Blog Feed - Center for Internet Security

In Q2 2025, Qilin became the most active ransomware targeting U.S. SLTT government entities. Read the CIS CTI team's analysis to learn more.

Learn about the top external network risks and recommendations to harden configurations from the CIS Cyber Threat Intelligence team.

The CIS Controls Ambassador program is an initiative of the CIS that focuses on enhancing the adoption of key cybersecurity best practices.

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for August 2025.

Cyber threat actors frequently use a botnet in their efforts to target U.S. critical infrastructure. Read on for how to defend your networks.

Cyber threat actors continue to target law enforcement agencies. Here are five cyber questions LE executives can ask to evaluate their defenses.

Learn how the CIS IT team successfully implemented CIS Benchmarks in a Virtual Desktop Infrastructure (VDI) environment—specifically focusing on Windows 11.

Automation for Controls: Meet OSCAL, the Open Security Controls Assessment Language OSCAL, also known as the Open Security Controls Assessment.

Total malware notifications from MS-ISAC monitoring services decreased 18% from Q1 2025 to Q2 2025. Read our Top 10 Malware Q2 2025 for more.

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for July 2025.

How do U.S. IC organizations strengthen their cloud security in a way that meets their needs? See how the CIS Hardened Images® can help.

Today’s digital threats don’t discriminate by size or sector. Building a solid cybersecurity foundation is no longer optional—it’s essential.

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for June 2025.

Want to enhance your threat modeling? By combining it with threat actor attribution, you can improve your cyber defenses. Read on to learn more.

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for May 2025.

In Q1 2025, the Top 10 Malware observed via the MS-ISAC® changed slightly from the previous quarter. Read our blog post to learn more.

DieNet is a hacktivist group that's claimed DDoS attacks against U.S. critical infrastructure. Read on to learn its ideology and attack activity.

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for April 2025.

How are you preparing for the sunset of the FFIEC CAT? Read on to learn how another framework can guide you through this change.

CIS analysts break down the rise of DeepSeek, a GenAI model that collects data and introduces security risks for users.