CIS Releases and Updates Benchmarks for Cloud, Operating Systems, Kubernetes and More

Summary

CIS announced new and updated security benchmarks and build kits covering platforms including Google Cloud, Microsoft 365, Linux, Kubernetes, and Amazon EKS, with changes ranging from new recommendations to audit and remediation enhancements.

Key points

• CIS announced new and updated benchmarks across cloud services, operating systems, databases, network devices, and Kubernetes platforms.
• The Google Cloud Platform Foundations Benchmark v5.0.0 adds 10 recommendations and a section for Google Organization Resources settings.
• The Microsoft 365 Foundations Benchmark v7.0.0 adds 22 recommendations, including 12 relocated from the Microsoft Azure Foundations Benchmark.
• The Ubuntu Linux 24.04 LTS Benchmark v2.0.0 adds 122 recommendations and updates 129.
• Kubernetes benchmark updates add support for versions 1.34 and 1.35; the Kubernetes STIG release also includes 53 audit and remediation enhancements.
• The EKS Benchmark v2.0.0 includes 63 edited or enhanced recommendations and 23 audit and remediation enhancements.
• The Amazon Linux 2 STIG Benchmark v2.0.1 is its final release and marks the benchmark end of life; CIS advises users to migrate to a covered operating system.

People

Vendors

Products

Related Articles

• Datadog Finds 3,500+ Dangerous Kubernetes RBAC Bindings Across 65,000 ClustersAmazon Elastic Kubernetes Service · Azure Kubernetes Service · Kubernetes
• CloudSEK Finds Gentlemen Ransomware Affiliate’s Exposed Servers and Stolen DataKubernetes · Microsoft SQL Server
• AI Speeds Up Cyber Threats, but Security Fundamentals Still MatterCIS Benchmarks · CIS Build Kits
• TraderTraitor Backdoors Found on an IT Services Provider’s MacGoogle Cloud Platform · macOS
• ESET Finds 11 Outdated UEFI Shims That Can Bypass Secure BootOracle Linux · Red Hat Enterprise Linux