[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-csf\u002Frs-mi":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-csf","rs-mi","RS.MI-3","Mitigation (CSF 1.1)",274,"US National Institute of Standards and Technology (NIST)","**What it asks for.** In CSF 1.1 this Respond category covered activities to prevent expansion of an event, mitigate its effects and resolve the incident: containment, mitigation, and RS.MI-3, which required newly identified vulnerabilities to be mitigated or documented as accepted risks. CSF 2.0 renamed the category Incident Mitigation and moved vulnerability handling to ID.RA-06.\n\n**In practice.** Responders contain affected systems quickly using predefined actions such as isolating hosts, disabling accounts and blocking indicators, then eradicate the threat. Vulnerabilities found during incidents are fixed or formally accepted with an owner and review date. Evidence includes containment records, playbooks and a risk acceptance register.\n\n**Common gaps.** Containment is often slowed by unclear authority to take systems offline. Risk acceptances are recorded without expiry dates and never revisited.",null,"https:\u002F\u002Fwww.nist.gov\u002Fcyberframework","Open the Cybersecurity Framework at NIST","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"critical-beyondtrust-auth-bypass-actively-exploited-patch-immediately","Critical BeyondTrust Auth Bypass Actively Exploited — Patch Immediately","2026-10-16T22:21:05.267+00:00",{"slug":23,"title":24,"published_at":25},"unpatched-collabora-rce-flaw-lets-attackers-backdoor-nextcloud-servers","Unpatched Collabora RCE Flaw Lets Attackers Backdoor Nextcloud Servers","2026-10-15T22:20:38.386+00:00",{"slug":27,"title":28,"published_at":29},"ai-powered-oss-scanner-fast-tracks-vulnerability-disclosure-for-open-source-maintainers","AI-Powered OSS Scanner Fast-Tracks Vulnerability Disclosure for Open Source Maintainers","2026-10-15T20:21:23.114+00:00",{"slug":31,"title":32,"published_at":33},"critical-rce-flaws-in-nextjs-demand-immediate-patching","Critical RCE Flaws in Next.js Demand Immediate Patching","2026-10-15T16:21:23.504+00:00",{"slug":35,"title":36,"published_at":37},"nginx-patches-rce-and-tls-auth-bypass-flaws-including-a-20-year-old-bug","NGINX Patches RCE and TLS Auth Bypass Flaws — Including a 20-Year-Old Bug","2026-10-15T16:21:08.659+00:00",{"slug":39,"title":40,"published_at":41},"pan-os-zero-day-rce-exploited-in-the-wild-patch-immediately","PAN-OS Zero-Day RCE Exploited in the Wild — Patch Immediately","2026-10-15T00:20:20.763+00:00",{"slug":43,"title":44,"published_at":45},"unpatched-collabora-code-app-lets-attackers-backdoor-nextcloud-servers","Unpatched Collabora CODE App Lets Attackers Backdoor Nextcloud Servers","2026-10-14T20:20:54.985+00:00",{"slug":47,"title":48,"published_at":49},"record-1413-microsoft-vulnerabilities-highlight-patch-prioritization-crisis","Record 1,413 Microsoft Vulnerabilities Highlight Patch Prioritization Crisis","2026-10-14T18:21:00.409+00:00",{"slug":51,"title":52,"published_at":53},"critical-ics-vulnerabilities-demand-urgent-patching-across-industrial-vendors","Critical ICS Vulnerabilities Demand Urgent Patching Across Industrial Vendors","2026-10-14T16:20:20.989+00:00",{"slug":55,"title":56,"published_at":57},"curl-http2-use-after-free-flaw-enables-client-side-code-execution","curl HTTP\u002F2 Use-After-Free Flaw Enables Client-Side Code Execution","2026-10-14T14:22:24.353+00:00",{"slug":59,"title":60,"published_at":61},"ai-accelerates-full-chain-chrome-exploit-development-to-just-six-days","AI Accelerates Full-Chain Chrome Exploit Development to Just Six Days","2026-10-14T12:20:21.412+00:00",{"slug":63,"title":64,"published_at":65},"critical-sap-netweaver-s4hana-flaws-demand-immediate-patching","Critical SAP NetWeaver & S\u002F4HANA Flaws Demand Immediate Patching","2026-10-14T08:21:14.039+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"patch-management","Automated patch management","Known holes get closed in days, not months.",246,{"slug":73,"name":74,"problem":75,"stories":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",216,{"slug":78,"name":79,"problem":80,"stories":81},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",62,{"slug":83,"name":84,"problem":85,"stories":86},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",61,{"slug":88,"name":89,"problem":90,"stories":91},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",19,{"slug":93,"name":94,"problem":95,"stories":91},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[97,103,109,114,119,124,129,135],{"family":98,"item":99,"code":100,"title":101,"together":102},"cis","7","Control 7","Continuous Vulnerability Management",268,{"family":104,"item":105,"code":106,"title":107,"together":108},"nist-800-53","si-2","SI-2","Flaw Remediation",219,{"family":110,"item":111,"code":112,"title":112,"together":113},"itil","overview","ITIL",207,{"family":98,"item":115,"code":116,"title":117,"together":118},"12","Control 12","Network Infrastructure Management",160,{"family":5,"item":120,"code":121,"title":122,"together":123},"id-ra","ID.RA-1","Risk Assessment",143,{"family":104,"item":125,"code":126,"title":127,"together":128},"ra-5","RA-5","Vulnerability Monitoring and Scanning",116,{"family":130,"item":131,"code":132,"title":133,"together":134},"nist-sp","800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",99,{"family":98,"item":136,"code":137,"title":138,"together":139},"2","Control 2","Inventory and Control of Software Assets",87]