[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-csf\u002Fpr-ac":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-csf","pr-ac","PR.AC-1","Identity Management, Authentication and Access Control (CSF 1.1)",517,"US National Institute of Standards and Technology (NIST)","**What it asks for.** In CSF 1.1 this Protect category required that access to physical and logical assets is limited to authorised users, processes and devices, consistent with the assessed risk. It covered identity and credential management, remote access, least privilege, network integrity and authentication. CSF 2.0 renamed it PR.AA and moved some network topics to PR.IR.\n\n**In practice.** Identities and credentials are issued, managed and revoked through central processes, remote access is controlled, permissions follow least privilege and separation of duties, and authentication strength matches transaction risk, typically including multi-factor authentication. Physical access is managed too. Evidence includes identity life cycle records, access reviews, MFA coverage and physical access logs.\n\n**Common gaps.** Gaps typically involve service accounts, privileged access sprawl and inconsistent MFA. Physical and logical access are often managed by separate teams with no joint review.",null,"https:\u002F\u002Fwww.nist.gov\u002Fcyberframework","Open the Cybersecurity Framework at NIST","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},514,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"connectwise-supply-chain-attack-compromises-162-microsoft-365-tenants","ConnectWise Supply-Chain Attack Compromises 162 Microsoft 365 Tenants","2026-10-17T16:20:21.545+00:00",{"slug":24,"title":25,"published_at":26},"compromised-connectwise-credential-exposes-173-microsoft-365-tenants","Compromised ConnectWise Credential Exposes 173 Microsoft 365 Tenants","2026-10-17T08:20:20.122+00:00",{"slug":28,"title":29,"published_at":30},"ai-compromises-robotic-arm-in-16-minutes-exposing-ot-security-gaps","AI Compromises Robotic Arm in 16 Minutes, Exposing OT Security Gaps","2026-10-16T20:20:16.394+00:00",{"slug":32,"title":33,"published_at":34},"multiple-critical-vulnerabilities-found-in-cisa-malcolm-network-traffic-analyzer","Multiple Critical Vulnerabilities Found in CISA Malcolm Network Traffic Analyzer","2026-10-15T18:22:08.348+00:00",{"slug":36,"title":37,"published_at":38},"end-of-life-ot-devices-enable-supermarket-refrigeration-cyberattack","End-of-Life OT Devices Enable Supermarket Refrigeration Cyberattack","2026-10-15T14:20:22.449+00:00",{"slug":40,"title":41,"published_at":42},"ghostaction-credential-theft-hits-1900-github-accounts-and-30000-repos","GhostAction Credential Theft Hits 1,900 GitHub Accounts and 30,000+ Repos","2026-10-15T10:20:51.258+00:00",{"slug":44,"title":45,"published_at":46},"zero-click-sneakpeek-flaw-silently-exfiltrates-developer-credentials-from-claude-code","Zero-Click 'SneakPeek' Flaw Silently Exfiltrates Developer Credentials from Claude Code","2026-10-14T22:21:07.285+00:00",{"slug":48,"title":49,"published_at":50},"ai-agents-can-compromise-ot-systems-and-move-physical-equipment-in-under-17-minutes","AI Agents Can Compromise OT Systems and Move Physical Equipment in Under 17 Minutes","2026-10-14T18:21:46.77+00:00",{"slug":52,"title":53,"published_at":54},"telco-fined-for-failing-to-verify-identities-enabling-gdpr-violating-fraud","Telco Fined for Failing to Verify Identities, Enabling GDPR-Violating Fraud","2026-10-14T18:20:19.96+00:00",{"slug":56,"title":57,"published_at":58},"self-replicating-ai-models-pose-emerging-botnet-threat-to-iot-devices","Self-Replicating AI Models Pose Emerging Botnet Threat to IoT Devices","2026-10-13T22:21:14.479+00:00",{"slug":60,"title":61,"published_at":62},"ai-powered-self-propagating-iot-botnets-a-rapidly-emerging-threat","AI-Powered Self-Propagating IoT Botnets: A Rapidly Emerging Threat","2026-10-13T20:21:17.938+00:00",{"slug":64,"title":65,"published_at":66},"stolen-credentials-expose-metas-github-repos-and-personal-data","Stolen Credentials Expose Meta's GitHub Repos and Personal Data","2026-10-13T18:21:42.163+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",116,{"slug":74,"name":75,"problem":76,"stories":77},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",114,{"slug":79,"name":80,"problem":81,"stories":82},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",112,{"slug":84,"name":85,"problem":86,"stories":87},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",82,{"slug":89,"name":90,"problem":91,"stories":92},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",80,{"slug":94,"name":95,"problem":96,"stories":97},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",78,[99,105,111,116,121,126,131,137],{"family":100,"item":101,"code":102,"title":103,"together":104},"gdpr","32","Article 32","Security of processing",324,{"family":106,"item":107,"code":108,"title":109,"together":110},"cis","6","Control 6","Access Control Management",304,{"family":106,"item":112,"code":113,"title":114,"together":115},"3","Control 3","Data Protection",218,{"family":5,"item":117,"code":118,"title":119,"together":120},"pr-ds","PR.DS-1","Data Security",189,{"family":106,"item":122,"code":123,"title":124,"together":125},"12","Control 12","Network Infrastructure Management",188,{"family":106,"item":127,"code":128,"title":129,"together":130},"13","Control 13","Network Monitoring and Defense",160,{"family":132,"item":133,"code":134,"title":135,"together":136},"nist-800-53","ac-2","AC-2","Account Management",134,{"family":100,"item":138,"code":139,"title":140,"together":141},"25","Article 25","Data protection by design and by default",128]