Earlier this month, on March 2, NIST formalized a significant number of changes to its password recommendations as part of the final release of its updated Digital Identify Guidelines document or NIST publication SP 800-63-3.  The full document which includes three additional sister documents (800-63A, 800-63B & 800-63C) is here: https://csrc.

In the continuing quest to battle ransomware in our networks, as well as other types of malware, just this month (Jan 2020) the National Institute of Standards and Technology (NIST) has released a brand-new guide to assist in this battle.