OASIS

When disaster strikes, getting the right warning to the right people shouldn't require juggling a dozen different systems, which is why the Common Alerting Protocol (CAP) exists. As a globally adopted OASIS open standard, CAP provides the framework for life-saving early warning systems. From 6-8 October, OASIS, the Environment Agency, and alert-hub.org are hosting the 2026 CAP Implementation Workshop and Training in Birmingham, England and online. The event is sponsored by the International Association of Emergency Managers. This year's workshop features 20+ presentations covering CAP in practice across meteorological agencies, broadcasters, and public safety organizations. Elysa Jones, Chair of the OASIS Emergency Management Technical Committee (EM TC), will give an update on the standard's latest advancements. Event info: https://lnkd.in/gVXfvTZT Register here: https://lnkd.in/euec694H #CAP #CommonAlertingProtocol #EmergencyManagement #EmergencyAlerting #openstandards #publicsafety #OASIS

CSAF Community Days 2026 is coming to Hattersheim (Frankfurt area), Germany, and online from November 16-18. Registration is now open! This event focuses on tools, best practices, innovations, and success stories related to the Common Security Advisory Framework (CSAF). Practitioners, developers, producers, consumers, and other community members are invited to share their knowledge. Register here: https://lnkd.in/g8fJv-XT Event details: https://lnkd.in/g_-gSj9y Thank you to our sponsors: [Innovator] Microsoft, Zentric GmbH, and Festo [Community] ifm and Intevation GmbH #CSAF #cybersecurity #openstandards #OASIS

CACAO enables cybersecurity playbooks to be represented and shared in a common machine-readable format, yet their execution still depends on product-specific integrations that are costly to build, validate, and maintain. We introduce the Common CACAO Registry (CCR), an open, quality-gated registry of reusable integrations, supported by a hybrid OpenAPI-to-CACAO pipeline combining deterministic translation with bounded LLM-based semantic enrichment. The initial release includes 713 connector envelopes across eight security APIs, achieving 100% CACAO schema validity, 91.5% mean back-validation accuracy, and 94.7% successfully dispatchable requests. Paper: https://lnkd.in/emw_fXbd CCR (GitHub): https://lnkd.in/eqwv-JBG Presented by Mateusz Zych at #CyberICPS 2026 - 12th Workshop on the Security of Industrial Control Systems & of Cyber-Physical Systems, in conjunction with #ESORICS2026, Rome, Italy. OASIS #CACAOPlaybooks

Over the summer, several frontier labs saw models bypass controls, escape sandboxes, or attack infrastructure during testing. CoSAI's Preparing Defenders workstream (WS2) just published Zero Trust for AI Systems, a guide to applying Zero Trust's proven principles to a new kind of insider threat: the AI system itself. The core argument is direct: authorization can never live inside the model, because a model's outputs and reasoning have to be treated as untrusted no matter how capable it is. The paper walks through a maturity path for closing the gap, from binding agent sessions to user identity through to short-lived, scoped tokens validated at every policy decision point. Read the blog post: https://lnkd.in/eUFR8buk Read the full paper: https://lnkd.in/e_fFxxPV Thank you to the workstream leads, Josiah Hagen and Vinay Bansal, and to all contributors, editors and reviewers of this paper. #CoSAI #ZeroTrust #secureAI #PreparingDefenders #AI

New blog post from the Coalition for Secure AI: a recap of the Open Delegation & Identity Standard (ODIS) working session, where the work stands, and how to get involved: https://lnkd.in/ei39bW6v

Universal Business Language (UBL) V2.5 has been approved as an OASIS Standard. Read our press release here: https://lnkd.in/efSwmNPr This is UBL's most significant release since 2.1: eight new document types, expanded support for invoice and procurement status management, and new Waste Movement and Waste Notification documents that bring circular economy and ISO 14000 alignment into the standard for the first time, all while staying backward compatible with UBL 2.x implementations. "It introduces mechanisms to progressively improve interoperability while preserving backward compatibility, expands UBL's environmental and circularity capabilities with support for ISO 14000, and lays the foundation for JSON and other syntax bindings in future releases," said Kenneth Bengtsson, Chair of the UBL TC. Developed with OASIS Sponsor members IBM, Logius, the Publications Office of the European Union, the U.S. Department of Defense, and other contributors, UBL remains the leading interchange format for structured business documents worldwide. Thank you to everyone who contributed to the development of UBL V2.5! #UBL #datastandards #Interoperability #circulareconomy #sustainability #OASIS

A researcher discovered that the model he was evaluating had broken out of its container when he received an email about it while eating a sandwich in a park. The escape was requested. Publishing the exploit to public websites afterward, to prove it worked, was not. In a new CoSAI Workstream 4 blog post, Ian Molloy explains why agent containment can’t wait and what “strong sandboxing” actually needs to include, down to alerting on denied syscalls and checking the architecture value in your seccomp filters. Read the full post for a closer look at the risks, lessons, and requirements for stronger AI agent containment: https://lnkd.in/eUhBf8XK #CoSAI #secureAI #agenticAI

We're excited to welcome Jess Dickson as OASIS Open's new VP, Standards Development! Jess leads the health and strategic direction of our Technical Committees and Open Projects, helping grow our standards portfolio and advance OASIS specifications toward recognition by international bodies. Jess brings 15 years of standards development experience within the U.S. federal government, including on behalf of the National Institute of Standards & Technology’s (NIST) IT Laboratory. We're looking forward to the impact she brings to our community of TCs and OPs. Welcome to OASIS, Jess! #OASIS #openstandards #opensource #standards

OASIS is recognizing National Emergency Management Awareness Month alongside the International Association of Emergency Managers (IAEM) community. We are highlighting the open standards and open source tools that help emergency managers connect systems, share information, and ultimately save lives when it matters most. The OASIS Emergency Management Technical Committee (EMTC) has been advancing this work for years. We’re excited to share the news that the EMTC will be hosting a pre-conference training session on CAP Occupancy Alerting (CAP-OA) on Sunday, 8 November at the IAEM Annual Conference in Long Beach, CA. Using USGS ShakeAlert® data to model a Magnitude 7.3 earthquake, this live demo will show how occupancy intelligence can improve real-time resource allocation. Attendees will learn how to upgrade alerts for occupancy, respond effectively with limited resources, and use vendor tools that support interoperability, walking away with working examples to start using CAP-OA on day one. More information: https://lnkd.in/eFB-SgFS Stay tuned for more emergency management updates and information all month long! #EMAwarenessMonth #OASIS #openstandards #EmergencyManagement #IAEM

Congratulations to the Coalition for Secure AI (CoSAI) on 2 years of important work advancing secure AI! Turning industry expertise into practical guidance takes real collaboration, and it shows in the resources this project has produced. Learn more about getting involved: https://lnkd.in/eg8VwJeF