EE 0.9.4 adds a HHS-OCR Priority view to HIPAA reports, highlighting the remote-access and unpatched-infrastructure vectors behind a 264% rise in healthcare ransomware breaches.

Verizon’s 2026 DBIR reveals vulnerability exploitation caused 31% of breaches vs 13% for credential theft. Ransomware hit 48%, supply chain breaches up 60%, and AI is compressing exploit timelines.

CVE-2026-20182 is a CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN actively exploited by UAT-8616. CISA Emergency Directive 26-03 mandated federal patching by May 17.

NSAuditor AI EE 0.9.3 closes four SOC 2 evidence-sufficiency gaps: AT-C 320 manual procedures for partial controls, WORM artifact validation, Type II disclosures, and label accuracy.

NSAuditor AI EE 0.9.2 fixes ambiguous zero-CVE scan results: 4 silent coverage gap classes now surface as actionable diagnostics, and CRITICAL/HIGH findings always emit regardless of volume caps.