Center for Internet Security (CIS)

AI, real-world events, and distributed environments are reshaping cyber risk. Explore these challenges facing public and private organizations in the Spring 2026 issue of Cybersecurity Quarterly.

When false active shooter reports hit college campuses, information sharing matters. This case study shows how coordinated threat intelligence helped reduce confusion and support safer responses during swatting incidents. bit.ly/4tAlTa0

When we're talking "AI safety" vs. "AI security," it's a little bit like the shared responsibility in the cloud. The former falls mostly to the vendor, but the latter is on you. Listen to our podcast to learn more. bit.ly/4twudHT

Join us tomorrow to learn how to secure each layer of the AI stack.

It's a fallacy to think we'd all be wise and know what to do if we just "shared" security incidents. We need to translate these security incidents into something IT folks can do or business processes that protect what matters most. Listen to our podcast for further insights.

Cybersecurity is a collective effort. In a recent Technology Record feature, CIS highlights how alignment across the Azure ecosystem helps turn best practices into real security outcomes.

Drones are bypassing traditional event security. Our guide examines evolving UAS threats to large-scale public gatherings, and what public safety leaders should plan for now.

As a human, you're the actual intelligence in AI. Which means you're responsible for providing the right context and input to get the possible result. Listen to Episode 182 Cybersecurity Where You Are to hear from our CISO and CTIO.

Tony Sager has spent decades helping organizations navigate major shifts in cybersecurity. His message on Mythos AI is consistent and steady.

As funding models shift, SLTT organizations can leverage MS-ISAC for collaboration, threat intel, and tailored services. Learn more in the Spring 2026 issue of Cybersecurity Quarterly:

Cybersecurity is stronger when we work together. The Spring 2026 Cybersecurity Quarterly explores how CIS, members, and partners are collaborating to secure our connected world.

Our CTI team observed an ongoing campaign where threat actors are attempting to trick users into downloading remote monitoring and management tools so that they gain unauthorized access to systems. Learn what the campaign entails.

Our report highlights how recent rail sabotage tied to major global events signals elevated risk heading into the 2026 World Cup. Learn key trends, threat actors, and actionable guidance for transit security.

- Persistent remote access - Hands-on-keyboard activity - Credential theft - Additional payload delivery This is what threat actors gain from abusing legitimate remote monitoring and management software. Read our analysis of a Vimeo-themed phishing campaign using this technique.

Governments can help to cultivate cybersecurity ecosystems by forming the need for security best practices. Hear more about this unique role for governments by checking out episode 181 of our podcast.

Browser, credential, system, and crypto wallet theft. CIS CTI observed these tactics in an ongoing MacSync Stealer campaign targeting state and local governments. Read the analysis. bit.ly/41xnO3F

Shared responsibility doesn't mean shared accountability. Hear what this means for realizing Secure by Design in the cloud.

NEW: CIS Hardened Images for AI workloads are built for SaaS + tech platforms scaling fast. Get secure AI infrastructure, ready at launch now!

Strengthen your cybersecurity foundation with the CIS Critical Security Controls — a prioritized, proven framework for defending against today’s most common threats.

A bedrock principle for the Center for Internet Security is that there needs to be a foundation of defense. That doesn't mean everything gets protected the same. But it does mean some level of security is expected.