Corsec Security Certification Blog

Common Criteria Evaluations for Cloud-Based SaaS Products

26th February 2025

New Policy for Cloud-based SaaS Solutions The National Information Assurance Partnership (NIAP), the government agency that oversees Common Criteria evaluations in the U.S., has announced a new policy allowing evaluations of cloud-based SaaS products. The ...

Fed Roundup: January 2025

5th February 2025

DISA News Announcements: DISA has announced new Social Media handles Security Technical Implementation Guide Updates: Xylok Security Suite 20.x STIG Draft Microsoft SQL Server 2022 STIG Updated Security Guidance, Security Readiness Review Scripts, and Benchmarks ...

The EUCC & It’s Effect on Common Criteria Strategies

22nd January 202521st January 2025

What is The EUCC? The European Union Cybersecurity Act (EUCC) is a framework for evaluating security of Information and Communication Technology (ICT) products and services. It was originally defined in the Cybersecurity Act (EU 2019/881) ...

Fed Roundup: December 2024

5th February 20257th January 2025

DISA News Announcements: None Security Technical Implementation Guide Updates: CloudLinux Alma Linux OS 9 STIG Dell OS10 Switch STIG Draft Canonical Ubuntu 22.04 STIG SCAP benchmark Zebra Android 13 NIST News Updates & Announcements: NIST ...

Fed Roundup: November 2024

3rd December 2024

DISA News Announcements: DISA Looks to Build New Cloud and Edge Capabilities Security Technical Implementation Guide Updates: HYCU Protégé STIG HPE Aruba Networking AOS STIG Samsung Android OS 15 with Knox 3.x STIG Anduril NixOS ...

AudioCodes Completes Two FIPS 140-3 Validations

3rd December 2024

Corsec would like to congratulate our partner, AudiCodes Ltd., on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on the following two modules: Mediant Virtual Edition SBC and Cloud Edition SBC ...

Tanium Secures Products with Recent FIPS 140 Validation

3rd December 202413th November 2024

Learn more about Tanium’s experience getting through the FIPS 140-2 validation process with guidance from Corsec.

Cradlepoint Kernel FIPS 140-3 Validated

3rd December 20245th November 2024

Corsec would like to congratulate our partner, Cradlepoint, Inc., on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their Kernel Cryptographic Module. To achieve this milestone, Cradlepoint partnered with Corsec, ...

Fed Roundup: October 2024

1st November 2024

DISA News Announcements: Army Lt. Gen. Paul T. Stanton takes command of DISA and JFHQ – DoDIN Marine Corps Col. Jared C. Voneida, DISA Pacific commander, outlines network resilience policy Newly appointed Army Lt. Gen. ...

Fed Roundup: September 2024

1st October 2024

DISA News

Announcements:

DISA has a new Sr. enlisted leader at JTIC at Fort Huachuca

Security Technical Implementation Guide Updates:

Outset Medical Validates Tablo System to FIPS 140-3

25th September 2024

Corsec would like to congratulate our partner, Outset Medical, Inc., on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their Tablo Medical Informatics System solution. To achieve this milestone, Outset ...

Masimo Completes New FIPS 140-3 Validation

10th September 2024

Corsec would like to congratulate our partner, Masimo Corporation, on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their Masimo Cryptographic Module. To achieve this milestone, Masimo partnered with Corsec, ...

Fed Roundup: August 2024

10th September 2024

DISA News Announcements: DISA continues to migrate users to DoDNet DISA Director outlines new outlook for a more unified network A new hybrid approach to cloud capabilities Security Technical Implementation Guide Updates: VMware NSX 4.x ...

Fed Roundup: July 2024

6th August 2024

DISA News Announcements: The Office of the DoD CIO has outlined news strategies to drive change DISA Director Lt. Gen. Robert J. Skinner speaks on the need to partner with industry to protect the DoD's ...

Fed Roundup: June 2024

3rd July 2024

DISA News Announcements: None Security Technical Implementation Guide Updates: None NIST News Updates & Announcements: None Special Publications & Interagency Reports: Draft SP 800-224 Draft IR 8505, A Data Protection Approach for Cloud-Native Applications Comments ...

Rubrik’s RSC-P Achieves Common Criteria Certification

22nd November 202422nd June 2024

Corsec would like to congratulate our partner Rubrik, Inc. on completing the Common Criteria certification process for their Rubrik Security Cloud – Private (SC-P) v2.3 product. Rubrik and Corsec worked together to complete this custom ...

Fed Roundup: May 2024

3rd July 20243rd June 2024

DISA News Announcements: None Security Technical Implementation Guide Updates: DISA has released STIG Updates NIST News Updates & Announcements: NIST’s FY 2023 Cybersecurity & Privacy Annual Report Special Publications & Interagency Reports: IR 8504, Access ...

Resolution on the CMVP’s FIPS 140 Queue

14th May 2024

On Feb 21, 2024, the CMVP made a big announcement regarding modules which had been submitted for FIPS 140 validation: "Due to the issues caused by the queue length, the CMVP has made a decision ...

Fed Roundup: April 2024

3rd June 20241st May 2024

DISA News Announcements: None Security Technical Implementation Guide Updates: Canonical Ubuntu 22.04 LTS STIG Virtual Private Network Security Requirements Guide and the Web Server Security Requirements Guide STIG/SRG Updates for NIST SP 800-53 Rev 5 ...

Mirantis Completes DoD STIG

8th November 20246th April 2024

Corsec would like to congratulate our partner, Mirantis, Inc., on recently having their Mirantis Kubernetes Engine (MKE) Security Technical Implementation Guide (STIG) approved by the Defense Information Systems Agency (DISA). To achieve this milestone, Mirantis ...