Blog Feed - Center for Internet Security

The MS-ISAC has a vision: to be the premier cyber threat intelligence (CTI) source for all SLTTs and elections infrastructure.

On Election Day 2026, the EI-ISAC shared real-time threat updates with election officials nationwide. See what was reported and how the community responded.

Zero-day attacks often begin before vulnerabilities are disclosed. CIS Benchmarks and secure configuration provide protection that patching alone can't.

Stay up to date with the latest CIS Benchmarks released and updated in November 2026, including Microsoft, AWS, Kubernetes, Docker, NGINX, and more.

Healthcare regulators want proof that your systems are hardened and your controls are documented. See how CIS SecureSuite helps close that gap.

NIS2 and DORA reach different organizations, but both ask you to prove cyber risk is managed. See how CIS SecureSuite helps close that gap.

Learn how AI is reshaping the public safety threat landscape and reducing the time, effort, and expertise threat actors need to conduct harmful activities.

More than 700 election security stakeholders joined the EI-ISAC Election Threat 2026 forum to strengthen coordination, preparedness, and resilience ahead of future elections.

The following CIS Benchmarks were updated during the past month. We've highlighted the major updates below. Each Benchmark includes a full changelog.

The CIS CTI team identified Remus infostealer distribution activity spanning March through September 2026. Read its analysis.

AI is accelerating threats, not reinventing them. Learn why proven security fundamentals remain your strongest defense and how CIS SecureSuite Membership helps you apply them at operational speed.

Learn how CDM v3.0 helps organizations identify high-value CIS Controls Safeguards, strengthen cyber resilience, and reduce risk with confidence.

The following CIS Benchmarks were updated during the past month. Each Benchmark includes a full changelog detailing all modifications and enhancements.

An active phishing campaign is targeting U.S. SLTTs with a custom PowerShell WebSocket RAT and dual RMM tools. Read the CIS CTI team's analysis.

CIS and SANS extend decades of partnership with a new AWS Marketplace offering that combines secure cloud infrastructure and expert training.

The CIS CTI team identified several MS-ISAC members directing DNS traffic to AWS S3 buckets hosting Krustyloader malware. Read its analysis.

Lessons learned for securing large scale events and CIS's critical role as a partner supporting event security operations at the 2026 FIFA World Cup

The CIS CTI team assesses vishing will continue to pose a risk to U.S. SLTT organizations. Read the team's analysis and recommendations.

Recent attacks on water systems offer a blueprint for resilience. Explore five lessons utilities can use to strengthen cybersecurity and operations.

A UK survey reveals cyber risk is growing, but cyber resilience is not keeping pace. Learn how CIS SecureSuite can help UK organizations move from awareness to execution.