Blog Feed - Center for Internet Security

What does 2026 have in store for cybersecurity? Read our experts' 2026 cybersecurity predictions to find out and get planning.

We've highlighted the major updates for CIS Benchmarks and CIS Build Kits in the Benchmarks Monthly Update for October 2025.

The CIS CTI team saw an uptick in member-submitted phishing emails in Q3 2025. Learn the overlap these emails have with the Tycoon2FA PhaaS kit.

Secure by Design offers practical, risk-based strategies for integrating security into the software development lifecycle.

The CIS CTI tracked two ClickFix campaigns between January 2025 and October 2025. Learn more about them and how to defend yourself.

Looking to simplify security management and accelerate audits? Read our blog post to learn how our CIS SecureSuite Platform can help!

Learn how to accelerate your healthcare compliance with CIS Hardened Images and CIS SecureSuite for secure, audit-ready cloud environments.

Learn how to streamline security with the CIS SecureSuite Platform and new Intune/M365 Build Kits — plus audit-ready reporting tools.

Explore how reasonable cybersecurity is evolving from a legal concept into a practical standard for protecting systems and consumer data.

Explore how reasonable cybersecurity is evolving from a legal concept into a practical standard for protecting systems and consumer data.

Discover how CIS Benchmarks and CIS Controls help energy and utility companies strengthen cybersecurity across IT and OT environments.

Discover how CIS Benchmarks and CIS Controls help energy and utility companies strengthen cybersecurity across IT and OT environments.

The following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below.

The following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below.

In Q2 2025, Qilin became the most active ransomware targeting U.S. SLTT government entities. Read the CIS CTI team's analysis to learn more.

In Q2 2025, Qilin became the most active ransomware targeting U.S. SLTT government entities. Read the CIS CTI team's analysis to learn more.

Learn about the top external network risks and recommendations to harden configurations from the CIS Cyber Threat Intelligence team.

Learn about the top external network risks and recommendations to harden configurations from the CIS Cyber Threat Intelligence team.

The CIS Controls Ambassador program is an initiative of the CIS that focuses on enhancing the adoption of key cybersecurity best practices.

The CIS Controls Ambassador program is an initiative of the CIS that focuses on enhancing the adoption of key cybersecurity best practices.