[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cis\u002F13":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cis","13","Control 13","Network Monitoring and Defense",1398,"Center for Internet Security (CIS)","**What it asks for.** This control asks organisations to operate processes and tooling that provide comprehensive monitoring of and defence against threats across their network. It includes centralised alerting, intrusion detection or prevention, segmentation and traffic filtering.\n\n**In practice.** Mature teams correlate network and host telemetry in a central platform, deploy intrusion detection or network detection and response at key points, and filter traffic between segments. Port level access control, remote device posture checks and flow logging support investigations. A security operations function, internal or outsourced, tunes detection and handles alerts. Evidence includes architecture showing monitoring points, alert handling metrics and tuning records.\n\n**Common gaps.** Visibility of east west traffic and cloud networks is often weak, and alert fatigue leads to untuned rules being ignored. Segmentation plans exist on paper but are not enforced.",null,"https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002Fnetwork-monitoring-and-defense","Read the control at CIS","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"ad-network-used-as-zero-click-spyware-delivery-channel-via-real-time-bidding","Ad Network Used as Zero-Click Spyware Delivery Channel via Real-Time Bidding","2026-10-17T12:20:32.316+00:00",{"slug":23,"title":24,"published_at":25},"critical-magento-rce-flaw-demands-immediate-patching","Critical Magento RCE Flaw Demands Immediate Patching","2026-10-16T22:20:34.131+00:00",{"slug":27,"title":28,"published_at":29},"beyondtrust-zero-day-highlights-critical-risk-of-unpatched-edge-devices","BeyondTrust Zero-Day Highlights Critical Risk of Unpatched Edge Devices","2026-10-16T22:20:18.59+00:00",{"slug":31,"title":32,"published_at":33},"ai-compromises-robotic-arm-in-16-minutes-exposing-ot-security-gaps","AI Compromises Robotic Arm in 16 Minutes, Exposing OT Security Gaps","2026-10-16T20:20:16.394+00:00",{"slug":35,"title":36,"published_at":37},"chinese-espionage-group-exploits-beyondtrust-zero-day-in-remote-support-tool","Chinese Espionage Group Exploits BeyondTrust Zero-Day in Remote Support Tool","2026-10-16T18:20:52.789+00:00",{"slug":39,"title":40,"published_at":41},"zero-click-ad-spyware-bypasses-user-interaction-to-compromise-devices","Zero-Click Ad Spyware Bypasses User Interaction to Compromise Devices","2026-10-16T18:20:36.559+00:00",{"slug":43,"title":44,"published_at":45},"burger-king-japan-breach-exposes-11m-app-users-personal-data","Burger King Japan Breach Exposes 11M App Users' Personal Data","2026-10-16T15:20:48.695+00:00",{"slug":47,"title":48,"published_at":49},"chinese-apt-exploits-beyondtrust-zero-day-to-harvest-credentials-and-exfiltrate-data","Chinese APT Exploits BeyondTrust Zero-Day to Harvest Credentials and Exfiltrate Data","2026-10-16T12:20:53.961+00:00",{"slug":51,"title":52,"published_at":53},"peerstitch-malware-exploits-unpatched-fortios-to-evade-detection-via-legitimate-processes","PEERSTITCH Malware Exploits Unpatched FortiOS to Evade Detection via Legitimate Processes","2026-10-16T08:21:33.492+00:00",{"slug":55,"title":56,"published_at":57},"china-linked-hackers-exploit-beyondtrust-zero-day-to-seize-remote-support-servers","China-Linked Hackers Exploit BeyondTrust Zero-Day to Seize Remote Support Servers","2026-10-16T08:20:44.884+00:00",{"slug":59,"title":60,"published_at":61},"unpatched-collabora-rce-flaw-lets-attackers-backdoor-nextcloud-servers","Unpatched Collabora RCE Flaw Lets Attackers Backdoor Nextcloud Servers","2026-10-15T22:20:38.386+00:00",{"slug":63,"title":64,"published_at":65},"malicious-ad-networks-weaponized-to-silently-deploy-candiru-spyware","Malicious Ad Networks Weaponized to Silently Deploy Candiru Spyware","2026-10-15T22:20:22.695+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",572,{"slug":73,"name":74,"problem":75,"stories":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",338,{"slug":78,"name":79,"problem":80,"stories":81},"patch-management","Automated patch management","Known holes get closed in days, not months.",336,{"slug":83,"name":84,"problem":85,"stories":86},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",191,{"slug":88,"name":89,"problem":90,"stories":91},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",175,{"slug":93,"name":94,"problem":95,"stories":96},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",155,[98,104,109,114,119,125,131,136],{"family":99,"item":100,"code":101,"title":102,"together":103},"gdpr","32","Article 32","Security of processing",615,{"family":105,"item":106,"code":107,"title":107,"together":108},"itil","overview","ITIL",560,{"family":5,"item":110,"code":111,"title":112,"together":113},"12","Control 12","Network Infrastructure Management",529,{"family":5,"item":115,"code":116,"title":117,"together":118},"7","Control 7","Continuous Vulnerability Management",499,{"family":120,"item":121,"code":122,"title":123,"together":124},"nist-800-53","sc-7","SC-7","Boundary Protection",441,{"family":126,"item":127,"code":128,"title":129,"together":130},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",364,{"family":120,"item":132,"code":133,"title":134,"together":135},"si-3","SI-3","Malicious Code Protection",352,{"family":120,"item":137,"code":138,"title":139,"together":140},"si-2","SI-2","Flaw Remediation",340]