https://www.cisecurity.org/feed/blogIndustry news, product updates, videos, infographics, and more from CIS.enhttps://www.cisecurity.org/-/jssmedia/project/cisecurity/cisecurity/data/media/img/uploads/2020/04/cropped-cis-512x512-1-32x32.png?h=32&w=32&rev=023ed3a07d874562a4ebce861c4525f0https://www.cisecurity.org/feed/blog706ef305-35b8-4b23-becf-d44d126c0d24https://www.cisecurity.org/insights/blog/healthcare-cybersecurity-what-regulators-are-looking-for-nowHealthcare regulators want proof that your systems are hardened and your controls are documented. See how CIS SecureSuite helps close that gap.Tue, 27 Oct 2026 14:02:00 -0400b9b98ae7-114b-4cc0-bc72-fcaeac2c4dc9https://www.cisecurity.org/insights/blog/from-nis2-to-dora-security-program-that-satisfies-regulatorsNIS2 and DORA reach different organizations, but both ask you to prove cyber risk is managed. See how CIS SecureSuite helps close that gap.Tue, 13 Oct 2026 12:20:00 -04002d7d12af-94aa-4056-8ece-725b52d5f6echttps://www.cisecurity.org/insights/blog/4-ways-ai-changing-public-safety-threat-landscapeLearn how AI is reshaping the public safety threat landscape and reducing the time, effort, and expertise threat actors need to conduct harmful activities.Fri, 09 Oct 2026 12:11:00 -0400d76ca99d-7ed1-4f5a-bab2-d73ffe7fbc51https://www.cisecurity.org/insights/blog/election-threat-2026-10-key-takeawaysMore than 700 election security stakeholders joined the EI-ISAC Election Threat 2026 forum to strengthen coordination, preparedness, and resilience ahead of future elections.Wed, 07 Oct 2026 16:14:00 -0400eac2d50a-b8ed-43f3-b7ac-76ef9216d2a1https://www.cisecurity.org/insights/blog/cis-benchmarks-october-2026-updateThe following CIS Benchmarks were updated during the past month. We've highlighted the major updates below. Each Benchmark includes a full changelog. Tue, 06 Oct 2026 10:10:00 -040003dad088-ec69-4a85-aeb5-42a92f7c3eaahttps://www.cisecurity.org/insights/blog/sltt-c2-traffic-tied-to-remus-malware-distribution-operationThe CIS CTI team identified Remus infostealer distribution activity spanning March through September 2026. Read its analysis.Thu, 01 Oct 2026 16:45:00 -0400ee1c307d-e8cf-4919-8000-90b864ea8cc6https://www.cisecurity.org/insights/blog/ai-raised-the-cyber-stakes-best-practices-still-winAI is accelerating threats, not reinventing them. Learn why proven security fundamentals remain your strongest defense and how CIS SecureSuite Membership helps you apply them at operational speed.Thu, 01 Oct 2026 10:52:00 -0400bb72b011-4eb0-4f25-bb4f-73ec7c46690chttps://www.cisecurity.org/insights/blog/cis-community-defense-model-v3-turning-threat-intelligence-into-actionLearn how CDM v3.0 helps organizations identify high-value CIS Controls Safeguards, strengthen cyber resilience, and reduce risk with confidence.Mon, 21 Sep 2026 09:45:00 -0400062d4a39-6431-4d70-aaf9-deb37972faeehttps://www.cisecurity.org/insights/blog/cis-benchmarks-september-2026-updateThe following CIS Benchmarks were updated during the past month. Each Benchmark includes a full changelog detailing all modifications and enhancements.Fri, 11 Sep 2026 14:15:00 -040068510d43-b111-4653-a8ad-03b7461782e5https://www.cisecurity.org/insights/blog/dual-rmm-phishing-powershell-rat-campaign-hits-slttsAn active phishing campaign is targeting U.S. SLTTs with a custom PowerShell WebSocket RAT and dual RMM tools. Read the CIS CTI team's analysis.Tue, 01 Sep 2026 11:56:00 -040071c99837-1acb-4169-a223-ea899bbe9a1ehttps://www.cisecurity.org/insights/blog/cis-and-sans-longstanding-partnership-built-to-advance-cybersecurityCIS and SANS extend decades of partnership with a new AWS Marketplace offering that combines secure cloud infrastructure and expert training.Wed, 26 Aug 2026 15:36:00 -040075b79628-3419-4b6f-aacf-85c912a31fc0https://www.cisecurity.org/insights/blog/sltt-traffic-directing-s3-buckets-hosting-krustyloaderThe CIS CTI team identified several MS-ISAC members directing DNS traffic to AWS S3 buckets hosting Krustyloader malware. Read its analysis.Mon, 24 Aug 2026 10:05:00 -04002f11ecdf-7571-43e7-93e8-c010f987bdcbhttps://www.cisecurity.org/insights/blog/3-lessons-securing-large-scale-events-inside-fifa-world-cup-2026Lessons learned for securing large scale events and CIS's critical role as a partner supporting event security operations at the 2026 FIFA World CupWed, 19 Aug 2026 09:48:00 -0400d00a3ff6-1a16-4d1a-a592-60953a3ad8f7https://www.cisecurity.org/insights/blog/vishing-evolving-threat-us-sltt-organizationsThe CIS CTI team assesses vishing will continue to pose a risk to U.S. SLTT organizations. Read the team's analysis and recommendations.Mon, 17 Aug 2026 14:32:00 -0400f1b88a1c-d185-44af-8e0c-5821204c89b4https://www.cisecurity.org/insights/blog/recent-water-utility-attacks-offer-a-blueprint-for-resilienceRecent attacks on water systems offer a blueprint for resilience. Explore five lessons utilities can use to strengthen cybersecurity and operations.Fri, 14 Aug 2026 13:40:00 -040032196846-0f8b-4541-a131-0722e60b2575https://www.cisecurity.org/insights/blog/uk-cyber-resilience-closing-execution-gapA UK survey reveals cyber risk is growing, but cyber resilience is not keeping pace. Learn how CIS SecureSuite can help UK organizations move from awareness to execution.Wed, 12 Aug 2026 15:18:00 -0400d7175944-da7f-4234-a7d0-80fc5663dbc3https://www.cisecurity.org/insights/blog/cis-benchmarks-august-2026-updateThe following CIS Benchmarks have been updated during the past month. We've highlighted the major updates below.Tue, 11 Aug 2026 10:23:00 -0400e2ba9899-88b3-4bfb-8423-736c708dfc51https://www.cisecurity.org/insights/blog/security-stagflationWhat's security stagflation look like? The cost of finding bugs is down, but the cost of fixing them is the same. Here's what CISOs need to know.Thu, 06 Aug 2026 16:33:00 -0400b37a2018-a3a5-4d97-b5c5-879eabb58663https://www.cisecurity.org/insights/blog/strengthening-cyber-resilience-through-education-via-essential-cyber-hygiene-bootcampEssential Cyber Hygiene Fundamentals Bootcamp helps cyber practitioners implement CIS IG1 Safeguards, reduce risk and strengthen organizational resilience.Thu, 06 Aug 2026 14:57:00 -040059ce7edd-09af-411b-88c5-0f0cfa07763ehttps://www.cisecurity.org/insights/blog/cis-benchmarks-july-2026-updateThese CIS Benchmarks and CIS Build Kits have been updated or recently released and include a full changelog that references all changes.Wed, 15 Jul 2026 14:49:00 -0400b25504de-09bf-4b3f-8009-ce64807b77a5https://www.cisecurity.org/insights/blog/turning-secure-software-development-into-a-measurable-practiceCIS and SAFECode have updated Secure by Design: A Developer’s Guide to Building Safer Software to address the role of AI on software security.Mon, 13 Jul 2026 10:52:00 -040036312385-b17c-4e14-b853-12955b4a8daahttps://www.cisecurity.org/insights/blog/5-major-emerging-risks-large-scale-eventsTo create safer, more secure large-scale events, read our recommendations for defending against five emerging risks to public gatherings.Thu, 09 Jul 2026 13:07:00 -04009df8c60b-4043-4488-aeba-1375f7f1ccc8https://www.cisecurity.org/insights/blog/cybersecurity-grant-funding-fema-clarifies-slcgp-use-cis-servicesFEMA clarifies that SLCGP/TCGP grants can fund CIS Services. See what qualifies, what's required, and what's next.Mon, 06 Jul 2026 09:44:00 -040032018fb8-b659-4df4-8f4e-54c5aa4f0d50https://www.cisecurity.org/insights/blog/6-key-takeaways-strengthening-public-safety-collective-defenseHere are six key takeaways from a CIS webinar for how U.S. SLTT agencies can strengthen public safety through collective defense.Tue, 30 Jun 2026 10:33:00 -0400962f95eb-ebd5-4e72-848b-3a1b283ba691https://www.cisecurity.org/insights/blog/cis-controls-accreditation-drives-global-cybersecurity-standardsCIS Controls Accreditation is raising global cybersecurity standards, setting a trusted benchmark for excellence, resilience, and best practices.Thu, 25 Jun 2026 13:49:00 -04005ef5dc21-8816-48f9-be5a-06484c0e44e1https://www.cisecurity.org/insights/blog/cis-benchmarks-june-2026-updateThe following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below.Thu, 18 Jun 2026 12:05:00 -0400ed27f9bb-7c28-4f1f-b06c-8e53bd93145chttps://www.cisecurity.org/insights/blog/keep-hipaa-expectations-growing-cyber-threatsHealthcare organizations can satisfy cybersecurity and HIPAA compliance obligations while upholding patient safety. Read on to learn how.Tue, 16 Jun 2026 09:55:00 -04003ecbb2c1-1f12-430f-81c4-f5ef5f80293dhttps://www.cisecurity.org/insights/blog/cis-controls-community-volunteer-spotlight-diego-bolattiDiego Bolatti advances CIS Controls adoption for SMEs through research, policy templates, and AI-driven cybersecurity tools.Fri, 12 Jun 2026 15:59:00 -04000ca58489-73e3-4f28-88a4-ce3c2cac16adhttps://www.cisecurity.org/insights/blog/return-mcap-malware-analysis-built-sltt-membersOur Malicious Code Analysis Platform (MCAP) supports malware analysis specifically designed for SLTT teams. Read our blog post to learn more.Thu, 11 Jun 2026 09:45:00 -04001415d9fc-cf3c-4b04-9766-debabf311183https://www.cisecurity.org/insights/blog/cybersecurity-hygiene-reinforced-by-the-2026-verizon-dbirThe 2026 Verizon DBIR highlights how CIS Controls and CIS Benchmarks strengthen cybersecurity hygiene and defend against today's top attacks.Fri, 05 Jun 2026 17:05:00 -040031f29496-916b-412f-8403-6f8927ae344dhttps://www.cisecurity.org/insights/blog/cis-benchmarks-may-2026-updateThe following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below.Mon, 18 May 2026 16:28:00 -0400a431b6ea-d830-4cea-b748-d0c634b54506https://www.cisecurity.org/insights/blog/securing-the-integration-protocolSecure the protocol layer of AI systems with the CIS MCP Companion Guide, covering authorization, tool access, and execution controls.Thu, 14 May 2026 15:10:00 -0400ca7e5cf3-1caf-4796-81e2-2749700f1461https://www.cisecurity.org/insights/blog/5-steps-to-help-secure-your-city-before-a-large-scale-eventHave a large-scale event coming up? Here are five mitigation measures as part of a comprehensive approach to secure your city.Tue, 12 May 2026 16:22:00 -0400f156ba0e-14ce-4c8e-a2ef-9443ed88b0adhttps://www.cisecurity.org/insights/blog/securing-agents-and-autonomous-behaviorLearn how the CIS AI Agent Companion Guide helps secure the agent layer of AI systems, governing autonomy, tool use, memory, and multi‑agent behavior.Tue, 12 May 2026 09:43:00 -04006e9e2ddc-edff-447e-97a8-9eca4167abfehttps://www.cisecurity.org/insights/blog/standing-strong-together-the-resilient-spirit-of-the-sltt-cybersecurity-communityMore than 5,000 in the U.S. SLTT cybersecurity community have affirmed their belief that collaboration in the MS-ISAC is essential. Read more.Mon, 04 May 2026 15:40:00 -040039d5717a-8bab-496d-930e-cd1b846c6c7ehttps://www.cisecurity.org/insights/blog/cis-benchmarks-april-2026-updateThe following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below. Each Benchmark andFri, 01 May 2026 09:24:00 -040069f444d8-3c8a-4b2f-9fc7-97f3b92aeac6https://www.cisecurity.org/insights/blog/securing-ai-ecosystem-begins-model-layerDownload our three Companion Guides to learn how to stay aligned to the CIS Controls in your real-world AI environments.Thu, 30 Apr 2026 08:59:00 -040005eac6a0-65de-4c06-a333-2ce4828a1e2dhttps://www.cisecurity.org/insights/blog/mythos-ai-what-actually-matters-for-cybersecurity-leadersAI‑driven vulnerability discovery as embodied in Mythos represents an increase in speed and volume. But it does not invalidate what works.Tue, 28 Apr 2026 12:09:00 -0400c87ab56f-a70b-454c-afe7-5d5c4da04a08https://www.cisecurity.org/insights/blog/applying-controls-real-world-ai-environmentsDownload our three Companion Guides to learn how to stay aligned to the CIS Controls in your real-world AI environments.Tue, 21 Apr 2026 17:44:00 -0400e9786d6c-3f00-42e6-b303-ad96b9675436https://www.cisecurity.org/insights/blog/rsac-2026-impressions-from-tony-sagerAfter RSAC 2026 Conference, Tony Sager shares his reflections on the patterns and questions that stayed with him after the rush faded.Thu, 16 Apr 2026 13:54:00 -0400cdeaa5f7-d207-40df-925c-d81ddd229e54https://www.cisecurity.org/insights/blog/from-community-to-cloudCIS Benchmarks and CIS Hardened Images enable secure cloud deployment, reduce misconfigurations, and enforce consistent security baselines.Tue, 14 Apr 2026 09:10:00 -0400129f127a-2503-4f64-97c8-dc8af0d2f424https://www.cisecurity.org/insights/blog/macsync-stealer-campaign-impacting-us-sltt-macos-usersAn ongoing MacSync Stealer campaign is targeting macOS users in U.S. SLTT government organizations. Learn more by reading CIS CTI's analysis.Mon, 13 Apr 2026 09:30:00 -040059aa4617-fed9-4196-8c78-c490106fb487https://www.cisecurity.org/insights/blog/vimeo-themed-phishing-campaign-targeting-personal-dataCIS CTI has identified an ongoing Vimeo-themed phishing campaign impacting U.S. SLTTs. Read the team's analysis to learn how to stay safe.Mon, 06 Apr 2026 13:01:00 -0400286c3c93-7454-4663-8b47-0031714b5012https://www.cisecurity.org/insights/blog/irs-themed-phishing-granting-threat-actors-remote-accessThe CIS CTI team spotted an ongoing campaign targeting SLTT government entities with tax- and IRS-themed phishing lures. Take a closer look.Tue, 24 Mar 2026 14:33:00 -0400c3afa3a6-fbcd-42aa-9e11-50089cfedc9ahttps://www.cisecurity.org/insights/blog/rsac-2026-insights-from-tony-sagerAhead of RSAC 2026 Conference, Tony Sager shares his thoughts about upcoming sessions and how he navigates the conference. Tue, 17 Mar 2026 16:23:00 -0400efa51f55-2480-4cb3-96b9-00b9acfd40c7https://www.cisecurity.org/insights/blog/zphp-campaign-delivering-remcos-rat-impacting-slttsCIS CTI identified an ongoing ZPHP campaign impacting U.S. SLTTs that delivers the Remcos RAT. Find out how to defend your organization.Tue, 17 Mar 2026 16:23:00 -04009489a660-6006-49c9-89df-ead38b4dfa16https://www.cisecurity.org/insights/blog/2025-year-in-review-sustaining-cybersecurityCIS sustained vital protections despite funding cuts and rising multidimensional threats. Learn more by watching our 2025 Year in Review 2025 video.Mon, 16 Mar 2026 09:47:00 -0400b908adc9-db87-410a-a006-e09ef825c4f2https://www.cisecurity.org/insights/blog/cis-benchmarks-march-2026-updateHere is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for March 2026.Fri, 06 Mar 2026 10:06:00 -050049cbd51c-a931-4506-9578-330f86a8efadhttps://www.cisecurity.org/insights/blog/strengthening-software-assurance-across-government-systemsSecure by Design ultimately supports a broader public mission: delivering trustworthy, secure, and sustainable technology that citizens can rely on.Thu, 05 Mar 2026 17:03:00 -050040d4a027-9ff3-417a-87b6-68684e13edc3https://www.cisecurity.org/insights/blog/how-to-defend-against-irans-cyber-retaliation-playbookSecurity leaders must give equal weight to the cyber dimension following U.S.-Israeli kinetic activity against Iran. Here's our recommendations. Wed, 04 Mar 2026 13:54:00 -0500