[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cis\u002F9":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cis","9","Control 9","Email and Web Browser Protections",332,"Center for Internet Security (CIS)","**What it asks for.** Because email and browsers are where users meet most threats, this control asks organisations to harden and filter them. It covers supported browsers and mail clients, filtering of malicious content and domain protections against spoofing.\n\n**In practice.** Good practice keeps browsers and email clients on supported, centrally managed versions with limited, approved extensions. DNS and web filtering block known malicious and unwanted categories, email gateways scan attachments and links, and SPF, DKIM and DMARC are configured with an enforcing DMARC policy. Evidence includes browser management policies, filtering configurations, DMARC reports and statistics on blocked messages and sites.\n\n**Common gaps.** DMARC is often left at a monitoring policy indefinitely, and browser extensions are rarely controlled. Filtering may not follow remote users who work outside the corporate network.",null,"https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002Femail-and-web-browser-protections","Read the control at CIS","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"ad-network-used-as-zero-click-spyware-delivery-channel-via-real-time-bidding","Ad Network Used as Zero-Click Spyware Delivery Channel via Real-Time Bidding","2026-10-17T12:20:32.316+00:00",{"slug":23,"title":24,"published_at":25},"aitm-phishing-campaign-bypasses-mfa-to-steal-google-credentials-from-taiwan-researchers","AitM Phishing Campaign Bypasses MFA to Steal Google Credentials from Taiwan Researchers","2026-10-16T18:21:24.446+00:00",{"slug":27,"title":28,"published_at":29},"zero-click-ad-spyware-bypasses-user-interaction-to-compromise-devices","Zero-Click Ad Spyware Bypasses User Interaction to Compromise Devices","2026-10-16T18:20:36.559+00:00",{"slug":31,"title":32,"published_at":33},"phishing-smishing-attacks-target-election-officials-ahead-of-2026-midterms","Phishing & Smishing Attacks Target Election Officials Ahead of 2026 Midterms","2026-10-16T16:21:30.17+00:00",{"slug":35,"title":36,"published_at":37},"shadow-ai-personal-chatgpt-use-at-work-creates-data-exposure-risk","Shadow AI: Personal ChatGPT Use at Work Creates Data Exposure Risk","2026-10-16T16:21:15.148+00:00",{"slug":39,"title":40,"published_at":41},"romulus-malware-platform-exploits-human-deception-via-clickfix-lures","ROMULUS Malware Platform Exploits Human Deception via ClickFix Lures","2026-10-16T15:20:34.428+00:00",{"slug":43,"title":44,"published_at":45},"malicious-ad-networks-weaponized-to-silently-deploy-candiru-spyware","Malicious Ad Networks Weaponized to Silently Deploy Candiru Spyware","2026-10-15T22:20:22.695+00:00",{"slug":47,"title":48,"published_at":49},"zero-click-candiru-spyware-delivered-via-malicious-ads-hits-al-jazeera","Zero-Click Candiru Spyware Delivered via Malicious Ads Hits Al Jazeera","2026-10-15T18:20:37.304+00:00",{"slug":51,"title":52,"published_at":53},"help-tds-hotejka-exploit-20000-cloudflare-pages-domains-for-tech-support-scams","Help TDS & Hotejka Exploit 20,000+ Cloudflare Pages Domains for Tech Support Scams","2026-10-15T16:20:52.987+00:00",{"slug":55,"title":56,"published_at":57},"mercenary-spyware-hijacks-ad-networks-to-silently-infect-devices","Mercenary Spyware Hijacks Ad Networks to Silently Infect Devices","2026-10-15T12:21:42.608+00:00",{"slug":59,"title":60,"published_at":61},"billion-message-phishing-infrastructure-dismantled-by-microsoft-and-partners","Billion-Message Phishing Infrastructure Dismantled by Microsoft and Partners","2026-10-15T12:20:54.937+00:00",{"slug":63,"title":64,"published_at":65},"cikabika-rat-abuses-discord-and-ngrok-to-evade-detection","CikaBika RAT Abuses Discord and Ngrok to Evade Detection","2026-10-15T12:20:40.147+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",220,{"slug":73,"name":74,"problem":75,"stories":76},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",217,{"slug":78,"name":79,"problem":80,"stories":81},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",126,{"slug":83,"name":84,"problem":85,"stories":86},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",82,{"slug":88,"name":89,"problem":90,"stories":91},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",78,{"slug":93,"name":94,"problem":95,"stories":96},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",40,[98,104,110,115,120,125,130,136],{"family":99,"item":100,"code":101,"title":102,"together":103},"nist-800-53","si-3","SI-3","Malicious Code Protection",232,{"family":105,"item":106,"code":107,"title":108,"together":109},"gdpr","32","Article 32","Security of processing",208,{"family":5,"item":111,"code":112,"title":113,"together":114},"14","Control 14","Security Awareness and Skills Training",178,{"family":99,"item":116,"code":117,"title":118,"together":119},"at-2","AT-2","Literacy Training and Awareness",142,{"family":5,"item":121,"code":122,"title":123,"together":124},"2","Control 2","Inventory and Control of Software Assets",141,{"family":5,"item":126,"code":127,"title":128,"together":129},"13","Control 13","Network Monitoring and Defense",135,{"family":131,"item":132,"code":133,"title":134,"together":135},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",122,{"family":137,"item":138,"code":139,"title":139,"together":140},"itil","overview","ITIL",93]