[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cis\u002F7":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cis","7","Control 7","Continuous Vulnerability Management",2577,"Center for Internet Security (CIS)","**What it asks for.** Organisations should continuously assess and track vulnerabilities across their assets and remediate them to shrink the window attackers can exploit. This requires a documented process, regular scanning and risk based remediation.\n\n**In practice.** A strong process combines authenticated scanning of internal and external assets, patch management for operating systems and applications, and prioritisation using severity, exploitability and asset criticality, for example by giving known exploited vulnerabilities top priority. Remediation targets are defined by risk level and tracked, and exceptions are approved and time limited. Auditors look for scan coverage, remediation metrics against targets, patch reports and the exception register.\n\n**Common gaps.** Scanning coverage is often incomplete, missing cloud, containers and network appliances, and unauthenticated scans give a false sense of security. Many organisations measure findings but not time to remediate, so old critical vulnerabilities persist.",null,"https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002Fcontinuous-vulnerability-management","Read the control at CIS","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},2541,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"siteguard-waf-os-command-injection-exploited-for-root-access","SiteGuard WAF OS Command Injection Exploited for Root Access","2026-10-18T16:20:26.047+00:00",{"slug":24,"title":25,"published_at":26},"critical-drupal-rce-flaws-demand-immediate-patching","Critical Drupal RCE Flaws Demand Immediate Patching","2026-10-17T16:20:34.593+00:00",{"slug":28,"title":29,"published_at":30},"critical-beyondtrust-auth-bypass-actively-exploited-patch-immediately","Critical BeyondTrust Auth Bypass Actively Exploited — Patch Immediately","2026-10-16T22:21:05.267+00:00",{"slug":32,"title":33,"published_at":34},"critical-magento-rce-flaw-demands-immediate-patching","Critical Magento RCE Flaw Demands Immediate Patching","2026-10-16T22:20:34.131+00:00",{"slug":36,"title":37,"published_at":38},"beyondtrust-zero-day-highlights-critical-risk-of-unpatched-edge-devices","BeyondTrust Zero-Day Highlights Critical Risk of Unpatched Edge Devices","2026-10-16T22:20:18.59+00:00",{"slug":40,"title":41,"published_at":42},"active-exploitation-of-fortinet-and-beyondtrust-flaws-highlights-patch-urgency","Active Exploitation of Fortinet and BeyondTrust Flaws Highlights Patch Urgency","2026-10-16T20:21:00.599+00:00",{"slug":44,"title":45,"published_at":46},"openbsd-root-exploit-chains-decades-old-bug-to-bypass-kernel-protections","OpenBSD Root Exploit Chains Decades-Old Bug to Bypass Kernel Protections","2026-10-16T20:20:45.22+00:00",{"slug":48,"title":49,"published_at":50},"ai-compromises-robotic-arm-in-16-minutes-exposing-ot-security-gaps","AI Compromises Robotic Arm in 16 Minutes, Exposing OT Security Gaps","2026-10-16T20:20:16.394+00:00",{"slug":52,"title":53,"published_at":54},"aomei-backupper-update-servers-hijacked-to-distribute-backdoor","AOMEI Backupper Update Servers Hijacked to Distribute Backdoor","2026-10-16T18:21:08.893+00:00",{"slug":56,"title":57,"published_at":58},"chinese-espionage-group-exploits-beyondtrust-zero-day-in-remote-support-tool","Chinese Espionage Group Exploits BeyondTrust Zero-Day in Remote Support Tool","2026-10-16T18:20:52.789+00:00",{"slug":60,"title":61,"published_at":62},"zero-click-ad-spyware-bypasses-user-interaction-to-compromise-devices","Zero-Click Ad Spyware Bypasses User Interaction to Compromise Devices","2026-10-16T18:20:36.559+00:00",{"slug":64,"title":65,"published_at":66},"claude-code-desktop-flaw-enabled-html-based-credential-theft","Claude Code Desktop Flaw Enabled HTML-Based Credential Theft","2026-10-16T18:20:18.997+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"patch-management","Automated patch management","Known holes get closed in days, not months.",1775,{"slug":74,"name":75,"problem":76,"stories":77},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",1477,{"slug":79,"name":80,"problem":81,"stories":82},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",868,{"slug":84,"name":85,"problem":86,"stories":87},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",271,{"slug":89,"name":90,"problem":91,"stories":92},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",257,{"slug":94,"name":95,"problem":96,"stories":97},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",211,[99,105,110,115,121,126,132,137],{"family":100,"item":101,"code":102,"title":103,"together":104},"nist-800-53","si-2","SI-2","Flaw Remediation",1723,{"family":106,"item":107,"code":108,"title":108,"together":109},"itil","overview","ITIL",1227,{"family":5,"item":111,"code":112,"title":113,"together":114},"12","Control 12","Network Infrastructure Management",1097,{"family":116,"item":117,"code":118,"title":119,"together":120},"nist-sp","800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",903,{"family":100,"item":122,"code":123,"title":124,"together":125},"ra-5","RA-5","Vulnerability Monitoring and Scanning",786,{"family":127,"item":128,"code":129,"title":130,"together":131},"gdpr","32","Article 32","Security of processing",725,{"family":5,"item":133,"code":134,"title":135,"together":136},"2","Control 2","Inventory and Control of Software Assets",697,{"family":5,"item":138,"code":139,"title":140,"together":141},"13","Control 13","Network Monitoring and Defense",499]