CIS Controls v8.1 introduced significant updates to align with NIST Cybersecurity Framework (CSF) 2.0, including the addition of a dedicated “Governance” security function to address organizational oversight and compliance requirements.… Read More »CIS Controls v8.1 Mapping to NIST CSF 2.0
The “Top Threats to Cloud Computing 2025” report highlights a rapidly evolving threat landscape driven by both technological advances and persistent human factors. Key risks include data breaches, often resulting… Read More »CSA Top Threats to Cloud Computing 2025
The OWASP Application Security Verification Standard (ASVS) is a comprehensive framework that defines security requirements for designing, developing, and testing web applications and APIs. It is organized into 14 chapters,… Read More »OWASP Application Security Verification Standard (ASVS) 5.0 ★★★★★
The CRI Profile v2.1 is a cybersecurity framework developed by the Cyber Risk Institute specifically for the financial sector, aimed at helping institutions efficiently manage and assess cyber risk while… Read More »CRI Cyber Risk Institute Profile for Financial Sector v2.1 ★★★★★
The First EPSS Calculator is an open-source tool designed to fetch and display the Exploit Prediction Scoring System (EPSS) score for one or multiple CVEs (Common Vulnerabilities and Exposures). The calculator… Read More »FIRST Exploit Prediction Scoring System (EPSS) Calculator
MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) is a comprehensive, publicly available knowledge base and framework that documents the tactics, techniques, and case studies of adversarial attacks targeting artificial… Read More »MITRE ATLAS version 4.8.0
The OWASP Top 10 for Large Language Model (LLM) Applications is a community-driven list identifying the most critical security risks specific to LLMs and generative AI systems. It highlights vulnerabilities… Read More »OWASP Top 10 for Large Language Model Applications
The MITRE ATT&CK® framework is a globally recognized, continuously updated knowledge base that catalogs the tactics, techniques, and procedures (TTPs) used by cyber adversaries, based on real-world observations. Organized as a… Read More »MITRE Att&Ck® version 16.1
CIS Critical Security Controls v8 (CIS CSC v8) is a comprehensive cybersecurity framework developed by the Center for Internet Security to help organizations defend against modern cyber threats. Version 8… Read More »CIS Critical Security Controls Version 8 ★★★★★
The OWASP LLM AI Cybersecurity & Governance Checklist provides organizations with a structured framework to manage the risks and responsibilities associated with deploying Large Language Models (LLMs). It covers 13… Read More »OWASP LLM Applications Cybersecurity and Governance Checklist v1.1