BarTender: Never had a problem finding the latest release on one of the myriad of different sites hosting a copy and Cisco kindly put the exact file name and MD5/SHA512 hash on their public site so I can confirm the file is legit.

I never thought to try this, got the latest IOS and Firmware for an 897VA just now :)