Trusted compliance intelligence
for the Defense Industrial Base

Stay ahead of CMMC and DoD cybersecurity developments with AI-powered news aggregation, personalized updates, and source-backed answers.

Latest
[Virtual Event] Cybersecurity Outlook 2027[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI[Virtual Event] Building a Secure AI Strategy for the EnterpriseGSA memo to set AI-specific acquisition rulesMicrosoft Entra ID: Passkey support for B2B usersDynamics 365 Finance and Operations cross-app: Migrate finance and operations environments from Lifecycle Services to Power Platform admin centerMicrosoft Purview: Data Lifecycle Management – Ensure regulatory compliance by deleting inactive OneDrives and mailboxes for departing employeesMicrosoft Teams: Start side conversations during meetingsTax chief pushes 'AI-first IRS' to get more out of agency's workforceUS Navy awards RTX’s Raytheon $24.4B for SM-6 missiles amid stockpile concernsBill to scrap education requirements in federal contracting jobs heads to Trump’s deskDoD obligates $142B from reconciliation bill before deadline, leaving billions subject to cuts

Newsroom

No new filings today, showing this week's developments

Deadlines

New 2026 Redspin Report Finds Sustained DIB Cybersecurity Commitment Even as Some Pause CMMC Efforts

Late adopters are most inclined to slow certification progress.

Redspin Training & CMMC Newsroom · Oct 1, 2026

Guidance

Congress Changed Its CMMC Small Business Bill at the Last Minute

Managed Service Provider (MSP) Grader: https://summit7.us/mspgrader Congress has introduced new legislation aimed at helping small businesses navigate CMMC, promising clearer guidance, lower costs, and better federal assistance. But then the CMMC provisions changed before the bill even left committee. We break down what the Cybersecurity for Small Businesses Act actually requires, what it doesn't give the SBA authority to do, how the amended version differs from the original, and whether it would meaningfully change anything for defense contractors struggling with CMMC. Press Release: https://wied.house.gov/media/press-releases/rep-wied-introduces-bill-strengthen-cybersecurity-and-reduce-costs-small Bill tracker: https://www.govtrack.us/congress/bills/119/hr10238 00:00 - Congress Has a New CMMC Small Business Bill 02:33 - What Lawmakers Say the Bill Will Do 05:30 - What the Bill Actually Says 09:02 - What the SBA Still Can't Do 11:02 - The CMMC Provision Changed 15:31 - Will This Actually Help Small Businesses?

Summit 7 (YouTube) · Oct 1, 2026

Earlier this week

Have a question about this news? Ask the CMMCSimple Assistant

Chat in plain English and get answers grounded in the latest coverage, with source links. No account needed to try it. News awareness only, not legal or compliance advice.

Ask the assistant

Cyber, Defense & Compliance Intelligence

Newest first, updated continuously

Government Cloud

Microsoft Entra ID: Passkey support for B2B users

B2B users, including internal guest users and external users, will be able to register and sign in with passkeys issued by a resource tenant to meet that tenant's multifactor authentication (MFA) requirements. Today, passkeys are supported for member users in their home tenant. With this update, B2B users can register a resource tenant passkey from the resource tenant's My Security Info page, or in-line during a proof-up prompt or passkey registration campaign, and then use it to satisfy the resource tenant's MFA requirements. This change is on by default. B2B users already in scope for passkeys in your Authentication methods policy will be enabled automatically. No action is required to turn it on. If you want to review or adjust who's affected, update your Authentication methods policy, passkey registration campaign, Conditional Access policies, and user scoping before rollout. GA date: October CY2026

Microsoft 365 for US Government Service Descriptions · Oct 1, 2026

Government Cloud

Dynamics 365 Finance and Operations cross-app: Migrate finance and operations environments from Lifecycle Services to Power Platform admin center

The self-service environment migration feature moves management of an existing finance and operations apps environment from Microsoft Dynamics Lifecycle Services to the Microsoft Power Platform admin center. More info: https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/lifecycle-services/migrate-lifecycle-services-environments-power-platform-admin-center GA date: December CY2026 Preview date: September CY2026

Microsoft 365 for US Government Service Descriptions · Oct 1, 2026

Government Cloud

Microsoft Teams: Start side conversations during meetings

Keep collaboration moving without disrupting the main discussion. Start and continue one-to-one or small-group conversations directly from a meeting to ask questions, coordinate next steps, share information, and collaborate in parallel while staying engaged in the conversation, reducing context switching and helping teams stay focused and productive. GA date: November CY2026

Microsoft 365 for US Government Service Descriptions · Oct 1, 2026

Defense Acquisition

Contracts for Oct. 1, 2026

Today's Department of War contracts valued at $7.5 million or more are now live on War.gov.

DoD Contract Announcements · Oct 1, 2026

Government Contracting

Starting a Nonprofit: What Every Business Leader Should Know

Click here to view the recorded session. Launching a nonprofit organization can be a powerful way to advance a mission, address community needs, and create lasting impact. However, forming and operating a nonprofit involves unique legal, governance, tax, and compliance considerations that differ significantly from running a for-profit business. In this webinar, PilieroMazza’s Kristen Centre will provide business leaders, entrepreneurs, and prospective founders with a practical overview of the nonprofit formation process, including organizational structure, governance responsibilities, tax-exempt status, fundraising . . . Read More

PilieroMazza Insights · Oct 1, 2026

Government Cloud / Cloud Security

AWS Well-Architected Agent is now available in preview

AWS announces the preview of AWS Well-Architected Agent, a AI-powered service that is the next-gen evolution of AWS Trusted Advisor and the AWS Well-Architected Tool. The agent analyzes and optimizes AWS infrastructure across cost, security, performance, and reliability, delivering contextualized recommendations prioritized by business goals. It automatically correlates key metrics and application topology against Well-Architected best practices and analyzes Terraform, CDK templates and CloudFormation templates to deliver automation-ready fixes where applicable. With AWS Well-Architected Agent, teams can define their business goals and get prioritized recommendations prioritized by impact and effort at the resource, application, and architecture levels. For example, a team prioritizing reliability can receive recommendations to add multi-AZ failover to a critical database, complete with an SSM runbook that automates the configuration change and a cross-pillar analysis showing how this change affects cost and performance before you commit. Where applicable, recommendations are delivered with SSM runbooks, prescriptive CLI scripts, and guided console walkthroughs so teams can move qu

AWS What's New (Recent Announcements) · Oct 1, 2026

Government Cloud

Built-in interoperability between Google Meet and Microsoft Teams on Android (AOSP) devices, now generally available

We are making video conferencing device interoperability between Google Meet and Microsoft Teams generally available. It was previously available in preview . This launch will enable you to: Join Microsoft Teams meetings from Android (AOSP)-based Google Meet hardware devices. Join Google Meet meetings from Android (AOSP)-based Microsoft Teams Rooms devices. See our early preview announcement for more details. Getting started Admins: Visit the Help Center to learn more about allowing Meet hardware to join third-party video conferencing services . End users: Visit the Help Center to learn how to join Microsoft Teams meetings with Google Meet hardware . Rollout pace Rapid and Scheduled Release domains: Full rollout (1–3 days for feature visibility) starting on October 1, 2026 Availability Available to all Google Workspace customers with Google Meet hardware devices running Android/AOSP Resources Google Workspace Admin Help: Allow Meet hardware to join third-party video conferencing services Google Workspace Admin Help: Join Microsoft Teams meetings with Google Meet hardware Workspace Updates Blog: New built-in interoperability between Google Meet and Microsoft Teams on Android (AOSP)

Google Workspace Updates / Product Announcements · Oct 1, 2026

Cyber News

Microsoft says threat actors are ahead in the early AI race

Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware development, and post-compromise activity while security teams struggle to keep pace.

BleepingComputer · Oct 1, 2026

Government Cloud / Cloud Security

Amazon Redshift now supports cross-Region queries for your data lake

Amazon Redshift now supports querying Amazon S3 data lake tables located in a different AWS Region. With enhanced VPC routing, data lake query traffic between Amazon S3 and Amazon Redshift stays within your own VPC. Both capabilities are powered by the integrated data lake query engine that runs directly on the compute of RG provisioned and Serverless clusters. These features are aimed at enterprises with globally distributed data and at security-sensitive customers who need tight control over how their data travels. With cross-Region support, you can use Amazon Redshift to query S3 data in another Region directly, without first copying or replicating it. This makes it easier to run global analytics, consolidate reporting across Regions, and query data that must remain in a specific Region for residency requirements. Cross-Region queries incur standard data transfer charges. Because the query engine runs on your cluster's compute, data moving between Amazon S3 and Amazon Redshift flows entirely over your VPC when you use enhanced VPC routing, never over public networks. Regulated industries such as financial services, healthcare, and government benefit from this feature as it keeps

AWS What's New (Recent Announcements) · Oct 1, 2026

Threat Intelligence

Give yourself room to be human

In this week’s edition, Amy reflects on the importance of prioritizing family and personal well-being over the pressure to remain constantly productive.

Cisco Talos · Oct 1, 2026

Government Contracting

D.C. Circuit Upholds FRA Buy America Waiver for Brightline West High-Speed Rail Project

Buy America waivers can turn on current domestic availability. The D.C. Circuit upheld FRA’s focus on whether compliant trains were being produced domestically at the time of the waiver, rather than whether a manufacturer could develop a compliant product in the future. Technical specifications must be tied to actual project needs. FRA successfully supported the waiver by explaining why Brightline’s 186-mph speed requirement was material and why available domestic alternatives could not satisfy it. Narrowly tailored waivers are more defensible. The court emphasized that FRA limited the waiver to two foreign-manufactured trains and certain unavailable components, while requiring the remaining trains to be produced domestically. The U.S. Court of Appeals for the D.C. Circuit upheld a Federal Railroad Administration (FRA) Buy America waiver allowing Brightline West to purchase two foreign-manufactured high-speed trains from Siemens Mobility Inc. for its rail project connecting Las Vegas and Southern California. In a September 25 decision, the D.C. Circuit concluded that FRA reasonably determined that the required high-speed trains were not domestically available and that the agency ad

GovCon & Trade · Oct 1, 2026

  1. 1Create a free account
  2. 2Pick your topics and platforms
  3. 3Read your tailored feed
  4. 4Ask the CMMCSimple Assistant

Get the feed your contracts depend on

Create a free account, pick your topics, and see your tailored compliance feed today.

Publish with CMMCSimple

Want to publish your news with CMMCSimple? Contact us at news@cmmcsimple.com.

Our RSS source list is reviewed and updated every two weeks on Friday, so newly accepted feeds appear with the next update.

© 2026 CMMCSimple