CIS publishes updates for eight Benchmarks including Microsoft SQL Server, macOS, MariaDB, Intune, and Snowflake

Original title: CIS Benchmarks July 2026 Update

CIS Security has released updated versions of eight Benchmarks in July 2026, including new versions for Microsoft SQL Server 2022, Apple macOS (26 Tahoe, 15.0 Sequoia, and 14.0 Sonoma), MariaDB Enterprise, Microsoft Intune for Windows 10 and 11, and Snowflake Foundations. The updates include major enhancements to disk encryption procedures with automated checks for connected drives across macOS versions, significant changes to Windows Intune configurations with 22 new and 15 updated security settings for Windows 11, and audit procedure updates for SQL Server. Organizations using these platforms and deploying CIS Benchmarks should review the changelogs to understand how these updates affect their security configurations and compliance assessments.

What changed

• CIS Microsoft SQL Server 2022 Benchmark updated to v1.3.0 with updated audit procedures for 3 recommendations, updated appendix for Establishing an Audit/Scan User, and addressed 32 tickets
• CIS Apple macOS 26 Tahoe Benchmark updated to v1.1.0 with major update to disk encryption adding automated checks for connected drives/volumes, bug fixes, and minor updates to streamline audits
• CIS Apple macOS 15.0 Sequoia Benchmark updated to v2.1.0 with major disk encryption update including automated checks for connected drives/volumes, bug fixes, and streamlined audit recommendations
• CIS Apple macOS 14.0 Sonoma Benchmark updated to v3.1.0 with major disk encryption enhancements, automated checks for connected drives/volumes, bug fixes, and simplified audit procedures
• CIS Microsoft Intune for Windows 11 Benchmark updated to v5.0.0 with 22 new security settings added, 15 settings updated, 23 settings removed, 2 settings renamed, and sections reorganized due to updated ADMX templates

Who is affected

Organizations implementing CIS Benchmarks for Microsoft SQL Server, Apple macOS, MariaDB, Windows endpoints managed with Microsoft Intune, and Snowflake databases. The updates affect IT/security teams responsible for configuration management and compliance assessment across Windows, macOS, and Linux/database environments.