Mission, decoded

SSHole, CVE-2026-123158, lets attackers log in to some musl-based Linux hosts with no password. The four conditions, the November 12 KEV date and how to check.

OMB M-26-14 replaced M-21-31. Agency logging plans are due November 18, 2026, then maturity deadlines follow. What the memo requires and how retention changed.

FAR Part 10 market research is now one short section, and a proposed rule would move it to FAR 7.2. What each version requires and what to document now.

OMB no longer requires agencies to collect the secure software development attestation form. What M-26-05 changed and what agencies can still ask for.

The CISA zero trust maturity model is a guide, not a rule. How it lines up with OMB M-22-09 and how to score it row by row, with a real 2026 audit as the example.

Ivanti Connect Secure builds from October 13 remain exposed to CVE-2026-111357. Fixed builds, KEV dates, and why a clean Integrity Checker result settles nothing.

The first full FedRAMP 20x Class C certification came in October 2026. How pilot listings differ and what agency reviewers can check before relying on one.

OMB M-26-18 sets eight deadlines, not one. See which public websites are in scope, the Login.gov dates on a calendar and when other sign-on tools can stay.

PHP2Shell is flagged for forensic triage in the KEV catalog. What BOD 26-04 asks of agencies, the order of the steps and where PHP gets missed by a patch report.

Federal policy defines phishing-resistant MFA narrowly. What OMB M-22-09 and NIST SP 800-63B-4 require, which authenticators qualify and where synced passkeys fit.

The FAR overhaul runs on three layers: agency class deviations, eight proposed rules and the FAR Companion. Which one governs a buy, and which parts still wait.

Two DHS FASCSA orders in ten days. What an order requires of civilian agencies, the 60- and 180-day clocks, and what FAR 52.204-30 asks of contractors.

NIST IR 8547 is final. What deprecated after 2030 and disallowed after 2035 mean, which earlier federal dates still apply, and what to check first.

OMB M-25-21 explained: which deadlines have passed, what recurs, how agencies decide an AI use is high-impact and what each one must document before use.

How long does an ATO take? The published federal figures, the RMF tasks that sit on the waiting path, how long an ATO lasts and how to plan the schedule.

Federal post-quantum cryptography deadlines from EO 14412 and OMB M-26-15, date by date: the October 22 plans, the December 19 actions and the 2030 and 2031 cutoffs.

How the Tradewinds Solutions Marketplace works: what Awardable means, the authority behind it, who can buy, how an award happens and how it differs from GSA MAS.

How the CISA known exploited vulnerabilities catalog sets due dates since BOD 26-04: 21 days became three or 14, forensic triage flags and the December 7 date.

AI in federal acquisition, stage by stage: the tools GSA and the Army report using, which decisions the FAR keeps with a named official and what OMB requires.

FedRAMP 20x certifies cloud services in Classes A to D and ends new Rev5 applications June 11, 2027. What it changes for agency ATOs, solicitations and reviews.

CMMC Phase 2 was set for November 10, 2026, then suspended. What is paused, what still applies to defense contractors and how to prepare while DoW reviews CMMC.

What is PALT? The official definition of procurement administrative lead time, how agencies measure it, what GAO found about it and where the time goes.

GSA's AI clause, GSAR 552.239-7001, takes effect October 19, 2026. What it requires, which AI purchases it covers, what changed from the draft and how to prepare.

Pyramid Systems wins HUD's Acquisition Modernization Support Services contract, deploying AIR-Quire AI to accelerate federal procurement.

How federal agencies can meet the July 2025 Executive Order for unbiased AI, truth-seeking, ideologically neutral generative AI.

How Pyramid built a secure, compliant multi-account federal AWS environment with Terraform IaC and DevSecOps pipelines.

The April 2025 Executive Order on AI education and workforce development, and how Pyramid invests in the federal AI talent pipeline.

The April 2025 federal Permitting Technology Action Plan, data standards, interagency systems, case management modernization.

Six practical prompt-engineering techniques for federal workers using ChatGPT, Grok, and other AI tools.

How federal agencies can clear the four real barriers to AI adoption, procurement, data, skills, and governance, in parallel, not in sequence.

How federal grant programs use analytics across intake, portfolio risk, and outcomes to lift mission effectiveness, and where most initiatives stall.

Why traditional federal test data fails, and how AI-powered synthetic data delivers faster delivery, better coverage, and PII-safe environments at scale.

How Pyramid built an end-to-end ML/AI data pipeline on Google Cloud, ingestion, orchestration, feature store, training, serving, and monitoring.

How federal teams cut Authority-to-Operate timelines with DevSecOps, control inheritance, evidence-as-code, and continuous monitoring.

Inside Pyramid Labs, our lean-startup innovation function that takes federal mission challenges from idea to production-ready solution.

Pyramid Systems partners with FedsForward to invest in the next generation of public service talent through paid externships and mentorship.

Inside Pyramid Nexus, our internal program connecting employees across teams and projects to drive innovation and career growth at scale.

Pyramid Systems launches a student debt relief program, a direct investment in the financial wellbeing of the next generation of federal IT talent.

Inside Pyramid's Smiles for Miles summer wellness challenge, how a fitness program builds team connections and supports the work we deliver.

Why employee-centric culture is the engine behind Pyramid Systems' federal client service excellence, and what that means for delivery quality.

How Pyramid's annual hackathon channels technical talent into philanthropy, building tools for local non-profits and community partners.

Pyramid Systems recertifies as an AWS Advanced Tier Partner for 2024, recognition of our federal AWS delivery and certified workforce.

Pyramid showcased federal identity management at Identity Week USA 2023, including BITT, our biometric interoperability federation system.

How Pyramid Systems founders Sherry and Jeff Hwang built a federal IT contractor from the ground up, the 25-year story behind the firm.