Blog Feed - Center for Internet Security

NIS2 and DORA reach different organizations, but both ask you to prove cyber risk is managed. See how CIS SecureSuite helps close that gap.

Learn how AI is reshaping the public safety threat landscape and reducing the time, effort, and expertise threat actors need to conduct harmful activities.

More than 700 election security stakeholders joined the EI-ISAC Election Threat 2026 forum to strengthen coordination, preparedness, and resilience ahead of future elections.

The following CIS Benchmarks were updated during the past month. We've highlighted the major updates below. Each Benchmark includes a full changelog.

The CIS CTI team identified Remus infostealer distribution activity spanning March through September 2026. Read its analysis.

AI is accelerating threats, not reinventing them. Learn why proven security fundamentals remain your strongest defense and how CIS SecureSuite Membership helps you apply them at operational speed.

Learn how CDM v3.0 helps organizations identify high-value CIS Controls Safeguards, strengthen cyber resilience, and reduce risk with confidence.

The following CIS Benchmarks were updated during the past month. Each Benchmark includes a full changelog detailing all modifications and enhancements.

An active phishing campaign is targeting U.S. SLTTs with a custom PowerShell WebSocket RAT and dual RMM tools. Read the CIS CTI team's analysis.

CIS and SANS extend decades of partnership with a new AWS Marketplace offering that combines secure cloud infrastructure and expert training.

The CIS CTI team identified several MS-ISAC members directing DNS traffic to AWS S3 buckets hosting Krustyloader malware. Read its analysis.

Lessons learned for securing large scale events and CIS's critical role as a partner supporting event security operations at the 2026 FIFA World Cup

The CIS CTI team assesses vishing will continue to pose a risk to U.S. SLTT organizations. Read the team's analysis and recommendations.

Recent attacks on water systems offer a blueprint for resilience. Explore five lessons utilities can use to strengthen cybersecurity and operations.

A UK survey reveals cyber risk is growing, but cyber resilience is not keeping pace. Learn how CIS SecureSuite can help UK organizations move from awareness to execution.

The following CIS Benchmarks have been updated during the past month. We've highlighted the major updates below.

What's security stagflation look like? The cost of finding bugs is down, but the cost of fixing them is the same. Here's what CISOs need to know.

Essential Cyber Hygiene Fundamentals Bootcamp helps cyber practitioners implement CIS IG1 Safeguards, reduce risk and strengthen organizational resilience.

These CIS Benchmarks and CIS Build Kits have been updated or recently released and include a full changelog that references all changes.

The Enterprise Asset Management Policy Template for CIS Controls v8.1 in French helps organizations inventory, track, and manage enterprise assets across physical, virtual, and cloud environments.