[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cis\u002F12":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cis","12","Control 12","Network Infrastructure Management",1592,"Center for Internet Security (CIS)","**What it asks for.** Organisations should actively manage network devices such as routers, switches, firewalls and wireless access points to stop attackers exploiting vulnerable services and weak configurations. It covers keeping infrastructure up to date, documenting architecture and securing management access.\n\n**In practice.** Network firmware is kept current, configurations are standardised and version controlled, and an up to date architecture diagram shows segments and trust boundaries. Administration happens over secure protocols from dedicated management networks or privileged access workstations, and remote access uses authenticated, encrypted channels. Evidence includes network diagrams, firmware version reports, configuration backups and change records.\n\n**Common gaps.** Network devices are frequently left on old firmware because patching requires downtime, and management interfaces are sometimes exposed to user networks or the internet. Architecture documentation tends to drift away from reality.",null,"https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002Fnetwork-infrastructure-management","Read the control at CIS","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"connectwise-supply-chain-attack-compromises-162-microsoft-365-tenants","ConnectWise Supply-Chain Attack Compromises 162 Microsoft 365 Tenants","2026-10-17T16:20:21.545+00:00",{"slug":23,"title":24,"published_at":25},"compromised-connectwise-credential-exposes-173-microsoft-365-tenants","Compromised ConnectWise Credential Exposes 173 Microsoft 365 Tenants","2026-10-17T08:20:20.122+00:00",{"slug":27,"title":28,"published_at":29},"critical-beyondtrust-auth-bypass-actively-exploited-patch-immediately","Critical BeyondTrust Auth Bypass Actively Exploited — Patch Immediately","2026-10-16T22:21:05.267+00:00",{"slug":31,"title":32,"published_at":33},"beyondtrust-zero-day-highlights-critical-risk-of-unpatched-edge-devices","BeyondTrust Zero-Day Highlights Critical Risk of Unpatched Edge Devices","2026-10-16T22:20:18.59+00:00",{"slug":35,"title":36,"published_at":37},"active-exploitation-of-fortinet-and-beyondtrust-flaws-highlights-patch-urgency","Active Exploitation of Fortinet and BeyondTrust Flaws Highlights Patch Urgency","2026-10-16T20:21:00.599+00:00",{"slug":39,"title":40,"published_at":41},"ai-compromises-robotic-arm-in-16-minutes-exposing-ot-security-gaps","AI Compromises Robotic Arm in 16 Minutes, Exposing OT Security Gaps","2026-10-16T20:20:16.394+00:00",{"slug":43,"title":44,"published_at":45},"chinese-espionage-group-exploits-beyondtrust-zero-day-in-remote-support-tool","Chinese Espionage Group Exploits BeyondTrust Zero-Day in Remote Support Tool","2026-10-16T18:20:52.789+00:00",{"slug":47,"title":48,"published_at":49},"ics-sniper-xworm-rce-and-ai-introduced-software-flaws-highlight-diverse-attack-surface","ICS-Sniper, XWorm RCE, and AI-Introduced Software Flaws Highlight Diverse Attack Surface","2026-10-16T16:20:31.539+00:00",{"slug":51,"title":52,"published_at":53},"ai-models-act-autonomously-to-bypass-auth-and-raid-crypto-wallets","AI Models Act Autonomously to Bypass Auth and Raid Crypto Wallets","2026-10-16T12:21:09.736+00:00",{"slug":55,"title":56,"published_at":57},"chinese-apt-exploits-beyondtrust-zero-day-to-harvest-credentials-and-exfiltrate-data","Chinese APT Exploits BeyondTrust Zero-Day to Harvest Credentials and Exfiltrate Data","2026-10-16T12:20:53.961+00:00",{"slug":59,"title":60,"published_at":61},"critical-rce-flaws-in-f5-nginx-and-juniper-junos-os-demand-immediate-patching","Critical RCE Flaws in F5 NGINX and Juniper Junos OS Demand Immediate Patching","2026-10-16T10:20:14.366+00:00",{"slug":63,"title":64,"published_at":65},"peerstitch-malware-exploits-unpatched-fortios-to-evade-detection-via-legitimate-processes","PEERSTITCH Malware Exploits Unpatched FortiOS to Evade Detection via Legitimate Processes","2026-10-16T08:21:33.492+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"patch-management","Automated patch management","Known holes get closed in days, not months.",903,{"slug":73,"name":74,"problem":75,"stories":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",805,{"slug":78,"name":79,"problem":80,"stories":81},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",462,{"slug":83,"name":84,"problem":85,"stories":86},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",326,{"slug":88,"name":89,"problem":90,"stories":91},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",221,{"slug":93,"name":94,"problem":95,"stories":96},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",199,[98,103,109,113,118,123,129,135],{"family":5,"item":99,"code":100,"title":101,"together":102},"7","Control 7","Continuous Vulnerability Management",1097,{"family":104,"item":105,"code":106,"title":107,"together":108},"nist-800-53","si-2","SI-2","Flaw Remediation",905,{"family":110,"item":111,"code":112,"title":112,"together":76},"itil","overview","ITIL",{"family":104,"item":114,"code":115,"title":116,"together":117},"sc-7","SC-7","Boundary Protection",564,{"family":5,"item":119,"code":120,"title":121,"together":122},"13","Control 13","Network Monitoring and Defense",529,{"family":124,"item":125,"code":126,"title":127,"together":128},"nist-sp","800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",473,{"family":130,"item":131,"code":132,"title":133,"together":134},"gdpr","32","Article 32","Security of processing",423,{"family":104,"item":136,"code":137,"title":138,"together":134},"ra-5","RA-5","Vulnerability Monitoring and Scanning"]