Blog Feed - Center for Internet Security

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for July 2025.

How do U.S. IC organizations strengthen their cloud security in a way that meets their needs? See how the CIS Hardened Images® can help.

Today’s digital threats don’t discriminate by size or sector. Building a solid cybersecurity foundation is no longer optional—it’s essential.

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for June 2025.

Want to enhance your threat modeling? By combining it with threat actor attribution, you can improve your cyber defenses. Read on to learn more.

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for May 2025.

In Q1 2025, the Top 10 Malware observed via the MS-ISAC® changed slightly from the previous quarter. Read our blog post to learn more.

DieNet is a hacktivist group that's claimed DDoS attacks against U.S. critical infrastructure. Read on to learn its ideology and attack activity.

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for April 2025.

How are you preparing for the sunset of the FFIEC CAT? Read on to learn how another framework can guide you through this change.

CIS analysts break down the rise of DeepSeek, a GenAI model that collects data and introduces security risks for users.

The CIS CTI team spotted a Lumma Stealer campaign where SLTT victims were redirected to malicious webpages delivering fake CAPTCHA verifications.

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for March 2025.

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for February 2025.

In Q4 2024, the Top 10 Malware observed by the MS-ISAC® changed slightly from the previous quarter. Here are the malware that topped our list.

Here is an overview of the CIS Benchmarks that the Center for Internet Security updated or released for January 2025.

In H2 2024, the CIS CTI team found weak security configurations through passive scans of customers' external networks. Here's how to stay secure.

Here is an overview of the CIS Benchmarks that the Center for Internet Security updated or released for December 2024.

The Lynx ransomware group targeted multiple U.S. facilities in 2024. Here's how your facility can strengthen your defenses against threats like Lynx.

The CIS CTI team responded to member incident reports and monitored reporting trends around the 2024 General Election. Here's what the team observed.