s causing concern, how organizations can stay protected, and the ways CMMC practices reinforce real-world security

https://www.triumviratecyber.org/post/claude-mythos-the-world-s-most-effective-ai-hacker

The internet is abuzz about Claude Mythos—Anthropic's new AI model which they have not released publicly due to its ability to discover and exploit vulnerabilities.

03/23/2026

While the current conflict with Iran may be playing out on a physical battlefield in the Middle East, the cyber battlefield extends right to U.S. organizations' digital front door. The security practices underpinning the CMMC program are designed specifically to protect against the types of threats we're seeing from Iranian nation-state and affiliated threat actors

If you've been delaying CMMC implementation, now is the time to dive in. Our latest post breaks down the threat landscape, how NIST SP 800-171 addresses Iran's known attack vectors, and the concrete steps you can take today to protect your organization and the broader defense supply chain

https://www.triumviratecyber.org/post/the-frontline-is-everywhere-conflict-with-iran-makes-cmmc-a-priority

Implementing the CMMC requirements helps businesses defend against threats because the cyber battlefield isn't just overseas—it extends to your digital front door.

03/20/2026

Thanks to an introduction at DO STEM Ecosystem's speed networking event, we were able to send our Founder & Cyber Compliance Wizard to Dayton Public Schools' Ruskin Elementary to talk to some sixth graders about careers in cybersecurity!

We can neither confirm nor deny that it may have been inspired by one or more students getting into some mischief on the school computers. David was able to explain that students can "use their powers for good" by becoming 𝗲𝘁𝗵𝗶𝗰𝗮𝗹 𝗵𝗮𝗰𝗸𝗲𝗿𝘀 (a.k.a. pe*******on testers & security researchers)!

03/16/2026

According to a recent report by the Government Accountability Office (GAO), as reported by Justin Doubleday at Federal News Network, the DoD needs to do more to evaluate some key risks to the ongoing security of the defense supply chain, including:

📃 𝗪𝗮𝗶𝘃𝗲𝗿𝘀 𝗳𝗼𝗿 𝗦𝗺𝗮𝗹𝗹 𝗕𝘂𝘀𝗶𝗻𝗲𝘀𝘀𝗲𝘀: Despite the substantial cost burden for SMBs, widespread waivers of CMMC requirements could undermine the program's "intent to verify that companies are implementing federal cybersecurity requirements"

📈 𝗘𝗰𝗼𝘀𝘆𝘀𝘁𝗲𝗺 𝗗𝗲𝗺𝗮𝗻𝗱 & 𝗖𝗮𝗽𝗮𝗰𝗶𝘁𝘆: It's no secret that there's a significant shortage of C3PAOs and CCAs who can perform CMMC assessments. Without scaling up significantly, the program will have to rely more on waivers and self-assessments, limiting program impact on DIB security

⏱️ 𝗞𝗲𝗲𝗽𝗶𝗻𝗴 𝗥𝗲𝗾𝘂𝗶𝗿𝗲𝗺𝗲𝗻𝘁𝘀 𝗖𝘂𝗿𝗿𝗲𝗻𝘁: The current version of the CMMC program is based on NIST SP 800-171 Revision 2, but Revision 3 was published in 2024. More needs to be done to proactively address changes to the requirements and their impact on the program

Read the full article via the link below and, as always, contact us to discuss how we can help you prepare for CMMC and approach compliance with confidence!

https://federalnewsnetwork.com/cybersecurity/2026/03/dod-to-evaluate-external-cmmc-risks/

A new GAO report found the Pentagon hasn't fully fleshed out the risks of relying on the private sector to implement the CMMC program.

02/09/2026

⚠️ 𝙇𝘼𝙎𝙏 𝘾𝙃𝘼𝙉𝘾𝙀 to register for our CMMC for the Little Guy workshop! Join us 𝗧𝗢𝗠𝗢𝗥𝗥𝗢𝗪 for this FREE event organized by GoCyber Collective!

Register here:

CMMC compliance can be difficult for small businesses. We'll address the unique challenges facing small business to achieve CMMC compliance.