Center for Internet Security (CIS)

CIS makes the connected world a safer place for people, businesses, and governments through our core competencies of collaboration and innovation.

[Center for Internet Security (CIS) @CISecurity]

This blog outlines practical considerations for managing agent behavior securely, including validation, monitoring, and governance strategies you can apply today. https://t.co/C7QGlePFBv

[Center for Internet Security (CIS) @CISecurity]

Check out the newly released and recently updated CIS Benchmarks along with two brand new CIS Build Kits. https://t.co/ohAE3IzKno

[Center for Internet Security (CIS) @CISecurity]

Here are 5 practical steps city leaders and IT teams can take before a major event to reduce risk and improve readiness. https://t.co/UCgcwchymT

[Center for Internet Security (CIS) @CISecurity]

AI, real-world events, and distributed environments are reshaping cyber risk. Explore these challenges facing public and private organizations in the Spring 2026 issue of Cybersecurity Quarterly.

[Center for Internet Security (CIS) @CISecurity]

When false active shooter reports hit college campuses, information sharing matters. This case study shows how coordinated threat intelligence helped reduce confusion and support safer responses during swatting incidents. https://t.co/QO8cFyHYqD

[Center for Internet Security (CIS) @CISecurity]

When we're talking "AI safety" vs. "AI security," it's a little bit like the shared responsibility in the cloud. The former falls mostly to the vendor, but the latter is on you. Listen to our podcast to learn more. https://t.co/5AJvAllAOe

[Center for Internet Security (CIS) @CISecurity]

Join us tomorrow to learn how to secure each layer of the AI stack.

[Center for Internet Security (CIS) @CISecurity]

It's a fallacy to think we'd all be wise and know what to do if we just "shared" security incidents. We need to translate these security incidents into something IT folks can do or business processes that protect what matters most. Listen to our podcast for further insights.

[Center for Internet Security (CIS) @CISecurity]

Cybersecurity is a collective effort. In a recent Technology Record feature, CIS highlights how alignment across the Azure ecosystem helps turn best practices into real security outcomes.

[Center for Internet Security (CIS) @CISecurity]

Drones are bypassing traditional event security. Our guide examines evolving UAS threats to large-scale public gatherings, and what public safety leaders should plan for now.

[Center for Internet Security (CIS) @CISecurity]

As a human, you're the actual intelligence in AI. Which means you're responsible for providing the right context and input to get the possible result. Listen to Episode 182 Cybersecurity Where You Are to hear from our CISO and CTIO.

[Center for Internet Security (CIS) @CISecurity]

Tony Sager has spent decades helping organizations navigate major shifts in cybersecurity. His message on Mythos AI is consistent and steady.

[Center for Internet Security (CIS) @CISecurity]

As funding models shift, SLTT organizations can leverage MS-ISAC for collaboration, threat intel, and tailored services. Learn more in the Spring 2026 issue of Cybersecurity Quarterly:

[Center for Internet Security (CIS) @CISecurity]

Cybersecurity is stronger when we work together. The Spring 2026 Cybersecurity Quarterly explores how CIS, members, and partners are collaborating to secure our connected world.

[Center for Internet Security (CIS) @CISecurity]

Our CTI team observed an ongoing campaign where threat actors are attempting to trick users into downloading remote monitoring and management tools so that they gain unauthorized access to systems. Learn what the campaign entails.

[Center for Internet Security (CIS) @CISecurity]

Our report highlights how recent rail sabotage tied to major global events signals elevated risk heading into the 2026 World Cup. Learn key trends, threat actors, and actionable guidance for transit security.

[Center for Internet Security (CIS) @CISecurity]

- Persistent remote access
- Hands-on-keyboard activity
- Credential theft
- Additional payload delivery
This is what threat actors gain from abusing legitimate remote monitoring and management software. Read our analysis of a Vimeo-themed phishing campaign using this technique.

[Center for Internet Security (CIS) @CISecurity]

Governments can help to cultivate cybersecurity ecosystems by forming the need for security best practices. Hear more about this unique role for governments by checking out episode 181 of our podcast.

[Center for Internet Security (CIS) @CISecurity]

Browser, credential, system, and crypto wallet theft. CIS CTI observed these tactics in an ongoing MacSync Stealer campaign targeting state and local governments. Read the analysis. https://t.co/z8VdFMZ2zC

[Center for Internet Security (CIS) @CISecurity]

Shared responsibility doesn't mean shared accountability. Hear what this means for realizing Secure by Design in the cloud.