[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-csf\u002Fpr-ps":3},{"item":4,"lessons":16,"controls":55,"related":83},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-csf","pr-ps","PR.PS","PR.PS: Platform Security",0,"US National Institute of Standards and Technology (NIST)","**What it asks for.** This category asks that the hardware, software and services of physical and virtual platforms are managed in line with the risk strategy. It covers configuration management, software maintenance and replacement, hardware lifecycle, log generation, preventing unauthorised software and integrating secure development practices.\n\n**In practice.** Good practice is approved secure configuration baselines for operating systems, cloud services and network devices, with drift detected and corrected. Patching follows risk-based timelines, unsupported software and hardware are replaced, and only authorised software can run. Systems generate logs suitable for monitoring, and software is built using secure development practices. Evidence includes baseline documents, configuration compliance scans, patch reports, end-of-life registers and application control policies.\n\n**Common gaps.** Organisations often lack baselines for cloud and SaaS platforms, carry end-of-life systems without a plan, and allow uncontrolled software installation. Logging is frequently enabled by default settings rather than designed for detection needs.",null,"https:\u002F\u002Fwww.nist.gov\u002Fcyberframework","Open the Cybersecurity Framework at NIST","2026-10-18T15:18:43.664+00:00",{"total":17,"list":18},9,[19,23,27,31,35,39,43,47,51],{"slug":20,"title":21,"published_at":22},"microsofts-november-patch-tuesday-breaks-windows-activation","Microsoft's November Patch Tuesday Breaks Windows Activation","2026-11-13T10:21:11.124+00:00",{"slug":24,"title":25,"published_at":26},"83-chrome-vulnerabilities-highlight-the-need-for-rapid-browser-patching","83 Chrome Vulnerabilities Highlight the Need for Rapid Browser Patching","2026-11-12T11:20:39.155+00:00",{"slug":28,"title":29,"published_at":30},"ai-generated-code-fixes-can-introduce-new-vulnerabilities-without-human-oversight","AI-Generated Code Fixes Can Introduce New Vulnerabilities Without Human Oversight","2026-11-12T08:21:16.023+00:00",{"slug":32,"title":33,"published_at":34},"ubuntu-closes-ssl-revocation-gap-in-curl-bringing-browser-grade-certificate-checks-to-cli-tools","Ubuntu Closes SSL Revocation Gap in curl, Bringing Browser-Grade Certificate Checks to CLI Tools","2026-11-11T18:20:25.132+00:00",{"slug":36,"title":37,"published_at":38},"bitcoin-core-flaws-highlight-risks-of-delayed-patching-in-critical-blockchain-infrastructure","Bitcoin Core Flaws Highlight Risks of Delayed Patching in Critical Blockchain Infrastructure","2026-11-11T17:21:18.648+00:00",{"slug":40,"title":41,"published_at":42},"windows-server-update-breaks-exchange-sign-ins-due-to-undocumented-memory-limit-change","Windows Server Update Breaks Exchange Sign-Ins Due to Undocumented Memory Limit Change","2026-11-11T10:21:03.782+00:00",{"slug":44,"title":45,"published_at":46},"non-browser-tools-blind-to-revoked-certificates-ubuntu-closes-the-gap","Non-Browser Tools Blind to Revoked Certificates: Ubuntu Closes the Gap","2026-11-11T10:20:26.838+00:00",{"slug":48,"title":49,"published_at":50},"git-integer-truncation-flaw-enables-code-execution-via-malicious-repositories","Git Integer Truncation Flaw Enables Code Execution via Malicious Repositories","2026-11-10T20:21:01.14+00:00",{"slug":52,"title":53,"published_at":54},"critical-sap-flaws-allow-unauthenticated-remote-code-execution-patching-alone-is-not-enough","Critical SAP Flaws Allow Unauthenticated Remote Code Execution — Patching Alone Is Not Enough","2026-11-10T18:20:44.354+00:00",[56,61,66,71,75,79],{"slug":57,"name":58,"problem":59,"stories":60},"patch-management","Automated patch management","Known holes get closed in days, not months.",6,{"slug":62,"name":63,"problem":64,"stories":65},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",5,{"slug":67,"name":68,"problem":69,"stories":70},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",1,{"slug":72,"name":73,"problem":74,"stories":70},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":76,"name":77,"problem":78,"stories":70},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",{"slug":80,"name":81,"problem":82,"stories":70},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[84,90,95,100,104,110,114,119],{"family":85,"item":86,"code":87,"title":88,"together":89},"nis2","21-2-e","Article 21(2)(e)","Security in acquisition, development and maintenance (Article 21(2)(e))",7,{"family":91,"item":92,"code":93,"title":94,"together":60},"nist-800-53","si-2","SI-2","Flaw Remediation",{"family":96,"item":97,"code":98,"title":99,"together":60},"cis","7","Control 7","Continuous Vulnerability Management",{"family":96,"item":101,"code":102,"title":103,"together":65},"4","Control 4","Secure Configuration of Enterprise Assets and Software",{"family":105,"item":106,"code":107,"title":108,"together":109},"owasp","top10-2021-a02","A02:2021","A02:2021 Cryptographic Failures",2,{"family":91,"item":111,"code":112,"title":113,"together":109},"sc-17","SC-17","Public Key Infrastructure Certificates",{"family":115,"item":116,"code":117,"title":118,"together":70},"mitre-attack","t1195-001","T1195.001","Compromise Software Dependencies and Development Tools",{"family":85,"item":120,"code":121,"title":122,"together":70},"21-2-h","Article 21(2)(h)","Cryptography and encryption (Article 21(2)(h))"]