Perforce Puppet

Security Compliance Management (SCM) 3.9.0 is now available, bringing support for Ubuntu 24.04, Red Hat Enterprise Linux (RHEL) 10, Puppet Core 9, expanded compliance benchmarks, stronger support for air-gapped environments, and a significant set of security updates. If you're running Ubuntu 24.04, RHEL 10, Puppet 9, private registries, or operating in security-sensitive environments, this release includes several meaningful platform, operational, and compliance improvements. KEY HIGHLIGHTS: - Expanded platform support: SCM 3.9.0 now supports Ubuntu 24.04, Red Hat Enterprise Linux (RHEL) 10, and Puppet Core 9. - Private image registry support: complyadm can now pull SCM container images from private image registries, improving support for air-gapped and restricted environments. - IP-based access restrictions: Keycloak Administration Console and Admin REST APIs can now be restricted to IP addresses defined in the frontdoor allowlist. - Expanded benchmark support: CIS-CAT Pro Assessor has been updated to version 4.65.0 with additional benchmark coverage for AlmaLinux and macOS, plus updated Microsoft Windows benchmarks. - Security hardening: SCM 3.9.0 addresses 119 reported security vulnerabilities along with additional security improvements and fixes. CIS-CAT PRO ASSESSOR UPDATES: SCM 3.9.0 updates CIS-CAT Pro Assessor to version 4.65.0 and adds support for the following benchmarks: - AlmaLinux OS 9 STIG v1.0.0 - Apple macOS 15 (Sequoia) STIG v1.1.0 - Apple macOS 26 Tahoe STIG v1.0.0 Updated benchmarks include: - Microsoft Windows 11 Enterprise Benchmark v5.1.0 - Microsoft Windows Server 2022 Benchmark v5.1.0 - Microsoft Windows Server 2025 Benchmark v2.1.0 OPERATIONAL IMPROVEMENTS AND SECURITY UPDATES: This release includes a number of fixes and enhancements focused on operational stability and security. Notable improvements include: - More reliable handling of interrupted scheduled scans following reboots. - More reliable default benchmark selection when multiple non-STIG benchmarks are available. - Hasura GraphQL field suggestions are now disabled to help prevent schema enumeration. With expanded platform support, broader benchmark coverage, improved support for private registries and air-gapped deployments, and extensive security updates, SCM 3.9.0 helps organizations maintain compliance with greater confidence while reducing administrative overhead. FULL RELEASE NOTES: https://lnkd.in/em6gEHqr #Puppet #DevOps #Security #Compliance #CyberSecurity #RHEL #Ubuntu #PuppetEnterprise

Don't let drift become debt. Every unmanaged configuration change is a compliance gap waiting to surface, and in financial services, gaps cost more than time. If your teams are still chasing drift manually, that's not a process problem. It's a risk problem. See how financial services organizations are closing compliance gaps at scale: https://ter.li/rbs4e6xf

Tomorrow is the day! Join Puppet and Carahsoft to learn how to automate compliance, reduce configuration drift, and enforce security policies across hybrid environments. Register now 🖥️ https://lnkd.in/eP5xvdvh

Environments nearing end of life? Puppet Extended Agent Support keeps your systems secure and compliant while you plan your migration. Learn More >> https://ter.li/nq4n09af

📢 Missed the Puppet 9 Readiness Webinar? It's now available on YouTube. If you're responsible for keeping infrastructure secure, compliant, and stable, this session provides the guidance you need to prepare with confidence. Watch now and start building your Puppet 9 adoption plan ▶️ https://lnkd.in/e7MTeCSU

Your systems may be compliant today. Will they still be compliant six months from now? Join Perforce Puppet and Carahsoft to see how leading organizations automate system hardening, reduce configuration drift, and continuously enforce security policies across hybrid environments. Learn how infrastructure automation can help simplify compliance efforts and strengthen operational resilience. 🗓️ https://lnkd.in/eP5xvdvh

Knowing where compliance risk lives is only the beginning. The next challenge: continuously enforcing the controls that keep infrastructure secure, compliant, and audit-ready. In this article, Ron Hoffner explores why enforcement, not just evidence collection, is the future of compliance. Missed Parts 1 & 2? Start there, then dive into the latest post.  📖 Part 1: https://lnkd.in/eeHKDeJg 📖 Part 2: https://lnkd.in/eXm5u-2F

With Puppet's Observability Data Connector, organizations can view compliance and infrastructure data into their existing observability tools; helping teams identify security gaps, track remediation efforts, and monitor compliance status in real time. Take a tour of the interactive demo to see how centralized insights can help you improve security posture and make faster decisions. https://ter.li/8n79lb

Many organizations view Kubernetes as a modernization initiative. Compliance teams see something else: a governance challenge. Nico Krüger explores why Kubernetes has become part of the broader compliance conversation, and why continuous policy enforcement, automated remediation, and audit-ready evidence are becoming critical requirements for regulated organizations. Read the full article ↓ https://lnkd.in/eeHKDeJg