News

• CISA Known Exploited Vulnerabilities 22 h ago

  CISA Known Exploited Vulnerabilities 2026.10.27: no control-level changes

  Editorial changes only.
• Tracker canaries (EasyPrivacy) Tue 27 Oct

  Tracker canaries (EasyPrivacy) 202610271409: no control-level changes

  Editorial changes only.
• Ad canaries (EasyList) Tue 27 Oct

  Ad canaries (EasyList) 202610271405: 1 added, 1 removed

  Added: lodhissmliqjs.website. Removed: nuqybxhg5chpqerfqeo.rest
• CISA Known Exploited Vulnerabilities Mon 26 Oct

  CISA Known Exploited Vulnerabilities 2026.10.26: no control-level changes

  Editorial changes only.
• CISA Known Exploited Vulnerabilities Fri 23 Oct

  CISA Known Exploited Vulnerabilities 2026.10.23: no control-level changes

  Editorial changes only.
• NIST SP 800-53 (controls) Thu 22 Oct

  NIST SP 800-53 (controls) 5.2.0: 1 revised

  Revised: sa-15.13
• CISA Known Exploited Vulnerabilities 21 Oct

  CISA Known Exploited Vulnerabilities 2026.10.21: no control-level changes

  Editorial changes only.
• Malware canaries (URLhaus) 21 Oct

  Malware canaries (URLhaus) 2026-10-21 13:58 UTC: 1 added, 1 removed

  Added: cloud-browse.codes. Removed: tenis-team-km.com
• CISA Known Exploited Vulnerabilities 20 Oct

  CISA Known Exploited Vulnerabilities 2026.10.20: no control-level changes

  Editorial changes only.
• Ad canaries (EasyList) 20 Oct

  Ad canaries (EasyList) 202610201409: loaded as the first version (12 requirements)

  Ad canaries from EasyList
• Tracker canaries (EasyPrivacy) 20 Oct

  Tracker canaries (EasyPrivacy) 202610201405: loaded as the first version (12 requirements)

  Tracker canaries from EasyPrivacy
• Malware canaries (URLhaus) 20 Oct

  Malware canaries (URLhaus) 2026-10-20 14:04 UTC: loaded as the first version (12 requirements)

  Malware canaries from URLhaus
• AdFection / Candiru indicators (Zero Breach) 18 Oct

  AdFection / Candiru indicators (Zero Breach) 2026-10-18 (7253316): 67 added, 1 revised

  Added: dtech.mtrtb.com, tekma.adtimizer.co, www.discover-tech.io, d8lmy5wyiokrq.cloudfront.net, d23625plpxg1yn.cloudfront.net, d39619tdxn6mhj.cloudfront.net, d2f4zpg1mgzwov.cloudfront.net, d1fzw0miu1r9rc.cloudfront.net…. Revised: 6a4875ae86131a594019dec4abd46ac6ba47e57a88287b814d07d929858fe3e5
• AdFection / Candiru DNS blocklist (Zero Breach) 18 Oct

  AdFection / Candiru DNS blocklist (Zero Breach) 2026-10-18 (7253316): 67 added, 1 removed

  Added: adtrack.link, aqaf.net, armenpress.net, armenpress.org, armlur.org, armradio.org, armtimes.net, armtimes.org…. Removed: adtimizer.co
• AdFection / Candiru ad blocklist (Zero Breach) 18 Oct

  AdFection / Candiru ad blocklist (Zero Breach) 2026-10-18 (7253316): 67 added, 1 removed

  Added: adtrack.link, aqaf.net, armenpress.net, armenpress.org, armlur.org, armradio.org, armtimes.net, armtimes.org…. Removed: adtimizer.co
• AdFection / Candiru indicators (Zero Breach) 18 Oct

  AdFection / Candiru indicators (Zero Breach) 2026-10-18 (e36dc96): loaded as the first version (338 requirements)

  AdFection / Discover-Tech / Candiru indicators
• AdFection / Candiru DNS blocklist (Zero Breach) 18 Oct

  AdFection / Candiru DNS blocklist (Zero Breach) 2026-10-18 (e36dc96): loaded as the first version (225 requirements)

  adint-scan denylist (domains)
• AdFection / Candiru ad blocklist (Zero Breach) 18 Oct

  AdFection / Candiru ad blocklist (Zero Breach) 2026-10-18 (e36dc96): loaded as the first version (225 requirements)

  AdFection / Candiru blocklist
• CISA Known Exploited Vulnerabilities 16 Oct

  CISA Known Exploited Vulnerabilities 2026.10.16: no control-level changes

  Editorial changes only.
• DISA STIG Intune policy package 16 Oct

  DISA STIG Intune policy package October 2026: loaded as the first version (1019 requirements)

  DISA STIG Intune Policy Package, October 2026
• DISA STIG GPO package checklists 16 Oct

  DISA STIG GPO package checklists October 2026: loaded as the first version (3465 requirements)

  DISA STIG GPO Package checklists, October 2026
• CISA Known Exploited Vulnerabilities 15 Oct

  CISA Known Exploited Vulnerabilities 2026.10.15: no control-level changes

  Editorial changes only.
• DISA STIG library 13 Oct

  DISA STIG library V1R1: loaded as the first version (89 requirements)

  Apple iOS/iPadOS 27 Security Technical Implementation Guide
• FedRAMP Consolidated Rules (2026) 13 Oct

  FedRAMP Consolidated Rules (2026) 2026.10.13.01: 73 with discussion or related-control updates

  Editorial changes only.
• Microsoft Security Baselines (SCT) 8 Oct

  Microsoft Security Baselines (SCT) v2: loaded as the first version (426 requirements)

  Windows 11 v26H2 Security Baseline v2
• Microsoft Security Baselines (SCT) 8 Oct

  Microsoft Security Baselines (SCT) 2602: loaded as the first version (564 requirements)

  Windows Server 2025 Security Baseline - 2602
• Microsoft Security Baselines (SCT) 8 Oct

  Microsoft Security Baselines (SCT) 2026-10-08: loaded as the first version (675 requirements)

  Documentation
• Microsoft Security Baselines (SCT) 8 Oct

  Microsoft Security Baselines (SCT) 2026-10-08: loaded as the first version (366 requirements)

  Windows-10-v22H2-Security-Baseline
• Microsoft Security Baselines (SCT) 8 Oct

  Microsoft Security Baselines (SCT) 2026-10-08: loaded as the first version (663 requirements)

  Windows-10-Windows Server-v20H2-Security-Baseline-FINAL
• Microsoft Security Baselines (SCT) 8 Oct

  Microsoft Security Baselines (SCT) 2026-10-08: loaded as the first version (425 requirements)

  Windows 11 v25H2 Security Baseline
• Microsoft Security Baselines (SCT) 8 Oct

  Microsoft Security Baselines (SCT) 2026-10-08: loaded as the first version (392 requirements)

  Windows 11 v23H2 Security Baseline
• Microsoft Security Baselines (SCT) 8 Oct

  Microsoft Security Baselines (SCT) 2026-10-08: loaded as the first version (25 requirements)

  Microsoft Edge v151 Security Baseline
• Microsoft Security Baselines (SCT) 8 Oct

  Microsoft Security Baselines (SCT) 2026-10-08: loaded as the first version (477 requirements)

  Windows Server-2022-Security-Baseline-FINAL
• Microsoft Security Baselines (SCT) 8 Oct

  Microsoft Security Baselines (SCT) 2026-10-08: loaded as the first version (426 requirements)

  Windows 11 v24H2 Security Baseline
• FedRAMP Consolidated Rules (2026) 8 Oct

  FedRAMP Consolidated Rules (2026) 2026.10.08.01: 1 revised

  Revised: frd-snt
• DISA STIG library 6 Oct

  DISA STIG library Y26M10: loaded as the first version (40 requirements)

  Google Android 16 COBO Security Technical Implementation Guide
• DISA STIG library 5 Oct

  DISA STIG library Y26M10: loaded as the first version (43 requirements)

  Samsung Android 16 COBO Security Technical Implementation Guide
• DISA STIG library 5 Oct

  DISA STIG library V1R3: loaded as the first version (435 requirements)

  Red Hat Enterprise Linux 10 Security Technical Implementation Guide
• DISA STIG library 5 Oct

  DISA STIG library V1R4: loaded as the first version (160 requirements)

  Apple macOS 26 (Tahoe) Security Technical Implementation Guide
• DISA STIG library 5 Oct

  DISA STIG library V6R9: loaded as the first version (33 requirements)

  Mozilla Firefox Security Technical Implementation Guide
• DISA STIG library 5 Oct

  DISA STIG library V2R11: loaded as the first version (277 requirements)

  Microsoft Windows Server 2022 Security Technical Implementation Guide
• DISA STIG library 5 Oct

  DISA STIG library V2R10: loaded as the first version (191 requirements)

  Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide
• DISA STIG library 5 Oct

  DISA STIG library V1R8: loaded as the first version (160 requirements)

  Apple macOS 15 (Sequoia) Security Technical Implementation Guide
• FedRAMP Consolidated Rules (2026) 5 Oct

  FedRAMP Consolidated Rules (2026) 2026.10.05.01: 3 revised, 1 with discussion or related-control updates

  Revised: cds-cso-pub, frc-cso-jsn, ver-eva-epa
• DISA STIG library 5 Oct

  DISA STIG library V1R4: loaded as the first version (291 requirements)

  Microsoft Windows Server 2025 Security Technical Implementation Guide
• DISA STIG library 5 Oct

  DISA STIG library V2R10: loaded as the first version (445 requirements)

  Red Hat Enterprise Linux 9 Security Technical Implementation Guide
• DISA STIG library 5 Oct

  DISA STIG library V2R11: loaded as the first version (257 requirements)

  Microsoft Windows 11 Security Technical Implementation Guide
• DISA STIG library 5 Oct

  DISA STIG library V1R7: loaded as the first version (195 requirements)

  Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide
• DISA STIG library 5 Oct

  DISA STIG library V6R5: loaded as the first version (286 requirements)

  Application Security and Development Security Technical Implementation Guide
• NASA Cybersecurity Policy Reference (OCIO/CSET) 15 Sep

  NASA Cybersecurity Policy Reference (OCIO/CSET) as of 2026-09-15: loaded as the first version (271 requirements)

  NASA Cybersecurity Policy Reference

Older