[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-41":3},{"item":4,"lessons":16,"controls":58,"related":85},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-41","SP 800-41","SP 800-41 Rev. 1: Guidelines on Firewalls and Firewall Policy",10,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidance on firewall technologies and how to select, configure and manage them. It explains types of firewalls, their placement in network architectures and the development and maintenance of firewall policy.\n\n**In practice.** Applying it well means a documented firewall policy based on deny by default, rules that are justified and owned, and regular reviews to remove unused or overly broad rules. Changes go through change management and firewall logs are retained and monitored. Evidence includes rule sets with justifications, review records and change history.\n\n**Common gaps.** Common gaps are years of accumulated rules with no owner, broad any-to-any rules and no review after projects end. The publication dates from 2009, so it does not cover cloud-native controls in depth.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpublications\u002Fsp800","Find it among NIST SP 800 publications","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54],{"slug":19,"title":20,"published_at":21},"pan-os-zero-day-rce-exploited-in-the-wild-patch-immediately","PAN-OS Zero-Day RCE Exploited in the Wild — Patch Immediately","2026-10-15T00:20:20.763+00:00",{"slug":23,"title":24,"published_at":25},"citrix-netscaler-zero-days-exploited-to-deploy-web-shells","Citrix NetScaler Zero-Days Exploited to Deploy Web Shells","2026-09-29T20:20:57.801+00:00",{"slug":27,"title":28,"published_at":29},"ddos-for-hire-service-nightmarestresser-seized-after-hundreds-of-thousands-of-attacks","DDoS-for-Hire Service NightmareStresser Seized After Hundreds of Thousands of Attacks","2026-09-17T17:21:55.715+00:00",{"slug":31,"title":32,"published_at":33},"ddos-for-hire-platform-with-566k-users-seized-by-fbi","DDoS-for-Hire Platform with 566K Users Seized by FBI","2026-09-17T12:20:22.951+00:00",{"slug":35,"title":36,"published_at":37},"gocaracal-malware-exploits-ethereum-smart-contracts-for-resilient-c2-communication","GoCaracal Malware Exploits Ethereum Smart Contracts for Resilient C2 Communication","2026-08-27T12:22:53.921+00:00",{"slug":39,"title":40,"published_at":41},"chinese-state-hackers-exploited-iot-botnets-and-proxy-tools-to-breach-us-agencies","Chinese State Hackers Exploited IoT Botnets and Proxy Tools to Breach US Agencies","2026-08-26T20:21:48.416+00:00",{"slug":43,"title":44,"published_at":45},"inc-ransomware-chains-sonicwall-zero-days-for-full-network-access","INC Ransomware Chains SonicWall Zero-Days for Full Network Access","2026-08-04T16:20:37.803+00:00",{"slug":47,"title":48,"published_at":49},"china-linked-orb-network-exploits-unpatched-routers-to-build-persistent-attack-infrastructure","China-Linked ORB Network Exploits Unpatched Routers to Build Persistent Attack Infrastructure","2026-07-08T10:20:58.382+00:00",{"slug":51,"title":52,"published_at":53},"ai-driven-ddos-mitigation-defending-infrastructure-against-adaptive-network-attacks","AI-Driven DDoS Mitigation: Defending Infrastructure Against Adaptive Network Attacks","2026-07-01T12:20:18.6+00:00",{"slug":55,"title":56,"published_at":57},"unnecessary-internet-facing-services-dominate-2026-attack-surfaces","Unnecessary Internet-Facing Services Dominate 2026 Attack Surfaces","2026-06-17T12:21:15.459+00:00",[59,64,69,73,77,81],{"slug":60,"name":61,"problem":62,"stories":63},"patch-management","Automated patch management","Known holes get closed in days, not months.",4,{"slug":65,"name":66,"problem":67,"stories":68},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",3,{"slug":70,"name":71,"problem":72,"stories":68},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",{"slug":74,"name":75,"problem":76,"stories":68},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":78,"name":79,"problem":80,"stories":68},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":82,"name":83,"problem":84,"stories":68},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",[86,92,97,102,107,111,115,119],{"family":87,"item":88,"code":89,"title":90,"together":91},"cis","12","Control 12","Network Infrastructure Management",9,{"family":87,"item":93,"code":94,"title":95,"together":96},"13","Control 13","Network Monitoring and Defense",8,{"family":98,"item":99,"code":100,"title":100,"together":101},"itil","overview","ITIL",7,{"family":103,"item":104,"code":105,"title":106,"together":63},"nist-csf","de-ae","DE.AE-2","Adverse Event Analysis",{"family":5,"item":108,"code":109,"title":110,"together":63},"800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",{"family":87,"item":112,"code":113,"title":114,"together":63},"7","Control 7","Continuous Vulnerability Management",{"family":5,"item":116,"code":117,"title":118,"together":63},"800-61","SP 800-61","SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management",{"family":87,"item":120,"code":121,"title":122,"together":68},"1","Control 1","Inventory and Control of Enterprise Assets"]