CIS Updates Security Benchmarks for VMware, MongoDB, Apache, Windows and More
Summary
CIS announced updates to benchmarks for VMware, MongoDB, Apache, Windows and other platforms, plus new benchmarks for Ubuntu, Everpure FlashArray and MCP servers.
Key points
- Updated benchmarks cover VMware ESXi 7 and 8, MongoDB 7 and 8, Apache HTTP Server 2.4, Windows 10 Enterprise, YugabyteDB and Talos Linux.
- The Apache benchmark adds support for all 2.4.x versions, including 2.4.68, and improves automation support for Ubuntu and Red Hat Linux.
- The MongoDB benchmarks add support for versions 8.2.12 and 7.0.40, respectively.
- The Windows 10 Enterprise benchmark removes Microsoft Defender Antivirus recommendations because Defender now has its own benchmark.
- New benchmarks were released for Ubuntu Linux 26.04 LTS, Everpure FlashArray Purity 6.9.x and MCP servers.
- The MCP Server Benchmark provides security best practices for deploying and operating MCP servers.
Article Details
- Event Type
- Release of updated and new CIS Benchmarks and CIS Build Kits
- Impact
- CIS updated eight security configuration benchmarks, published three new benchmarks, and released two build kits. The article reports no security incident or direct harm.
People
Aaron MargosisCredited for contributions to the Microsoft Windows 10 Enterprise benchmark.Haemish EdgertonCredited for contributions to the Microsoft Windows 10 Enterprise benchmark.Matt ReaganCredited for contributions to the MongoDB 8 benchmark.Tal SkvererCredited for helping develop the MCP Server benchmark.Tomer SchwartzCredited for helping develop the MCP Server benchmark.Tony WilwerdingCredited for contributions to the VMware ESXi 7.0 and Apache HTTP Server 2.4 benchmarks.
Vendors
Products
Apache HTTP Server 2.4CIS Apache HTTP Server 2.4 Benchmark v2.4.0Everpure FlashArray Purity 6.9.xCIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0Google ChromeCIS Google Chrome Group Policy Benchmark v1.1.0Microsoft DefenderAll Microsoft Defender Antivirus recommendations removed, as Microsoft Defender now has its own BenchmarkMicrosoft Defender AntivirusAll Microsoft Defender Antivirus recommendations removed, as Microsoft Defender now has its own BenchmarkMicrosoft Windows 10 EnterpriseCIS Microsoft Windows 10 Enterprise Benchmark v5.0.0Microsoft Windows 11CIS Microsoft Windows 11 STIG Benchmark v1.2.0MongoDB 7CIS MongoDB 7 Benchmark v2.0.0MongoDB 8CIS MongoDB 8 Benchmark v2.0.0Talos LinuxCIS Talos Linux Benchmark v2.0.0Ubuntu Linux 26.04 LTSCIS Ubuntu Linux 26.04 LTS Benchmark v1.0.0VMware ESXi 7.0CIS VMware ESXi 7.0 Benchmark v1.6.0VMware ESXi 8CIS VMware ESXi 8 Benchmark v1.4.0YugabyteDBCIS YugabyteDB Benchmark v2.0.0