Security Archives - Corsec Security, Inc.®

Post-Quantum Cryptography: New Deadlines Established

2nd November 2026

For years, the transition to Post-Quantum Cryptography (PQC) has been discussed as a future challenge. With the recent publication of NIST IR 8547, Transition to Post-Quantum Cryptography Standards, that conversation has changed. NIST has now ...

Post Quantum Compliance: A New White House PQC Order Impacts Federal Product Vendors

2nd July 2026

On June 22, 2026, the White House issued Executive Order 14412, “Securing the Nation Against Advanced Cryptographic Attacks,” signaling a major acceleration in the federal government's transition to post-quantum cryptography (PQC). The Executive Order recognizes ...

Corsec to Attend the 7th International Conference on the EU Cybersecurity and Resilience Acts

10th March 2026

As the European Union continues to reshape its cybersecurity regulatory landscape, product vendors face a growing need for clarity, alignment, and practical guidance. Corsec is pleased to announce our attendance at the 7th International Conference ...

Designing for FIPS 140-3: A Practical Guide for Engineering

28th January 2026

Security & Design Engineering The Federal Information Processing Standard 140‑3 (FIPS 140-3) is a government-mandated framework for products sold into U.S. federal agencies. FIPS 140-3 defines how cryptographic modules must be designed, engineered, tested, and validated ...

Enabling Federal Sales: Winning Security Strategies

13th January 2026

In today’s federal procurement environment, cybersecurity requirements are no longer aspirational—they are mandatory gatekeepers. As federal agencies modernize their infrastructure, adopt zero-trust architectures, and migrate mission systems to the cloud, the security expectations placed on ...

Securing Cyber-Physical Systems in Smart Manufacturing

4th December 2025

The Rise of CPS in Modern Manufacturing Smart factories are increasingly powered by cyber-physical systems (CPS)—connected robots, industrial sensors, autonomous vehicles, and AI-enabled control software. These technologies combine computing, analytics, and real-world physical actions to ...

The Critical Role of Certs in Smart Cities

18th November 202518th November 2025

Securing Tomorrow’s Cities: Why Smart Infrastructure Needs Certified Protection As cities evolve into highly connected smart ecosystems, they increasingly depend on digital infrastructure to manage transportation, energy distribution, utilities, emergency response, and environmental monitoring. These ...

Architecting a Smarter Path to FIPS 140-3 Validation

20th November 202518th September 2025

For companies entering regulated markets—defense, federal, finance, healthcare, critical infrastructure—FIPS 140-3 validation is non-negotiable. But for many product teams, the process feels overwhelming and disruptive to development timelines. Corsec specializes in guiding clients through FIPS ...

Securing the Internet of Things: Why Certification is the Key to Market Success

23rd September 202529th August 2025

A Connected World, A Growing Risk From smart thermostats and wearable fitness trackers to industrial control systems and autonomous vehicles, the Internet of Things (IoT) has become an essential part of modern life. These connected ...

How Security Is Changing the Game for Medical Device Companies

9th September 202519th August 2025

As the healthcare industry becomes more connected, securing medical devices is no longer optional—it’s essential. Systems and devices that handle sensitive patient data are now being required to meet strict security standards. Evaluating protection of ...

Fed Roundup: July 2025

6th August 2025

DISA News Announcements: DISA ends DoDIN APL Program Security Technical Implementation Guide Updates: None NIST News Updates & Announcements: None Special Publications, Interagency Reports, & Cybersecurity White Papers: Comments for SP 800-57 Parts 2 and ...

The DoDIN APL Program Is Ending

24th November 20256th August 2025

On July 18th, DISA released a final memo regarding the DoDIN APL. Although brief, the subject of the document was to announce that the DoDIN APL, as it is known today, is going to sunset ...

Fed Roundup: June 2025

3rd July 2025

DISA News Announcements: DISA Citadel approves cross-domain solution DISA's DOD Cloud Infrastructure helps expedite cloud adoption DISA modernizes DODNet operations and plans for improvement Security Technical Implementation Guide Updates: None NIST News Updates & Announcements: ...

Fed Roundup: May 2025

3rd July 20253rd June 2025

DISA News Announcements: DISA Deputy Dir Christopher Barnhurst emphasizes the need for readiness at TechNet Cyber 2025 Security Technical Implementation Guide Updates: Okta IDaaS STIG Microsoft Intune (Desktop & Mobile) STIG Honeywell Android 13 Canonical ...

Fed Roundup: April 2025

2nd May 2025

DISA News Announcements: DISA Director & Army collaborate on cyber operations and network defense DISA & U.S. Strategic Command enhance spectrum operations Security Technical Implementation Guide Updates: Microsoft Entra ID STIG Motorola Solutions Android 13 ...

Fed Roundup: March 2025

1st May 20251st April 2025

DISA News Announcements: None Security Technical Implementation Guide Updates: Draft BIND 9.x V3 STIG Draft Microsoft Defender for Endpoint STIG STIG Viewer 3.5.1 SCC 5.10.2 NIST News Updates & Announcements: None Special Publications & Interagency ...

Fed Roundup: February 2025

1st May 20254th March 2025

DISA News Announcements: DISA has opened the Joint Warfighter Test Center in Fort Huachuca, Arizona DISA has cancelled the 2025 Hybrid Cloud Symposium Security Technical Implementation Guide Updates: Out-of-cycle EVMM SRG update Draft Cisco ACI ...

Common Criteria Evaluations for Cloud-Based SaaS Products

26th February 2025

New Policy for Cloud-based SaaS Solutions The National Information Assurance Partnership (NIAP), the government agency that oversees Common Criteria evaluations in the U.S., has announced a new policy allowing evaluations of cloud-based SaaS products. The ...

Fed Roundup: January 2025

21st July 20265th February 2025

DISA News Announcements: DISA has announced new Social Media handles Security Technical Implementation Guide Updates: Xylok Security Suite 20.x STIG Draft Microsoft SQL Server 2022 STIG Updated Security Guidance, Security Readiness Review Scripts, and Benchmarks ...

The EUCC & It’s Effect on Common Criteria Strategies

21st November 202521st January 2025

What is The EUCC? The European Union Cybersecurity Act (EUCC) is a framework for evaluating security of Information and Communication Technology (ICT) products and services. It was originally defined in the Cybersecurity Act (EU 2019/881) ...