[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-csf\u002Fde-cm":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",869,"US National Institute of Standards and Technology (NIST)","**What it asks for.** This Detect category requires that assets are monitored to find anomalies, indicators of compromise and other potentially adverse events. DE.CM-1 in CSF 1.1 specifically addressed monitoring the network to detect potential cybersecurity events.\n\n**In practice.** The organisation monitors networks, endpoints, user activity, physical environments, external service providers and cloud services, with defined coverage and alerting. Network monitoring uses flow data, intrusion detection, DNS logging and similar telemetry, and monitoring is tuned to known threats. Evidence includes monitoring coverage maps, use case lists and alert handling records.\n\n**Common gaps.** Coverage gaps are common in cloud environments, remote work and third party connections. Monitoring tools are deployed but under tuned, producing noise that hides real events.",null,"https:\u002F\u002Fwww.nist.gov\u002Fcyberframework","Open the Cybersecurity Framework at NIST","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},863,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"ad-network-used-as-zero-click-spyware-delivery-channel-via-real-time-bidding","Ad Network Used as Zero-Click Spyware Delivery Channel via Real-Time Bidding","2026-10-17T12:20:32.316+00:00",{"slug":24,"title":25,"published_at":26},"ai-compromises-robotic-arm-in-16-minutes-exposing-ot-security-gaps","AI Compromises Robotic Arm in 16 Minutes, Exposing OT Security Gaps","2026-10-16T20:20:16.394+00:00",{"slug":28,"title":29,"published_at":30},"aomei-backupper-update-servers-hijacked-to-distribute-backdoor","AOMEI Backupper Update Servers Hijacked to Distribute Backdoor","2026-10-16T18:21:08.893+00:00",{"slug":32,"title":33,"published_at":34},"chinese-espionage-group-exploits-beyondtrust-zero-day-in-remote-support-tool","Chinese Espionage Group Exploits BeyondTrust Zero-Day in Remote Support Tool","2026-10-16T18:20:52.789+00:00",{"slug":36,"title":37,"published_at":38},"zero-click-ad-spyware-bypasses-user-interaction-to-compromise-devices","Zero-Click Ad Spyware Bypasses User Interaction to Compromise Devices","2026-10-16T18:20:36.559+00:00",{"slug":40,"title":41,"published_at":42},"ics-sniper-xworm-rce-and-ai-introduced-software-flaws-highlight-diverse-attack-surface","ICS-Sniper, XWorm RCE, and AI-Introduced Software Flaws Highlight Diverse Attack Surface","2026-10-16T16:20:31.539+00:00",{"slug":44,"title":45,"published_at":46},"chinese-apt-exploits-beyondtrust-zero-day-to-harvest-credentials-and-exfiltrate-data","Chinese APT Exploits BeyondTrust Zero-Day to Harvest Credentials and Exfiltrate Data","2026-10-16T12:20:53.961+00:00",{"slug":48,"title":49,"published_at":50},"china-linked-hackers-exploit-beyondtrust-zero-day-to-seize-remote-support-servers","China-Linked Hackers Exploit BeyondTrust Zero-Day to Seize Remote Support Servers","2026-10-16T08:20:44.884+00:00",{"slug":52,"title":53,"published_at":54},"malicious-ad-networks-weaponized-to-silently-deploy-candiru-spyware","Malicious Ad Networks Weaponized to Silently Deploy Candiru Spyware","2026-10-15T22:20:22.695+00:00",{"slug":56,"title":57,"published_at":58},"unpatched-routers-hijacked-to-silently-sell-your-bandwidth","Unpatched Routers Hijacked to Silently Sell Your Bandwidth","2026-10-15T20:21:08.002+00:00",{"slug":60,"title":61,"published_at":62},"ai-chatbots-targeted-by-covert-political-influence-networks","AI Chatbots Targeted by Covert Political Influence Networks","2026-10-15T20:20:35.974+00:00",{"slug":64,"title":65,"published_at":66},"zero-click-candiru-spyware-delivered-via-malicious-ads-hits-al-jazeera","Zero-Click Candiru Spyware Delivered via Malicious Ads Hits Al Jazeera","2026-10-15T18:20:37.304+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",417,{"slug":74,"name":75,"problem":76,"stories":77},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",141,{"slug":79,"name":80,"problem":81,"stories":82},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",136,{"slug":84,"name":85,"problem":86,"stories":87},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",134,{"slug":89,"name":90,"problem":91,"stories":92},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",121,{"slug":94,"name":95,"problem":96,"stories":97},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",115,[99,105,111,116,122,127,132,137],{"family":100,"item":101,"code":102,"title":103,"together":104},"gdpr","32","Article 32","Security of processing",407,{"family":106,"item":107,"code":108,"title":109,"together":110},"cis","13","Control 13","Network Monitoring and Defense",364,{"family":112,"item":113,"code":114,"title":114,"together":115},"itil","overview","ITIL",262,{"family":117,"item":118,"code":119,"title":120,"together":121},"nist-800-53","si-3","SI-3","Malicious Code Protection",258,{"family":106,"item":123,"code":124,"title":125,"together":126},"2","Control 2","Inventory and Control of Software Assets",254,{"family":106,"item":128,"code":129,"title":130,"together":131},"7","Control 7","Continuous Vulnerability Management",236,{"family":106,"item":133,"code":134,"title":135,"together":136},"6","Control 6","Access Control Management",216,{"family":106,"item":138,"code":139,"title":140,"together":141},"14","Control 14","Security Awareness and Skills Training",183]