[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-csf\u002Fde-cm":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",869,"US National Institute of Standards and Technology (NIST)","**What it asks for.** This Detect category requires that assets are monitored to find anomalies, indicators of compromise and other potentially adverse events. DE.CM-1 in CSF 1.1 specifically addressed monitoring the network to detect potential cybersecurity events.\n\n**In practice.** The organisation monitors networks, endpoints, user activity, physical environments, external service providers and cloud services, with defined coverage and alerting. Network monitoring uses flow data, intrusion detection, DNS logging and similar telemetry, and monitoring is tuned to known threats. Evidence includes monitoring coverage maps, use case lists and alert handling records.\n\n**Common gaps.** Coverage gaps are common in cloud environments, remote work and third party connections. Monitoring tools are deployed but under tuned, producing noise that hides real events.",null,"https:\u002F\u002Fwww.nist.gov\u002Fcyberframework","Open the Cybersecurity Framework at NIST","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},897,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"ai-powered-attack-tool-artex-enables-machine-speed-intrusions-by-low-skill-actors","AI-Powered Attack Tool Artex Enables Machine-Speed Intrusions by Low-Skill Actors","2026-11-13T22:20:40.075+00:00",{"slug":24,"title":25,"published_at":26},"ai-powered-pen-testing-tools-lower-the-bar-for-attackers","AI-Powered Pen Testing Tools Lower the Bar for Attackers","2026-11-13T21:20:23.73+00:00",{"slug":28,"title":29,"published_at":30},"gootloader-takedown-exposes-risks-of-compromised-websites-and-access-as-a-service-malware","Gootloader Takedown Exposes Risks of Compromised Websites and Access-as-a-Service Malware","2026-11-13T16:22:57.628+00:00",{"slug":32,"title":33,"published_at":34},"state-actors-exploit-telecom-protocols-to-intercept-calls-and-sms-at-network-level","State Actors Exploit Telecom Protocols to Intercept Calls and SMS at Network Level","2026-11-13T13:22:35.957+00:00",{"slug":36,"title":37,"published_at":38},"operation-tornado-354-dark-web-criminals-arrested-through-persistent-law-enforcement-intelligence-ga","Operation TorNado: 354 Dark Web Criminals Arrested Through Persistent Law Enforcement Intelligence Gathering","2026-11-13T12:21:18.576+00:00",{"slug":40,"title":41,"published_at":42},"ai-agent-containment-requires-more-than-pulling-the-plug","AI Agent Containment Requires More Than Pulling the Plug","2026-11-13T12:20:44.927+00:00",{"slug":44,"title":45,"published_at":46},"operation-endgame-dismantles-malware-as-a-service-infrastructure-stealing-millions-of-credentials","Operation Endgame Dismantles Malware-as-a-Service Infrastructure Stealing Millions of Credentials","2026-11-13T11:20:42.574+00:00",{"slug":48,"title":49,"published_at":50},"north-korean-hackers-steal-6b-from-binance-using-crypto-obfuscation-chains","North Korean Hackers Steal $6B from Binance Using Crypto Obfuscation Chains","2026-11-13T11:20:22.826+00:00",{"slug":52,"title":53,"published_at":54},"compromised-github-accounts-used-to-steal-cloud-secrets-via-injected-cicd-workflows","Compromised GitHub Accounts Used to Steal Cloud Secrets via Injected CI\u002FCD Workflows","2026-11-12T23:20:40.136+00:00",{"slug":56,"title":57,"published_at":58},"japans-cyberattack-surge-highlights-gaps-in-vulnerability-management-and-ai-assisted-threat-detectio","Japan's Cyberattack Surge Highlights Gaps in Vulnerability Management and AI-Assisted Threat Detection","2026-11-12T21:21:33.229+00:00",{"slug":60,"title":61,"published_at":62},"ai-accelerated-attacks-are-outpacing-human-speed-soc-defenses","AI-Accelerated Attacks Are Outpacing Human-Speed SOC Defenses","2026-11-12T17:22:09.493+00:00",{"slug":64,"title":65,"published_at":66},"open-source-ai-pentest-tool-weaponized-against-critical-sector-organizations","Open-Source AI Pentest Tool Weaponized Against Critical-Sector Organizations","2026-11-12T16:21:40.466+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",435,{"slug":74,"name":75,"problem":76,"stories":77},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",144,{"slug":79,"name":80,"problem":81,"stories":82},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",140,{"slug":84,"name":85,"problem":86,"stories":87},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",135,{"slug":89,"name":90,"problem":91,"stories":92},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",129,{"slug":94,"name":95,"problem":96,"stories":97},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",125,[99,105,111,116,122,127,132,137],{"family":100,"item":101,"code":102,"title":103,"together":104},"gdpr","32","Article 32","Security of processing",408,{"family":106,"item":107,"code":108,"title":109,"together":110},"cis","13","Control 13","Network Monitoring and Defense",368,{"family":112,"item":113,"code":114,"title":114,"together":115},"itil","overview","ITIL",262,{"family":117,"item":118,"code":119,"title":120,"together":121},"nist-800-53","si-3","SI-3","Malicious Code Protection",259,{"family":106,"item":123,"code":124,"title":125,"together":126},"2","Control 2","Inventory and Control of Software Assets",254,{"family":106,"item":128,"code":129,"title":130,"together":131},"7","Control 7","Continuous Vulnerability Management",246,{"family":106,"item":133,"code":134,"title":135,"together":136},"6","Control 6","Access Control Management",219,{"family":106,"item":138,"code":139,"title":140,"together":141},"14","Control 14","Security Awareness and Skills Training",184]