[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cis\u002F4":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cis","4","Control 4","Secure Configuration of Enterprise Assets and Software",956,"Center for Internet Security (CIS)","**What it asks for.** Organisations should establish and maintain hardened configurations for end user devices, servers, network devices, cloud services and applications, replacing insecure vendor defaults. Configurations should be documented, applied consistently and kept from drifting.\n\n**In practice.** Teams typically start from recognised hardening benchmarks, adapt them into internal standards and deploy them through configuration management, group policy, MDM or infrastructure as code. Default accounts are disabled or renamed, unnecessary services are removed, screen locks and host firewalls are enforced, and automated compliance scans detect drift. Evidence includes the approved baselines, deployment records, drift or compliance reports and exceptions with owners and review dates.\n\n**Common gaps.** Baselines are often defined for servers but not for network gear, cloud tenants or SaaS settings. Drift goes unnoticed when compliance scanning is missing, and temporary exceptions quietly become permanent.",null,"https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002Fsecure-configuration-of-enterprise-assets-and-software","Read the control at CIS","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"connectwise-cloud-backup-suspended-after-microsoft-365-tenant-compromise","ConnectWise Cloud Backup Suspended After Microsoft 365 Tenant Compromise","2026-10-18T10:20:20.475+00:00",{"slug":23,"title":24,"published_at":25},"federal-agencies-issue-cybersecurity-guidance-for-frontier-ai-systems","Federal Agencies Issue Cybersecurity Guidance for Frontier AI Systems","2026-10-17T02:20:17.238+00:00",{"slug":27,"title":28,"published_at":29},"ai-compromises-robotic-arm-in-16-minutes-exposing-ot-security-gaps","AI Compromises Robotic Arm in 16 Minutes, Exposing OT Security Gaps","2026-10-16T20:20:16.394+00:00",{"slug":31,"title":32,"published_at":33},"beyondtrust-zero-day-exploited-for-months-before-patch","BeyondTrust Zero-Day Exploited for Months Before Patch","2026-10-16T08:21:15.847+00:00",{"slug":35,"title":36,"published_at":37},"critical-rce-dns-wallet-theft-container-escape-self-healing-malware-highlight-diverse-threat-week","Critical RCE, DNS Wallet Theft, Container Escape & Self-Healing Malware Highlight Diverse Threat Week","2026-10-15T20:20:52.553+00:00",{"slug":39,"title":40,"published_at":41},"ai-powered-android-defenses-target-voice-cloning-and-messaging-scams","AI-Powered Android Defenses Target Voice Cloning and Messaging Scams","2026-10-15T20:20:20.548+00:00",{"slug":43,"title":44,"published_at":45},"hard-coded-credentials-in-eseecloud-ip-cameras-leave-users-exposed","Hard-Coded Credentials in EseeCloud IP Cameras Leave Users Exposed","2026-10-15T18:21:38.566+00:00",{"slug":47,"title":48,"published_at":49},"path-traversal-flaw-in-thermo-fisher-torrent-suite-exposes-sensitive-files","Path Traversal Flaw in Thermo Fisher Torrent Suite Exposes Sensitive Files","2026-10-15T18:21:22.798+00:00",{"slug":51,"title":52,"published_at":53},"critical-vulnerabilities-in-medical-imaging-software-threaten-patient-data","Critical Vulnerabilities in Medical Imaging Software Threaten Patient Data","2026-10-15T18:21:06.642+00:00",{"slug":55,"title":56,"published_at":57},"malicious-aur-packages-execute-root-level-malware-via-typosquatting","Malicious AUR Packages Execute Root-Level Malware via Typosquatting","2026-10-15T18:20:20.988+00:00",{"slug":59,"title":60,"published_at":61},"nginx-patches-rce-and-tls-auth-bypass-flaws-including-a-20-year-old-bug","NGINX Patches RCE and TLS Auth Bypass Flaws — Including a 20-Year-Old Bug","2026-10-15T16:21:08.659+00:00",{"slug":63,"title":64,"published_at":65},"vibetech-exposes-137m-records-in-unsecured-database","Vibetech Exposes 13.7M Records in Unsecured Database","2026-10-15T16:20:19.435+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",361,{"slug":73,"name":74,"problem":75,"stories":76},"patch-management","Automated patch management","Known holes get closed in days, not months.",330,{"slug":78,"name":79,"problem":80,"stories":81},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",275,{"slug":83,"name":84,"problem":85,"stories":86},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",127,{"slug":88,"name":89,"problem":90,"stories":91},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",126,{"slug":93,"name":94,"problem":95,"stories":96},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",121,[98,104,109,114,120,125,130,135],{"family":99,"item":100,"code":101,"title":102,"together":103},"gdpr","32","Article 32","Security of processing",448,{"family":5,"item":105,"code":106,"title":107,"together":108},"7","Control 7","Continuous Vulnerability Management",428,{"family":110,"item":111,"code":112,"title":112,"together":113},"itil","overview","ITIL",419,{"family":115,"item":116,"code":117,"title":118,"together":119},"nist-800-53","si-2","SI-2","Flaw Remediation",356,{"family":5,"item":121,"code":122,"title":123,"together":124},"12","Control 12","Network Infrastructure Management",312,{"family":5,"item":126,"code":127,"title":128,"together":129},"6","Control 6","Access Control Management",266,{"family":115,"item":131,"code":132,"title":133,"together":134},"ac-2","AC-2","Account Management",225,{"family":115,"item":136,"code":137,"title":138,"together":139},"si-3","SI-3","Malicious Code Protection",222]