Center for Internet Security

Election security challenges rarely arrive one at a time. Cyber incidents, physical security concerns, and disruptions to critical services can unfold simultaneously, putting pressure on election officials and their partners to coordinate across agencies and disciplines. At the recent Election Threat 2026 forum, more than 700 members of the election community came together to discuss what today's threat environment requires most: trusted relationships, information sharing, and preparedness before an incident occurs. Explore 10 key takeaways from the event and download Election Ready: A Cross-Sector Preparedness Guide with practical readiness checks to strengthen coordination in your community. Read the blog and download the guide: https://lnkd.in/eqpSifn7 #ElectionSecurity #CriticalInfrastructure #ElectionPreparedness

Artificial intelligence (AI) agents can retrieve data, call APIs, execute code, and trigger workflows. But who or what is checking their work? In episode 208, Sean Atkinson breaks down secure harness engineering: a way to build trust, traceability, and control into agentic AI systems. Take our poll. Then give the episode a listen. https://lnkd.in/eedr37cQ

🛡️ How secure is your Microsoft 365 tenant, really? Most security teams lean on Microsoft Secure Score to gauge their Microsoft 365 posture. It’s a reasonable starting point, but Microsoft patches the infrastructure. How your tenant is configured is up to you. Hundreds of security settings span identity, email, collaboration, and file sharing. A single misconfigured policy can open the door to data exposure or compliance violations, and without an independent, automated check, these gaps often stay invisible until it’s too late. 📣 That’s where Microsoft 365 Security, now part of Cloud Security, comes in. Our platform continuously assesses your Microsoft 365 tenant against the CISA SCuBA baseline - a federal security standard, not a vendor recommendation. It runs over 100 checks across Microsoft Entra ID, Exchange Online, Microsoft Teams, Microsoft Defender for Office 365, and SharePoint Online, catching things like unenforced DMARC, open guest access, and legacy authentication. Why it matters: 👉 Continuous monitoring, so you’re never working from a stale snapshot 👉 Configuration drift detection, so you catch risky changes the moment they happen 👉 Compliance-ready assessments aligned with CISA guidance 👉 Microsoft 365 findings alongside your cloud, network, and web application results Read more about what gets checked, and what Secure Score misses, in our blog. Link in comments! #Microsoft365 #Microsoft365security #cybersecurity #exposuremanagement #MicrosoftSecureScore

Attackers are not using new techniques. They are using the same ones, faster. Watch Tony Sager explain why that distinction changes what defenders should prioritize next, then join him live on October 22 at 11 A.M. ET. Register today: https://bit.ly/4j6NDkV #Cybersecurity #CISControls #ThreatIntelligence #AIThreats

The AI security conversation is loud. The breach data is quieter, and a lot more useful. On October 22 we will separate AI signal from noise, using real-world data from the CIS Community Defense Model v3.0 and the 2026 Verizon DBIR. One hour. No hype. Register now: https://bit.ly/4j6NDkV #CISControls #Cybersecurity #AIThreats #CyberDefense

Every AI security guide published this year assumes you already have the fundamentals in place: Secure configurations. Controlled access. Continuous monitoring. A *real* inventory of what you run. Do you? AI is accelerating how fast existing vulnerabilities are found and turned into attacks, which shrinks the window to close your gaps. The proven practices already exist. CIS CDM v3 shows how CIS Critical Security Controls IG1 defends against 84% or more of ATT&CK sub-techniques across the five most prevalent attack types. Implementing all CIS Safeguards raises that to 97% or more. CIS SecureSuite helps you apply them at operational speed: ▫️ Assess your systems against CIS Benchmarks without manual checking ▫️ Close gaps faster with automated configuration changes ▫️ Show auditors and leadership measurable progress over time Close the gaps before the threat finds them: https://bit.ly/4i0CpgI #Cybersecurity #AISecurity #CISControls #CISBenchmarks

One CIS Safeguard ranked as the most effective across all five major attack categories. Can you guess which one? Security teams face too many threats, too many vulnerabilities, and too few resources. The CIS Community Defense Model (CDM) v3.0 connects real-world attack data to CIS Controls Safeguards so you can see what to secure first. What the data shows: ➡️ Essential cyber hygiene (Implementation Group 1) defends against 89% of System Intrusion techniques and 86% of Social Engineering techniques ➡️ It also covers 88% of Basic Web Application Attack techniques, 88% of Denial of Service techniques, and 84% of Privilege Misuse techniques ➡️ AI is accelerating attacks, but the defensive fundamentals still hold ➡️ The new CIS Controls Active Defense Lifecycle shows where in an attack each Safeguard stops the adversary A focused set of prioritized Safeguards delivers meaningful risk reduction, even for teams with limited maturity. Read the blog for the answer and the full findings: https://bit.ly/479oj6M #CollectiveCyberDefense #CISControls #CyberSecurity #ThreatIntelligence

Join our CIS Critical Security Controls team and discover how the updated guide helps organizations move beyond self-attestation and demonstrate real, evidence-based security practices throughout the software development lifecycle. #SecurebyDesign

Capital Region security and IT leaders: are your defenses keeping pace with today's attack landscape? Join practitioners, CISOs, and federal investigators at the 5th annual Tech Valley Cybersecurity Symposium on October 13, 2026, in Schenectady, NY. You'll gain real-world incident insights, learn practical defensive strategies, and hear directly from professionals who respond to cyber threats every day. Don't miss Valecia Stocchetti, Senior Cybersecurity Engineer at CIS, as she shares expert perspectives with attendees. The event is free to attend. Save your spot today: https://lnkd.in/geQbVzBh #Cybersecurity #InfoSec #TechValleyCyber

AI doesn't just change how businesses work. It's changing how criminals work too, including the traffickers who target and exploit vulnerable people. Our new white paper examines how generative AI is making trafficking communications more convincing, supporting fraudulent identities, and helping criminal networks operate at scale. It also covers the growing overlap between human trafficking, cyber-enabled fraud, and transnational organized crime. For the officers, analysts, and public safety professionals working these cases, understanding these tools is becoming part of the job. The paper lays out what to watch for and how agencies can strengthen information sharing, prevention, and investigations in response. Get the full white paper here: https://bit.ly/3U4WSbb #HumanTrafficking #PublicSafety #LawEnforcement #ArtificialIntelligence