[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso-27001\u002Fa-8-7":3},{"item":4,"lessons":16,"controls":26,"related":48},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso-27001","a-8-7","Annex A 8.7","ISO\u002FIEC 27001:2022 Annex A 8.7: Protection against malware",2,"International Organization for Standardization (ISO) and IEC","**What it asks for.** This control expects protection against malware to be implemented and supported by appropriate user awareness. Its purpose is to make sure information and other associated assets are protected against malware.\n\n**In practice.** Good practice combines technical measures, such as endpoint detection and response, email and web filtering, application control and timely patching, with awareness of how malware arrives. Protection is deployed across endpoints and servers, kept current and monitored. Auditors look for coverage reports, configuration, alert handling and awareness content.\n\n**Common gaps.** Typical gaps are endpoints without protection or with outdated agents, exclusions set too broadly and reliance on signatures without behavioural detection. Awareness is often generic and does not cover current delivery methods such as malicious links in collaboration tools. Systems that cannot run agents, such as OT or appliances, are often unprotected.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F27001","See the standard at ISO","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22],{"slug":19,"title":20,"published_at":21},"fakeagent-campaign-abuses-trusted-claudeai-domain-to-deliver-sectoprat-infostealer","FakeAgent Campaign Abuses Trusted Claude.ai Domain to Deliver SectopRAT Infostealer","2026-07-23T12:21:15.54+00:00",{"slug":23,"title":24,"published_at":25},"usb-worm-hijacks-crypto-wallets-via-windows-shortcut-files","USB Worm Hijacks Crypto Wallets via Windows Shortcut Files","2026-06-18T18:21:07.648+00:00",[27,31,36,40,44],{"slug":28,"name":29,"problem":30,"stories":9},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":32,"name":33,"problem":34,"stories":35},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",1,{"slug":37,"name":38,"problem":39,"stories":35},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":41,"name":42,"problem":43,"stories":35},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",{"slug":45,"name":46,"problem":47,"stories":35},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[49,54,59,64,68,72,77,81],{"family":50,"item":51,"code":52,"title":53,"together":9},"nist-800-53","si-3","SI-3","Malicious Code Protection",{"family":55,"item":56,"code":57,"title":58,"together":9},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",{"family":60,"item":61,"code":62,"title":63,"together":35},"cis","2","Control 2","Inventory and Control of Software Assets",{"family":60,"item":65,"code":66,"title":67,"together":35},"6","Control 6","Access Control Management",{"family":60,"item":69,"code":70,"title":71,"together":35},"9","Control 9","Email and Web Browser Protections",{"family":73,"item":74,"code":75,"title":76,"together":35},"gdpr","32","Article 32","Security of processing",{"family":5,"item":78,"code":79,"title":80,"together":35},"a-5-21","Annex A 5.21","Managing information security in the ICT supply chain",{"family":60,"item":82,"code":83,"title":84,"together":35},"3","Control 3","Data Protection"]