[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-csf\u002Fpr-pt":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-csf","pr-pt","PR.PT-4","Protective Technology (CSF 1.1)",24,"US National Institute of Standards and Technology (NIST)","**What it asks for.** In CSF 1.1 this Protect category covered technical security solutions that protect systems and assets, including audit logging, removable media control, least functionality, protection of communications and control networks, and resilience mechanisms. CSF 2.0 removed it, moving content mainly to PR.PS (Platform Security) and PR.IR (Technology Infrastructure Resilience). PR.PT-4 addressed protection of communications and control networks.\n\n**In practice.** Networks are segmented, perimeter and internal traffic is filtered, communications are encrypted, and logging and least functionality are enforced through technical controls. Control networks such as OT are separated from business networks. Evidence includes network diagrams, firewall rule reviews and logging configurations.\n\n**Common gaps.** Flat networks and broad firewall rules remain common, and OT or management networks are often reachable from user segments. Rule bases accumulate obsolete entries without review.",null,"https:\u002F\u002Fwww.nist.gov\u002Fcyberframework","Open the Cybersecurity Framework at NIST","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"multiple-critical-vulnerabilities-found-in-cisa-malcolm-network-traffic-analyzer","Multiple Critical Vulnerabilities Found in CISA Malcolm Network Traffic Analyzer","2026-10-15T18:22:08.348+00:00",{"slug":23,"title":24,"published_at":25},"zero-click-candiru-spyware-delivered-via-malicious-ads-hits-al-jazeera","Zero-Click Candiru Spyware Delivered via Malicious Ads Hits Al Jazeera","2026-10-15T18:20:37.304+00:00",{"slug":27,"title":28,"published_at":29},"clickfix-malware-uses-dns-txt-records-and-browser-caching-to-evade-detection","ClickFix Malware Uses DNS TXT Records and Browser Caching to Evade Detection","2026-10-06T22:21:27.48+00:00",{"slug":31,"title":32,"published_at":33},"warlock-exploits-unpatched-sharepoint-to-deploy-ransomware-via-lotl-techniques","Warlock Exploits Unpatched SharePoint to Deploy Ransomware via LotL Techniques","2026-10-03T16:20:37.796+00:00",{"slug":35,"title":36,"published_at":37},"china-linked-warlock-ransomware-exploits-sharepoint-zero-days-in-critical-infrastructure","China-Linked Warlock Ransomware Exploits SharePoint Zero-Days in Critical Infrastructure","2026-10-02T20:21:00.226+00:00",{"slug":39,"title":40,"published_at":41},"zero-day-exploits-in-zammad-ticketing-system-breach-divd-via-ai-powered-attack","Zero-Day Exploits in Zammad Ticketing System Breach DIVD via AI-Powered Attack","2026-10-01T12:20:49.989+00:00",{"slug":43,"title":44,"published_at":45},"file-notification-apis-silently-expose-user-behavior-across-major-oses","File Notification APIs Silently Expose User Behavior Across Major OSes","2026-09-25T12:20:35.783+00:00",{"slug":47,"title":48,"published_at":49},"mikrotik-routers-hijacked-via-unauthenticated-internet-exposed-ssh","MikroTik Routers Hijacked via Unauthenticated Internet-Exposed SSH","2026-09-06T10:20:21.69+00:00",{"slug":51,"title":52,"published_at":53},"internet-exposed-water-systems-targeted-by-iranian-threat-actors-via-unsecured-plcs","Internet-Exposed Water Systems Targeted by Iranian Threat Actors via Unsecured PLCs","2026-08-26T12:20:39.084+00:00",{"slug":55,"title":56,"published_at":57},"active-exploitation-of-mlflow-ssrf-and-fuxa-rce-flaws-exposes-cloud-credentials","Active Exploitation of MLflow SSRF and FUXA RCE Flaws Exposes Cloud Credentials","2026-08-18T20:21:16.692+00:00",{"slug":59,"title":60,"published_at":61},"natjack-exploits-nat-flaws-to-hijack-tcp-sessions-and-spoof-dns","NatJack Exploits NAT Flaws to Hijack TCP Sessions and Spoof DNS","2026-08-07T10:20:54.04+00:00",{"slug":63,"title":64,"published_at":65},"unpatched-plcs-and-weak-credentials-put-us-water-utilities-at-risk","Unpatched PLCs and Weak Credentials Put US Water Utilities at Risk","2026-08-06T12:21:02.433+00:00",[67,72,77,81,86,91],{"slug":68,"name":69,"problem":70,"stories":71},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",12,{"slug":73,"name":74,"problem":75,"stories":76},"patch-management","Automated patch management","Known holes get closed in days, not months.",9,{"slug":78,"name":79,"problem":80,"stories":76},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":82,"name":83,"problem":84,"stories":85},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",7,{"slug":87,"name":88,"problem":89,"stories":90},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",6,{"slug":92,"name":93,"problem":94,"stories":95},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",4,[97,103,108,112,117,121,125,130],{"family":98,"item":99,"code":100,"title":101,"together":102},"cis","12","Control 12","Network Infrastructure Management",17,{"family":98,"item":104,"code":105,"title":106,"together":107},"7","Control 7","Continuous Vulnerability Management",13,{"family":98,"item":109,"code":110,"title":111,"together":71},"13","Control 13","Network Monitoring and Defense",{"family":98,"item":113,"code":114,"title":115,"together":116},"4","Control 4","Secure Configuration of Enterprise Assets and Software",10,{"family":5,"item":118,"code":119,"title":120,"together":76},"pr-ac","PR.AC-1","Identity Management, Authentication and Access Control (CSF 1.1)",{"family":5,"item":122,"code":123,"title":124,"together":76},"de-cm","DE.CM-1","Continuous Monitoring",{"family":126,"item":127,"code":128,"title":129,"together":76},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",{"family":131,"item":132,"code":133,"title":134,"together":135},"nist-800-53","sc-7","SC-7","Boundary Protection",8]