[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-csf\u002Frs-mi":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-csf","rs-mi","RS.MI-3","Mitigation (CSF 1.1)",274,"US National Institute of Standards and Technology (NIST)","**What it asks for.** In CSF 1.1 this Respond category covered activities to prevent expansion of an event, mitigate its effects and resolve the incident: containment, mitigation, and RS.MI-3, which required newly identified vulnerabilities to be mitigated or documented as accepted risks. CSF 2.0 renamed the category Incident Mitigation and moved vulnerability handling to ID.RA-06.\n\n**In practice.** Responders contain affected systems quickly using predefined actions such as isolating hosts, disabling accounts and blocking indicators, then eradicate the threat. Vulnerabilities found during incidents are fixed or formally accepted with an owner and review date. Evidence includes containment records, playbooks and a risk acceptance register.\n\n**Common gaps.** Containment is often slowed by unclear authority to take systems offline. Risk acceptances are recorded without expiry dates and never revisited.",null,"https:\u002F\u002Fwww.nist.gov\u002Fcyberframework","Open the Cybersecurity Framework at NIST","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},337,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"unpatched-check-point-gateways-rooted-and-esxi-hosts-wiped","Unpatched Check Point Gateways Rooted and ESXi Hosts Wiped","2026-11-14T04:20:40.635+00:00",{"slug":24,"title":25,"published_at":26},"actively-exploited-vulnerabilities-added-to-cisa-kev-catalog-demand-immediate-remediation","Actively Exploited Vulnerabilities Added to CISA KEV Catalog Demand Immediate Remediation","2026-11-13T21:21:21.381+00:00",{"slug":28,"title":29,"published_at":30},"critical-citrix-netscaler-flaw-in-default-installations-demands-immediate-patching","Critical Citrix NetScaler Flaw in Default Installations Demands Immediate Patching","2026-11-13T15:21:00.274+00:00",{"slug":32,"title":33,"published_at":34},"faulty-update-triggers-global-microsoft-outage-echoing-crowdstrike-incident","Faulty Update Triggers Global Microsoft Outage, Echoing CrowdStrike Incident","2026-11-13T14:20:22.59+00:00",{"slug":36,"title":37,"published_at":38},"critical-apache-http-server-rce-flaw-demands-immediate-patching-action","Critical Apache HTTP Server RCE Flaw Demands Immediate Patching Action","2026-11-13T11:22:30.389+00:00",{"slug":40,"title":41,"published_at":42},"critical-citrix-netscaler-flaws-demand-immediate-patching-1794565253454","Critical Citrix NetScaler Flaws Demand Immediate Patching","2026-11-13T10:20:53.412+00:00",{"slug":44,"title":45,"published_at":46},"critical-apache-http2-rce-flaw-demands-immediate-patching-1794536440453","Critical Apache HTTP\u002F2 RCE Flaw Demands Immediate Patching","2026-11-13T02:20:40.403+00:00",{"slug":48,"title":49,"published_at":50},"microsoft-cloud-outage-exposes-infrastructure-resilience-gaps","Microsoft Cloud Outage Exposes Infrastructure Resilience Gaps","2026-11-12T22:20:36.446+00:00",{"slug":52,"title":53,"published_at":54},"critical-apache-http2-rce-flaw-leaves-64-of-cloud-environments-exposed","Critical Apache HTTP\u002F2 RCE Flaw Leaves 64% of Cloud Environments Exposed","2026-11-12T20:20:38.878+00:00",{"slug":56,"title":57,"published_at":58},"automating-remediation-is-essential-to-closing-the-gap-between-vulnerability-discovery-and-fix","Automating Remediation Is Essential to Closing the Gap Between Vulnerability Discovery and Fix","2026-11-12T19:20:38.763+00:00",{"slug":60,"title":61,"published_at":62},"critical-patch-tuesday-1095-vulnerabilities-including-actively-exploited-outlook-flaw","Critical Patch Tuesday: 1,095 Vulnerabilities Including Actively Exploited Outlook Flaw","2026-11-12T19:20:21.43+00:00",{"slug":64,"title":65,"published_at":66},"critical-nodejs-brotli-decoder-flaw-exposes-siemens-ics-products-to-remote-code-execution","Critical Node.js Brotli Decoder Flaw Exposes Siemens ICS Products to Remote Code Execution","2026-11-12T18:22:07.39+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"patch-management","Automated patch management","Known holes get closed in days, not months.",304,{"slug":74,"name":75,"problem":76,"stories":77},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",258,{"slug":79,"name":80,"problem":81,"stories":82},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",77,{"slug":84,"name":85,"problem":86,"stories":87},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",74,{"slug":89,"name":90,"problem":91,"stories":92},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",26,{"slug":94,"name":95,"problem":96,"stories":97},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",25,[99,105,111,116,121,126,131,136],{"family":100,"item":101,"code":102,"title":103,"together":104},"cis","7","Control 7","Continuous Vulnerability Management",328,{"family":106,"item":107,"code":108,"title":109,"together":110},"nist-800-53","si-2","SI-2","Flaw Remediation",279,{"family":112,"item":113,"code":114,"title":114,"together":115},"itil","overview","ITIL",207,{"family":100,"item":117,"code":118,"title":119,"together":120},"12","Control 12","Network Infrastructure Management",165,{"family":5,"item":122,"code":123,"title":124,"together":125},"id-ra","ID.RA-1","Risk Assessment",144,{"family":106,"item":127,"code":128,"title":129,"together":130},"ra-5","RA-5","Vulnerability Monitoring and Scanning",117,{"family":100,"item":132,"code":133,"title":134,"together":135},"2","Control 2","Inventory and Control of Software Assets",112,{"family":137,"item":138,"code":139,"title":140,"together":141},"nist-sp","800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",99]