Blog Feed - Center for Internet Security

Secure by Design offers practical, risk-based strategies for integrating security into the software development lifecycle.

The CIS CTI tracked two ClickFix campaigns between January 2025 and October 2025. Learn more about them and how to defend yourself.

Looking to simplify security management and accelerate audits? Read our blog post to learn how our CIS SecureSuite Platform can help!

Learn how to accelerate your healthcare compliance with CIS Hardened Images and CIS SecureSuite for secure, audit-ready cloud environments.

Learn how to streamline security with the CIS SecureSuite Platform and new Intune/M365 Build Kits — plus audit-ready reporting tools.

Explore how reasonable cybersecurity is evolving from a legal concept into a practical standard for protecting systems and consumer data.

Explore how reasonable cybersecurity is evolving from a legal concept into a practical standard for protecting systems and consumer data.

Discover how CIS Benchmarks and CIS Controls help energy and utility companies strengthen cybersecurity across IT and OT environments.

Discover how CIS Benchmarks and CIS Controls help energy and utility companies strengthen cybersecurity across IT and OT environments.

The following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below.

The following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below.

In Q2 2025, Qilin became the most active ransomware targeting U.S. SLTT government entities. Read the CIS CTI team's analysis to learn more.

In Q2 2025, Qilin became the most active ransomware targeting U.S. SLTT government entities. Read the CIS CTI team's analysis to learn more.

Learn about the top external network risks and recommendations to harden configurations from the CIS Cyber Threat Intelligence team.

Learn about the top external network risks and recommendations to harden configurations from the CIS Cyber Threat Intelligence team.

The CIS Controls Ambassador program is an initiative of the CIS that focuses on enhancing the adoption of key cybersecurity best practices.

The CIS Controls Ambassador program is an initiative of the CIS that focuses on enhancing the adoption of key cybersecurity best practices.

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for August 2025.

Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for August 2025.

Cyber threat actors frequently use a botnet in their efforts to target U.S. critical infrastructure. Read on for how to defend your networks.