ET-3462

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (1)

• Ruleset Update Summary - 2026/09/23 - v11296 Emerging Threats Community

• FedRAMP Consolidated Rules for 2026 (CR26) Explained · Fortinetics
  web:fortinetics.com

  FedRAMP's Consolidated Rules for 2026 (CR26): what changed, and what you must do by when On June 24, 2026 FedRAMP released the Consolidated Rules for 2026 (CR26), one ruleset that brings the 20x requirements together and resets how every certification is reviewed.

  2026-09-23 22:41 UTC
• FedRAMP Continuous Monitoring in 2026: A Clear Guide to 6 Rulesets
  web:governancedocs.com

  FedRAMP continuous monitoring is now Ongoing Certification: 6 rulesets , 76 rules, a quarterly report, and vulnerability and incident clocks set by class.

  2026-09-23 22:41 UTC
• Azure Web Application Firewall managed ruleset support policy
  web:learn.microsoft.com

  Azure Web Application Firewall supports a defined set of managed ruleset versions to ensure strong security protections, predictable behavior, and a clear upgrade path for customers. Azure manages the Default Rule Set (DRS), Bot Management, and HTTP DDoS rulesets versions and periodically releases new rule set versions that include new protections, updated signatures, and rule improvements.

  2026-09-23 22:41 UTC
• { {release}} - Release Notes - Security Update Guide - Microsoft
  web:msrc.microsoft.com

  How satisfied are you with the MSRC Security Update Guide?

  2026-09-23 22:41 UTC
• FedRAMP VDR and VER Requirements 2026: What CSPs Must Do Before December 7
  web:quzara.com

  FedRAMP VDR and VER become mandatory December 7, 2026 under NTC-0014. What detection cadences, PAIN evaluations, remediation clocks, and reporting requirements CSPs must meet to obtain and maintain authorization.

  2026-09-23 22:41 UTC
• FedRAMP 20x Guide: KSIs, Classes, and Rev 5 | BD Emerson
  web:www.bdemerson.com

  FedRAMP then folded the approach into the Consolidated Rules for 2026 (CR26), launched on June 24, 2026, which now govern both 20x and Rev 5. The legal footing is the FedRAMP Authorization Act, which Congress enacted on December 23, 2022, and OMB Memorandum M-24-15 of July 25, 2024.

  2026-09-23 22:41 UTC
• FedRAMP Releases Its Consolidated Rules for 2026
  web:www.dwt.com

  The Federal Risk and Authorization Management Program (FedRAMP), a cybersecurity assessment and authorization program for cloud service providers (CSPs) to federal government agencies, has released its "Consolidated Rules for 2026"—a major overhaul of existing FedRAMP requirements, consolidated for the first time in one authoritative ruleset .

  2026-09-23 22:41 UTC
• Developer Notes - 2026-10 Ruleset Updates
  web:www.fantasygrounds.com

  Developer Notes - 2026-10 Ruleset Updates We are continuing to work on general ruleset updates . See the main ruleset beta thread for the summary of the updates . Ruleset and Extension developers should feel free to reach out to me for help on migrating their code to the latest version during the Test channel process.

  2026-09-23 22:41 UTC
• Ruleset Reference - FedRAMP Consolidated Rules for 2026
  web:www.fedramp.gov

  Ruleset Reference This section contains generated reference copies of the FedRAMP Consolidated Rules for 2026. These pages show the rules together as complete rulesets instead of carving them into stakeholder-specific sections for providers, agencies, independent assessors, advisors, or FedRAMP.

  2026-09-23 22:41 UTC
• Complete Ruleset Reference - FedRAMP Consolidated Rules for 2026
  web:www.fedramp.gov

  This section contains the entire Consolidated Rules for 2026 as a standalone reference for each ruleset .

  2026-09-23 22:41 UTC

Only Available for Registered Users. Sign in to view.