CIS Updates Security Benchmarks for Windows, Linux, Browsers, and More
Summary
CIS lists updates to benchmarks for Windows, Linux, browsers, databases, and other platforms, and announces new benchmarks for Arista EOS and Ubuntu Linux 26.04 LTS.
Key points
- CIS updated benchmarks across Windows, Linux, macOS, Chrome, ChromeOS, Google Workspace, Apache Tomcat, and PostgreSQL.
- The Windows Server 2022 update removes Microsoft Defender Antivirus recommendations because Defender now has its own benchmark.
- The Chrome Group Policy benchmark aligns with Chrome 150 and adds 20 security recommendations, including generative AI guidance.
- The PostgreSQL 17 benchmark adds a recommendation requiring passwords for all accounts capable of login.
- CIS released new benchmarks for Arista EOS and Ubuntu Linux 26.04 LTS.
- CIS says some benchmark families, including Zoom, Check Point Firewall, and Bottlerocket, may be archived without community volunteers.
Article Details
- Event Type
- Publication of updated and new CIS security configuration benchmarks and release of CIS Build Kits.
- Impact
- The updates provide revised security recommendations, control mappings, audit and remediation guidance, and assessment content across multiple operating systems, browsers, databases, and application servers. The article reports no security incident or direct operational impact.
People
Vendors
Products
CIS AlmaLinux OS 9 BenchmarkCIS AlmaLinux OS 9 Benchmark v3.0.0CIS Apache Tomcat 10.1 BenchmarkCIS Apache Tomcat 10.1 Benchmark v1.2.0CIS Apache Tomcat 11 BenchmarkCIS Apache Tomcat 11 Benchmark v1.1.0CIS Apache Tomcat Application Server 9 STIG BenchmarkCIS Apache Tomcat Application Server 9 STIG Benchmark v1.1.0CIS Apple macOS 14.0 Sonoma BenchmarkCIS Apple macOS 14.0 Sonoma Benchmark v3.1.0CIS Apple macOS 15 (Sequoia) STIG BenchmarkCIS Apple macOS 15 (Sequoia) STIG Benchmark v1.1.0CIS Apple macOS 15 Sequoia BenchmarkCIS Apple macOS 15 Sequoia Benchmark v2.1.0CIS Apple macOS 26 Tahoe BenchmarkCIS Apple macOS 26 Tahoe Benchmark v1.1.0CIS Arista EOS BenchmarkCIS Arista EOS Benchmark v1.0.0CIS Debian 13 Linux BenchmarkCIS Debian 13 Linux Benchmark v1.1.0CIS Google Chrome Enterprise Core Browser BenchmarkCIS Google Chrome Enterprise Core Browser Benchmark v1.1.0CIS Google Chrome Group Policy BenchmarkCIS Google Chrome Group Policy Benchmark v1.1.0CIS Google ChromeOS BenchmarkCIS Google ChromeOS Benchmark v1.2.0CIS Google Workspace Foundations BenchmarkCIS Google Workspace Foundations Benchmark v1.4.0CIS Microsoft Windows 11 Enterprise BenchmarkCIS Microsoft Windows 11 Enterprise Benchmark v5.1.0CIS Microsoft Windows 11 STIG BenchmarkCIS Microsoft Windows 11 STIG Benchmark v1.2.0CIS Microsoft Windows Server 2022 BenchmarkCIS Microsoft Windows Server 2022 Benchmark v5.1.0CIS Microsoft Windows Server 2025 BenchmarkCIS Microsoft Windows Server 2025 Benchmark v2.1.0CIS Microsoft Windows Server 2025 Stand-alone BenchmarkCIS Microsoft Windows Server 2025 Stand-alone Benchmark v2.0.0CIS Oracle Linux 9 BenchmarkCIS Oracle Linux 9 Benchmark v3.0.0CIS PostgreSQL 17 BenchmarkCIS PostgreSQL 17 Benchmark v2.0.0CIS Red Hat Enterprise Linux 9 BenchmarkCIS Red Hat Enterprise Linux 9 Benchmark v3.0.0CIS Rocky Linux 9 BenchmarkCIS Rocky Linux 9 Benchmark v3.0.0CIS Ubuntu Linux 26.04 LTS BenchmarkCIS Ubuntu Linux 26.04 LTS Benchmark v1.0.0