- 1Create a free account
- 2Pick your topics and platforms
- 3Read your tailored feed
- 4Ask the CMMCSimple Assistant
Get the feed your contracts depend on
Create a free account, pick your topics, and see your tailored compliance feed today.
Stay ahead of CMMC and DoD cybersecurity developments with AI-powered news aggregation, personalized updates, and source-backed answers.

Deadlines
New 2026 Redspin Report Finds Sustained DIB Cybersecurity Commitment Even as Some Pause CMMC EffortsLate adopters are most inclined to slow certification progress.
Redspin Training & CMMC Newsroom · Oct 1, 2026

Guidance
Congress Changed Its CMMC Small Business Bill at the Last MinuteManaged Service Provider (MSP) Grader: https://summit7.us/mspgrader Congress has introduced new legislation aimed at helping small businesses navigate CMMC, promising clearer guidance, lower costs, and better federal assistance. But then the CMMC provisions changed before the bill even left committee. We break down what the Cybersecurity for Small Businesses Act actually requires, what it doesn't give the SBA authority to do, how the amended version differs from the original, and whether it would meaningfully change anything for defense contractors struggling with CMMC. Press Release: https://wied.house.gov/media/press-releases/rep-wied-introduces-bill-strengthen-cybersecurity-and-reduce-costs-small Bill tracker: https://www.govtrack.us/congress/bills/119/hr10238 00:00 - Congress Has a New CMMC Small Business Bill 02:33 - What Lawmakers Say the Bill Will Do 05:30 - What the Bill Actually Says 09:02 - What the SBA Still Can't Do 11:02 - The CMMC Provision Changed 15:31 - Will This Actually Help Small Businesses?
Summit 7 (YouTube) · Oct 1, 2026
Deadlines
Jacob Horne: The DoD CIO and the Small Business Administration had a lot of big talk about CMMC when Kirsten Davi...Guidance
Katie Arrington: So what are the things that I’ve often said the Department of war builds requirements, budgets and p...Ecosystem
The Cyber AB Announces Election of New Board Officers - December 1, 2023Learning Tree International — CMMC Training
Chat in plain English and get answers grounded in the latest coverage, with source links. No account needed to try it. News awareness only, not legal or compliance advice.


Cyber News
Dark Reading · Nov 12, 2026

Cyber News
Dark Reading · Oct 8, 2026

Threat Intelligence
SANS Internet Storm Center · Oct 2, 2026

Federal Policy
The language includes changes some industry groups have requested through a public comment period and will go into effect Oct. 19.
Nextgov/FCW · Oct 1, 2026
Government Cloud
B2B users, including internal guest users and external users, will be able to register and sign in with passkeys issued by a resource tenant to meet that tenant's multifactor authentication (MFA) requirements. Today, passkeys are supported for member users in their home tenant. With this update, B2B users can register a resource tenant passkey from the resource tenant's My Security Info page, or in-line during a proof-up prompt or passkey registration campaign, and then use it to satisfy the resource tenant's MFA requirements. This change is on by default. B2B users already in scope for passkeys in your Authentication methods policy will be enabled automatically. No action is required to turn it on. If you want to review or adjust who's affected, update your Authentication methods policy, passkey registration campaign, Conditional Access policies, and user scoping before rollout. GA date: October CY2026
Microsoft 365 for US Government Service Descriptions · Oct 1, 2026
Government Cloud
The self-service environment migration feature moves management of an existing finance and operations apps environment from Microsoft Dynamics Lifecycle Services to the Microsoft Power Platform admin center. More info: https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/lifecycle-services/migrate-lifecycle-services-environments-power-platform-admin-center GA date: December CY2026 Preview date: September CY2026
Microsoft 365 for US Government Service Descriptions · Oct 1, 2026
Government Cloud
Enables admins to delete both content and containers for departed users at scale thereby keeping your tenant compliant without any manual effort. GA date: December CY2026 Preview date: November CY2026
Microsoft 365 for US Government Service Descriptions · Oct 1, 2026
Government Cloud
Keep collaboration moving without disrupting the main discussion. Start and continue one-to-one or small-group conversations directly from a meeting to ask questions, coordinate next steps, share information, and collaborate in parallel while staying engaged in the conversation, reducing context switching and helping teams stay focused and productive. GA date: November CY2026
Microsoft 365 for US Government Service Descriptions · Oct 1, 2026

Federal Policy
The IRS made more than 4,000 hires this year, but its headcount remains mostly unchanged after cutting more than a quarter of its workforce last year.
Government Executive · Oct 1, 2026

Cyber News
Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices.
BleepingComputer · Oct 1, 2026

Defense News
The deal for the SM-6 interceptors comes as the Pentagon pushes to replenish munitions stockpiles depleted by conflicts in the Middle East.
Defense News · Oct 1, 2026

Federal Policy
The Senate passed the Skills-Based Federal Contracting Act. The bill’s sponsor, Rep. Nancy Mace, R-S.C., said “we'll know in the next couple of days where this is headed.”
FedScoop · Oct 1, 2026

Defense News
Any funding from last year’s reconciliation bill left unspent by the Pentagon suffers an 8.3 percent cut known as sequestration as fiscal 2027 starts.
Breaking Defense · Oct 1, 2026

Federal Policy
Ahead of formal rulemaking, the General Services Administration issued an artificial intelligence acquisition regulation deviation that can be used immediately, incorporating some public comments.
FedScoop · Oct 1, 2026

Defense News
While the new program is meant to galvanize cyber skill development through escalating pay rates, the initiative is expected to bring significant pay cuts for cyber troops in at least one branch. Other services struggled to articulate their own rollouts of C-MIP, if they had one at all.
DefenseScoop · Oct 1, 2026
Cyber News
Law enforcement from multiple countries collaborated to disrupt a cybercrime operation that has claimed some 500 victims worldwide in the past two years.
Dark Reading · Oct 1, 2026
DoD
The War Department announces a U.S. Navy award of $24.4 billion to Raytheon, an RTX business, to accelerate production of the Standard Missile-6, a critical anti-air and anti-surface warfare munition.
DoD News Releases · Oct 1, 2026

Federal Policy
Sens. Josh Hawley, R-Mo., and Chris Murphy, D-Conn., have introduced legislation that would hold AI agent operators and developers criminally and civilly liable for hacking incidents.
Nextgov/FCW · Oct 1, 2026
Defense Acquisition
Today's Department of War contracts valued at $7.5 million or more are now live on War.gov.
DoD Contract Announcements · Oct 1, 2026

Defense News
The Defense Department will be operating under a continuing resolution until lawmakers successfully pass a fiscal 2027 budget.
Breaking Defense · Oct 1, 2026

Cyber News
Autonomous AI agents using aggressive strategies attempted to hack U.S. and Canadian government websites to find school and divorce statistics.
BleepingComputer · Oct 1, 2026

Defense News
Joint Interagency Task Force 401's director shared new details about the counter-drone hub’s new “tech arsenal."
DefenseScoop · Oct 1, 2026

Federal Policy
The central bank’s inspector general documented multiple incidents of the staffer transferring files to unencrypted devices before their retirement in July 2024.
FedScoop · Oct 1, 2026

Government Contracting
Click here to view the recorded session. Launching a nonprofit organization can be a powerful way to advance a mission, address community needs, and create lasting impact. However, forming and operating a nonprofit involves unique legal, governance, tax, and compliance considerations that differ significantly from running a for-profit business. In this webinar, PilieroMazza’s Kristen Centre will provide business leaders, entrepreneurs, and prospective founders with a practical overview of the nonprofit formation process, including organizational structure, governance responsibilities, tax-exempt status, fundraising . . . Read More
PilieroMazza Insights · Oct 1, 2026

Defense News
The Pentagon wants to combine drone procurement and operations under a new command, but Congress will have a say.
Breaking Defense · Oct 1, 2026

Cyber News
An Iranian national accused by the U.S. of taking part in dozens of breaches involving the theft of academic data and intellectual property has been extradited from Montenegro.
The Record · Oct 1, 2026
DoD
Airmen assigned to the Kentucky Air National Guard enhanced their global capabilities while training alongside NATO partners from the United Kingdom and Canada in Scotland this summer.
DoD News · Oct 1, 2026
Government Cloud / Cloud Security
AWS announces the preview of AWS Well-Architected Agent, a AI-powered service that is the next-gen evolution of AWS Trusted Advisor and the AWS Well-Architected Tool. The agent analyzes and optimizes AWS infrastructure across cost, security, performance, and reliability, delivering contextualized recommendations prioritized by business goals. It automatically correlates key metrics and application topology against Well-Architected best practices and analyzes Terraform, CDK templates and CloudFormation templates to deliver automation-ready fixes where applicable. With AWS Well-Architected Agent, teams can define their business goals and get prioritized recommendations prioritized by impact and effort at the resource, application, and architecture levels. For example, a team prioritizing reliability can receive recommendations to add multi-AZ failover to a critical database, complete with an SSM runbook that automates the configuration change and a cross-pillar analysis showing how this change affects cost and performance before you commit. Where applicable, recommendations are delivered with SSM runbooks, prescriptive CLI scripts, and guided console walkthroughs so teams can move qu
AWS What's New (Recent Announcements) · Oct 1, 2026

Defense News
Ukraine has deployed its FP-7 tactical ballistic missile in combat for the first time, President Volodymyr Zelenskyy said on Thursday.
Defense News · Oct 1, 2026

Cyber News
The teenager-run cybercrime group victimized roughly 500 organizations in less than two years.
CyberScoop · Oct 1, 2026

Federal Policy
The performance of portfolios in the federal government’s 401(k)-style retirement savings program largely mirrored market-wide declines.
Government Executive · Oct 1, 2026
%20devices,%20now%20generally%20available%20-%207154.jpeg)
Government Cloud
We are making video conferencing device interoperability between Google Meet and Microsoft Teams generally available. It was previously available in preview . This launch will enable you to: Join Microsoft Teams meetings from Android (AOSP)-based Google Meet hardware devices. Join Google Meet meetings from Android (AOSP)-based Microsoft Teams Rooms devices. See our early preview announcement for more details. Getting started Admins: Visit the Help Center to learn more about allowing Meet hardware to join third-party video conferencing services . End users: Visit the Help Center to learn how to join Microsoft Teams meetings with Google Meet hardware . Rollout pace Rapid and Scheduled Release domains: Full rollout (1–3 days for feature visibility) starting on October 1, 2026 Availability Available to all Google Workspace customers with Google Meet hardware devices running Android/AOSP Resources Google Workspace Admin Help: Allow Meet hardware to join third-party video conferencing services Google Workspace Admin Help: Join Microsoft Teams meetings with Google Meet hardware Workspace Updates Blog: New built-in interoperability between Google Meet and Microsoft Teams on Android (AOSP)
Google Workspace Updates / Product Announcements · Oct 1, 2026

Cyber News
Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware development, and post-compromise activity while security teams struggle to keep pace.
BleepingComputer · Oct 1, 2026
DoD
A specialized team of Marines deployed to Europe will be redirected to the Baltic Sea region to support the NATO-led enhanced vigilance activity Baltic Sentry.
DoD News · Oct 1, 2026

Cyber News
The findings, released Thursday by Asymmetric Security, are just the latest example of rogue behavior spurred by OpenAI’s software.
The Record · Oct 1, 2026

Cyber News
Sean Cairncross talked about regulations, China, pilot projects and more Thursday.
CyberScoop · Oct 1, 2026

Federal Policy
The national cyber director said developers are strengthening safeguards after a series of unauthorized AI intrusions, while defending the administration’s push for rapid deployment.
Nextgov/FCW · Oct 1, 2026

Federal Policy
Concerns about the design system have heightened after a DOGE alum and AI engineer began deleting comments and adding AI tools to a GitHub repository.
Nextgov/FCW · Oct 1, 2026

Federal Policy
The date you leave federal service can affect when your annuity begins and how much you receive for unused annual leave.
Government Executive · Oct 1, 2026
Government Cloud / Cloud Security
Amazon Redshift now supports querying Amazon S3 data lake tables located in a different AWS Region. With enhanced VPC routing, data lake query traffic between Amazon S3 and Amazon Redshift stays within your own VPC. Both capabilities are powered by the integrated data lake query engine that runs directly on the compute of RG provisioned and Serverless clusters. These features are aimed at enterprises with globally distributed data and at security-sensitive customers who need tight control over how their data travels. With cross-Region support, you can use Amazon Redshift to query S3 data in another Region directly, without first copying or replicating it. This makes it easier to run global analytics, consolidate reporting across Regions, and query data that must remain in a specific Region for residency requirements. Cross-Region queries incur standard data transfer charges. Because the query engine runs on your cluster's compute, data moving between Amazon S3 and Amazon Redshift flows entirely over your VPC when you use enhanced VPC routing, never over public networks. Regulated industries such as financial services, healthcare, and government benefit from this feature as it keeps
AWS What's New (Recent Announcements) · Oct 1, 2026
DoD
Naval Facilities Engineering Systems Command (NAVFAC) Southeast awarded a $31.5 million construction contract Sept. 28 for the comprehensive repair and recapitalization of Wharf Bravo at Naval Air Station (NAS) Pensacola, Florida.
DVIDS · Oct 1, 2026

Cyber News
Two separate reports by cybersecurity companies highlight China-linked hacking operations, including a phishing campaign that impersonated Western experts.
The Record · Oct 1, 2026

Threat Intelligence
In this week’s edition, Amy reflects on the importance of prioritizing family and personal well-being over the pressure to remain constantly productive.
Cisco Talos · Oct 1, 2026

Government Contracting
Most companies plan customer engagement well but carry it out poorly. Here's how to close that gap, writes growth expert Nic Coppings.
Washington Technology · Oct 1, 2026

Cyber News
Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right.
SecurityWeek · Oct 1, 2026

Defense News
In 2021, Helsinki ordered 64 of the stealth aircraft in a deal valued at $9.4 billion as a replacement for aging US-made F/A-18 Hornet fourth-generation fighters.
Breaking Defense · Oct 1, 2026

Government Contracting
Buy America waivers can turn on current domestic availability. The D.C. Circuit upheld FRA’s focus on whether compliant trains were being produced domestically at the time of the waiver, rather than whether a manufacturer could develop a compliant product in the future. Technical specifications must be tied to actual project needs. FRA successfully supported the waiver by explaining why Brightline’s 186-mph speed requirement was material and why available domestic alternatives could not satisfy it. Narrowly tailored waivers are more defensible. The court emphasized that FRA limited the waiver to two foreign-manufactured trains and certain unavailable components, while requiring the remaining trains to be produced domestically. The U.S. Court of Appeals for the D.C. Circuit upheld a Federal Railroad Administration (FRA) Buy America waiver allowing Brightline West to purchase two foreign-manufactured high-speed trains from Siemens Mobility Inc. for its rail project connecting Las Vegas and Southern California. In a September 25 decision, the D.C. Circuit concluded that FRA reasonably determined that the required high-speed trains were not domestically available and that the agency ad
GovCon & Trade · Oct 1, 2026

Defense News
The U.S. Air Force awarded Boeing a roughly $85 million contract for four more MH-139A Grey Wolf helicopters, with the first under full-rate production.
Defense News · Oct 1, 2026
DoD
The War Department announced an increase in hostile fire pay and imminent danger pay today for the first time since 2002.
DoD News · Oct 1, 2026
Create a free account, pick your topics, and see your tailored compliance feed today.
Want to publish your news with CMMCSimple? Contact us at news@cmmcsimple.com.
Our RSS source list is reviewed and updated every two weeks on Friday, so newly accepted feeds appear with the next update.
© 2026 CMMCSimple