Corsec Security Certification Blog

Deconstructing FIPS 140-3: Myth #5 – FIPS Validation Isn’t Worth the Cost or Time

26th August 2026

When organizations evaluate FIPS 140-3 validation, the conversation often begins with cost and timeline. Certification requires planning, engineering effort, testing, and coordination with the Cryptographic Module Validation Program (CMVP), making it easy to view validation ...

Deconstructing FIPS 140-3: Myth #4 – Our Product Has a FIPS 140-2 Validation, We Don’t Need FIPS 140-3

11th August 2026

Organizations that already have a FIPS 140-2 validation may assume that their work is finished. After all, the product already went through a formal validation process, so why would another validation be necessary? The answer ...

Fed Roundup: July 2026

3rd August 2026

DISA News Announcements: July 2026 Quarterly Release Group Policy Objects (GPOs) - July 2026 Security Technical Implementation Guide Updates: Omnissa Workspace ONE UEM STIG Nokia Service Router (SR) OS 25.x STIG Unified Endpoint Management SRG ...

Deconstructing FIPS 140-3: Myth #3 – FIPS Validation Is Just a Documentation Exercise

30th July 2026

By the time organizations begin planning for FIPS 140-3 validation, they usually understand that documentation is required. Security policies, design documentation, finite state models, and other artifacts are all necessary components of the validation package. ...

NVIDIA FIPS Validates H100 Tensor Core GPU

3rd August 202628th July 2026

Corsec would like to congratulate our partner, NVIDIA Corporation, on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their H100 Tensor Core GPU. Completion of the FIPS 140-3 validation process ...

Deconstructing FIPS 140-3: Myth #2 – FIPS Is Only Required for Federal Agencies

22nd July 2026

In the first installment of this series, we explored why incorporating a FIPS-validated cryptographic module into a product does not automatically make the product FIPS 140-3 validated. While understanding validation boundaries is critical, another common ...

Deconstructing FIPS 140-3: 5 Myths & Realities

15th July 2026

For organizations developing products that rely on cryptography to protect sensitive information, FIPS 140-3 validation has become the benchmark for security compliance. Whether serving federal agencies, government contractors, critical infrastructure providers, or highly regulated industries, ...

Wind River Completes FIPS 140-3 Validation with Corsec

14th July 202612th July 2026

Corsec would like to congratulate our partner, Wind River Systems, Inc., on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their Wind River FIPS Object Module. Completion of the FIPS ...

Sunhillo Completes FIPS 140-3 Validation

14th July 202612th July 2026

Corsec would like to congratulate our partner, Sunhillo Corporation, on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their Sunhillo Cryptographic Module. Completion of the FIPS 140-3 validation process provides ...

FIPS 140-3 Validated: Citrix (CSG) NetScaler VPX Product

14th July 202610th July 2026

Corsec would like to congratulate our partner, Citrix (Cloud Software Group), on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their NetScaler VPX product. Completion of the FIPS 140-3 validation ...

Deconstructing Common Criteria: Lessons Learned

5th August 20267th July 2026

Throughout this series, we explored some of the most common misconceptions surrounding Common Criteria certification which included assumptions about cost, timelines, to misunderstandings about maintenance and global recognition. While each myth addressed a different aspect ...

Post Quantum Compliance: A New White House PQC Order Impacts Federal Product Vendors

2nd July 2026

On June 22, 2026, the White House issued Executive Order 14412, “Securing the Nation Against Advanced Cryptographic Attacks,” signaling a major acceleration in the federal government's transition to post-quantum cryptography (PQC). The Executive Order recognizes ...

Fed Roundup: June 2026

1st July 2026

DISA News Announcements: DISA Chief Urges Unified Cyber Defense Teaming to Meet Emerging AI-Era Threats DISA Unveils New Zero Trust–Driven Coalition Network Strategy to Strengthen Secure, Interoperable Warfare Operations with Allies ReForged Creates a Faster ...

FIPS 140-3 Validated: Citrix (CSG) NetScaler MPX Product Secured

22nd June 202619th June 2026

Corsec would like to congratulate our partner, Citrix (Cloud Software Group), on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their NetScaler MPX product. Completion of the FIPS 140-3 validation ...

Stryker Reaches New Security Milestone, Completes FIPS 140-3 Validation of Badge Crypto Module

21st July 202618th June 2026

Corsec would like to congratulate our partner, Stryker Corporation, on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their Stryker Badge Cryptographic Module. Completion of the FIPS 140-3 validation process ...

Fed Roundup: May 2026

2nd June 2026

DISA News Announcements: Launched new Acquisition Decisions LinkedIn newsletter Strong push on skills-based hiring for cyber roles Moving beyond resumes to validated technical assessments Accelerated hiring tied to live events (e.g., TechNet Cyber) Heavy promotion ...

HP Inc Completes FIPS 140-3 Validation of HP Poly Crypto Module

21st July 202615th May 2026

Corsec would like to congratulate our partner, Hewlett Packard, Inc., on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their HP Poly Cryptographic Module. Completion of the FIPS 140-3 validation ...

Deconstructing Common Criteria: Myth #5

21st July 20267th May 2026

As cybersecurity frameworks continue to evolve, organizations that are already familiar with Common Criteria may find themselves navigating new terminology, regional initiatives, and emerging certification schemes. With the introduction of European Union efforts, it can ...

Fed Roundup: April 2026

6th May 2026

DISA News Announcements: DISA is advancing cybersecurity and operational resilience by modernizing command-and-control infrastructure, adopting zero trust principles, and strengthening the Defense Department’s digital operations capabilities. Security Technical Implementation Guide Updates: Apache Server 2.4 Unix ...

Deconstructing Common Criteria: Myth #4

21st July 202628th April 2026

For organizations that have already achieved Common Criteria certification, there can be a sense that the hardest work is behind them. Once a product earns certification and gains visibility on the Common Criteria Portal, it ...