Microsoft Entra releases and announcements Summarize this article for me In this article This article provides information about the latest releases and change announcements across the Microsoft Entra family of products over the last six months (updated monthly). If you’re looking for information that’s older than six months, see: Archive for.
NIST Internal Report (IR) 8613 ipd (initial public draft), Multi-Cloud Architecture Challenges, identifies, categorizes, and analyzes the security and compliance challenges that are unique to or significantly amplified by multi-cloud architectures. This analysis by the NIST Multi-Cloud Security Public Working Group (MCSPWG) addresses security and Authorization to Operate (ATO) challenges and highlights areas where additional community research could meaningfully reduce risk.
The MCSPWG identified 23 consolidated challenge areas that represent novel friction points and architectural misalignments that emerge when orchestrating control across autonomous cloud silos. The most significant structural challenge areas are:
- Security-significant differences in cloud-native services across providers
- Organizational logistics and staffing complexity across heterogeneous environments
- Difficulty in implementing centralized security capabilities across provider boundaries
These structural gaps are most acute in five areas: (1) identity and access management, (2) telemetry and logging, (3) configuration and change management, (4) data protection, and (5) compliance and authorization.
Submit Your Comments:
NIST invites input from federal agencies, industry partners, researchers, and the broader cybersecurity community. The public comment period is open through October 5, 2026.
How to Participate:
Email your completed template to ir8613-comments@nist.gov with the subject line “NIST.IR.8613 Comments.”
Storage technology has evolved in two primary directions: (1) increased media storage capacity and (2) architectural changes that provide a software-based abstraction over all forms of background storage technologies. However, the latter evolution has increased management complexity and the probability of configuration errors and associated security threats. This document traces the evolution of the storage technology landscape and analyzes current security threats and resultant risks to provide a comprehensive set of security recommendations in the form of storage security controls.
Important updates in this revision of SP 800-209 include:
- Section 2 — Removal of content associated with obsolete and/or proprietary technologies.
- Section 3 — Completely revised to primarily focus on threats and risks that are specific to storage systems and ecosystems. References to other NIST publications are provided for generic ICT threats and risks. Two notable focus areas were also added:
- “Platform Security Compromises” — Focuses on threats associated with the underlying/supporting infrastructure for data storage
- “Compromised Data Resilience/Protection” — Focuses on threats to secondary data assets and the secondary data asset generation process (i.e., backups)
- Section 4 — Retitled as “Storage Security Controls.” The security recommendations have been reorganized from nine categories into seven formalized control families with standardized control acronyms.
- Several new control families have been added, and some existing controls have been consolidated under new control families to provide coverage for all threats and risks covered in previous sections.
- Appendix C — Added to provide a complete list of the storage security controls described in Sec. 4 as well as a mapping of mitigating controls for the storage-oriented threats identified in Sec. 3.
NOTE: A call for patent claims is included in this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy – Inclusion of Patents in ITL Publications.
Happy National Small Business Week! For over 60 years, the U.S. Small Business Administration has led this initiative to acknowledge the critical contributions of America’s entrepreneurs and small business owners. Part of the U.S. Department of Commerce, NIST’s mission is to drive U.S. innovation and global competitiveness, and the small business community is central to this mission. In this year’s blog, we shine a spotlight on some new and upcoming NIST resources that are all focused on strengthening the cybersecurity and resilience of the nation’s small business community. Build Your Small
Microsoft Entra releases and announcements Summarize this article for me In this article This article provides information about the latest releases and change announcements across the Microsoft Entra family of products over the last six months (updated monthly). If you’re looking for information that’s older than six months, see: Archive for.
NIST Internal Report (IR) 8613 ipd (initial public draft), Multi-Cloud Architecture Challenges, identifies, categorizes, and analyzes the security and compliance challenges that are unique to or significantly amplified by multi-cloud architectures. This analysis by the NIST Multi-Cloud Security Public Working Group (MCSPWG) addresses security and Authorization to Operate (ATO) challenges and highlights areas where additional community research could meaningfully reduce risk.
The MCSPWG identified 23 consolidated challenge areas that represent novel friction points and architectural misalignments that emerge when orchestrating control across autonomous cloud silos. The most significant structural challenge areas are:
- Security-significant differences in cloud-native services across providers
- Organizational logistics and staffing complexity across heterogeneous environments
- Difficulty in implementing centralized security capabilities across provider boundaries
These structural gaps are most acute in five areas: (1) identity and access management, (2) telemetry and logging, (3) configuration and change management, (4) data protection, and (5) compliance and authorization.
Submit Your Comments:
NIST invites input from federal agencies, industry partners, researchers, and the broader cybersecurity community. The public comment period is open through October 5, 2026.
How to Participate:
Email your completed template to ir8613-comments@nist.gov with the subject line “NIST.IR.8613 Comments.”
Storage technology has evolved in two primary directions: (1) increased media storage capacity and (2) architectural changes that provide a software-based abstraction over all forms of background storage technologies. However, the latter evolution has increased management complexity and the probability of configuration errors and associated security threats. This document traces the evolution of the storage technology landscape and analyzes current security threats and resultant risks to provide a comprehensive set of security recommendations in the form of storage security controls.
Important updates in this revision of SP 800-209 include:
- Section 2 — Removal of content associated with obsolete and/or proprietary technologies.
- Section 3 — Completely revised to primarily focus on threats and risks that are specific to storage systems and ecosystems. References to other NIST publications are provided for generic ICT threats and risks. Two notable focus areas were also added:
- “Platform Security Compromises” — Focuses on threats associated with the underlying/supporting infrastructure for data storage
- “Compromised Data Resilience/Protection” — Focuses on threats to secondary data assets and the secondary data asset generation process (i.e., backups)
- Section 4 — Retitled as “Storage Security Controls.” The security recommendations have been reorganized from nine categories into seven formalized control families with standardized control acronyms.
- Several new control families have been added, and some existing controls have been consolidated under new control families to provide coverage for all threats and risks covered in previous sections.
- Appendix C — Added to provide a complete list of the storage security controls described in Sec. 4 as well as a mapping of mitigating controls for the storage-oriented threats identified in Sec. 3.
NOTE: A call for patent claims is included in this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy – Inclusion of Patents in ITL Publications.
Happy National Small Business Week! For over 60 years, the U.S. Small Business Administration has led this initiative to acknowledge the critical contributions of America’s entrepreneurs and small business owners. Part of the U.S. Department of Commerce, NIST’s mission is to drive U.S. innovation and global competitiveness, and the small business community is central to this mission. In this year’s blog, we shine a spotlight on some new and upcoming NIST resources that are all focused on strengthening the cybersecurity and resilience of the nation’s small business community. Build Your Small