CIS News

The following CIS Benchmarks were updated during the past month. Each Benchmark includes a full changelog detailing all modifications and enhancements.

An active phishing campaign is targeting U.S. SLTTs with a custom PowerShell WebSocket RAT and dual RMM tools. Read the CIS CTI team’s analysis.

CIS and SANS extend decades of partnership with a new AWS Marketplace offering that combines secure cloud infrastructure and expert training.

The CIS CTI team identified several MS-ISAC members directing DNS traffic to AWS S3 buckets hosting Krustyloader malware. Read its analysis.

Lessons learned for securing large scale events and CIS’s critical role as a partner supporting event security operations at the 2026 FIFA World Cup

The CIS CTI team assesses vishing will continue to pose a risk to U.S. SLTT organizations. Read the team’s analysis and recommendations.

Recent attacks on water systems offer a blueprint for resilience. Explore five lessons utilities can use to strengthen cybersecurity and operations.

A UK survey reveals cyber risk is growing, but cyber resilience is not keeping pace. Learn how CIS SecureSuite can help UK organizations move from awareness to execution.

The following CIS Benchmarks have been updated during the past month. We’ve highlighted the major updates below.

What’s security stagflation look like? The cost of finding bugs is down, but the cost of fixing them is the same. Here’s what CISOs need to know.