CIS Updates Security Benchmarks and Releases New Hardening Guides
Summary
CIS announced updates to benchmarks for platforms including Amazon Linux, Azure, VMware, and Apple devices, alongside new guides for Kubernetes, databases, and other products. Some releases add automated assessment content and updated remediation guidance.
Key points
- CIS updated benchmarks for Amazon Linux 2, Oracle Database, IBM AIX, VMware ESXi, Apple devices managed through Intune, Cisco systems, and Microsoft Azure.
- The Amazon Linux 2 Benchmark v4.0.0 added 59 recommendations, removed 61, and updated 229.
- The VMware ESXi 8.0 benchmark update revised 17 recommendations after auditing and remediation against the latest ESXi 8 version.
- New benchmarks include releases for OPNsense, SQL Server 2025, PostgreSQL 18, IBM Db2 12.1, Kubernetes, and Amazon Linux 2023 STIG.
- Kubernetes Benchmark v2.0.0 adds automated assessment content, supports Kubernetes versions 1.34 and 1.35, and updates audit and remediation procedures for 23 recommendations.
- Several STIG benchmark releases include automated assessment content and Build Kit coverage.
Article Details
- Event Type
- Publication and updates of CIS security configuration benchmarks and build kits
- Impact
- CIS published new benchmark releases and updates covering operating systems, databases, cloud platforms, mobile devices, networking equipment, browsers, office software, and Kubernetes. Changes include new and revised security recommendations, automated assessment content, and updated audit and remediation guidance. No security incident or direct operational impact is reported.
People
Alexander KornbrustAcknowledged for contributions to the CIS Oracle Database 26ai Benchmark.Anoop MouryaAcknowledged for contributions to the CIS IBM AIX 7 Benchmark.Daniel BrownAcknowledged for creating the initial CIS OPNsense Benchmark release.Danny De HaanAcknowledged for contributions to the CIS Microsoft SQL Server 2025 Benchmark.Graham EarmsAcknowledged for contributions to the CIS IBM AIX 7 Benchmark.Greg CarpenterAcknowledged for contributions to the CIS VMware ESXi 8.0 Benchmark.Greg StagerAcknowledged for contributions to the CIS IBM Db2 12.1 Benchmark.Jay MehtaAcknowledged for contributions to the CIS Oracle Database 26ai Benchmark.Lewis HardyIdentified as the author of the CIS Apple iOS and iPadOS 18 for Intune Benchmark.Mark LarideRecognized as a contributor to the CIS Kubernetes Benchmark.Matthew ReaganAcknowledged for contributions to the CIS VMware ESXi 8.0 Benchmark and the CIS Kubernetes Benchmark.Michael FeltAcknowledged for contributions to the CIS IBM AIX 7 Benchmark.Nelly ChngAcknowledged for contributions to the CIS Oracle Database 26ai Benchmark.Rob KraftAcknowledged for contributions to the CIS Microsoft SQL Server 2025 Benchmark.Robert PlankersAcknowledged for contributions to the CIS VMware ESXi 8.0 Benchmark.Rory McCuneRecognized as a contributor to the CIS Kubernetes Benchmark.Russ LowenthalAcknowledged for contributions to the CIS Oracle Database 26ai Benchmark.Sean McCownAcknowledged for contributions to the CIS Microsoft SQL Server 2025 Benchmark.Steinar AndersenAcknowledged for contributions to the CIS Microsoft SQL Server 2025 Benchmark.Tony WilwerdingAcknowledged for contributions to the CIS VMware ESXi 8.0 Benchmark.Yorvi AriasAcknowledged for contributions to the CIS PostgreSQL 18 Benchmark.
Vendors
AmazonCIS Amazon Linux 2 Benchmark v4.0.0CISCIS Benchmarks May 2026 UpdateCiscoCIS Cisco IOS XE Router RTR STIG Benchmark v1.1.0IBMCIS IBM AIX 7 Benchmark v1.2.0MicrosoftCIS Microsoft Intune for Apple iOS 17 and iPadOS 17 Benchmark v1.1.0MozillaCIS Mozilla Firefox STIG Benchmark v1.1.0OracleCIS Oracle Database 19c STIG Benchmark v1.1.0
Products
Amazon Linux 2CIS Amazon Linux 2 Benchmark v4.0.0Amazon Linux 2023CIS Amazon Linux 2023 STIG Benchmark v1.0.0CIS BenchmarksCIS Benchmarks May 2026 UpdateCIS Build KitsThe following CIS Benchmarks® and CIS Build Kits have been updated or recently released.CIS Microsoft 365 Foundations BenchmarkEntra ID Recommendations migrated to CIS Microsoft 365 Foundations BenchmarkCisco IOSCIS Cisco IOS XE Router RTR STIG Benchmark v1.1.0Cisco IOS XECIS Cisco IOS XE Router RTR STIG Benchmark v1.1.0IBM AIX 7CIS IBM AIX 7 Benchmark v1.2.0IBM Db2 12.1CIS IBM Db2 12.1 Benchmark v1.0.0IntuneCIS Intune for iOS 18 and iPadOS 18 Benchmark v2.0.0iOSCIS Intune for iOS 18 and iPadOS 18 Benchmark v2.0.0iPadOSCIS Intune for iOS 18 and iPadOS 18 Benchmark v2.0.0KubernetesCIS Kubernetes Benchmark v2.0.0Microsoft AzureCIS Microsoft Azure Foundations Benchmark v6.0.0Microsoft Office 365 ProPlusCIS Microsoft Office 365 ProPlus STIG Benchmark v1.1.0Microsoft SQL Server 2025CIS Microsoft SQL Server 2025 Benchmark v1.0.0Mozilla FirefoxCIS Mozilla Firefox STIG Benchmark v1.1.0OPNsenseCIS OPNsense Benchmark v1.0.0Oracle Database 19cCIS Oracle Database 19c STIG Benchmark v1.1.0Oracle Database 26aiCIS Oracle Database 26ai Benchmark v1.0.0PostgreSQL 18CIS PostgreSQL 18 Benchmark v1.0.0VMware ESXi 8CIS VMware ESXi 8 Benchmark v1.3.0