CIS Logo
tagline: Confidence in the Connected World
Topic
Type



Spotlights
Malware analysis examines the attributes or behavior of a particular piece of malware often for the purpose of identification, mitigation, or attribution.



Emails & Newsletters
User name and password are no longer sufficient. Using multi-factor authentication can help reduce the risk of online fraud and identify theft



Blog post
The top 10 malware activity accounts for 64% of total malware notifications in April, a 7% increase from March. Malspam is the primary initiation vector.



Press releases
A New York tenth-grader, named Cecilia* has been named the national winner of the CIS and MS-ISAC annual Kids Safe Online Poster Contest.



Advisory

Multiple vulnerabilities in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an unauthenticated, remote attacker to execute arbitrary code on the system of a targeted user.




Blog post
Learn where the CIS team will be speaking about cloud security during AWS Public Sector Summit 2019 in Washington DC.



Advisory

Multiple vulnerabilities have been discovered in Adobe Acrobat and Adobe Reader, the most severe of which could allow for arbitrary code execution.




Advisory

Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for code execution.




Advisory

A vulnerability has been discovered in Adobe Flash which could allow for arbitrary code execution.




Advisory

Multiple vulnerabilities have been discovered in watchOS, Safari, tvOS, iOS, Mojave, High Sierra and Sierra.




Spotlights
The three parts commonly used to divide the web are the Surface Web, the Dark Web, and the Deep Web. 



Blog post
Conducting your first cyber risk assessment can be intimidating. Learn how any organization can manage risk with CIS RAM.



Advisory

Multiple vulnerabilities have been discovered in the Google Android operating system (OS), the most severe of which could allow for arbitrary code execution.




Blog post
The Multi-State Information Sharing and Analysis Center has created a list of End-of-Support (EOS) software dates from 1/01/2019 to 4/2020.



Advisory

Multiple vulnerabilities have been discovered in Cisco products, the most severe of which could allow for arbitrary code execution on the affected system.



1 2 3 … 93
Subscribe Arrow