CIS publishes updates and new releases of Benchmarks across cloud, database, and Linux platforms

Original title: CIS Benchmarks June 2026 Update

CIS Security released 15 new and updated Benchmarks in June 2026, spanning cloud platforms, database systems, network equipment, and Linux distributions. These updates introduce new recommendations, reorganized content, and enhanced CIS Controls mappings to address evolving security requirements. Organizations using these platforms should review the updated guidance and incorporate new recommendations into their security configurations and compliance processes.

What changed

• CIS Microsoft 365 Foundations Benchmark v7.0.0: Added 22 new recommendations, included 12 recommendations relocated from Azure Foundations Benchmark, removed 2 recommendations, completed 68 updates, and revised control mappings
• CIS Ubuntu Linux 24.04 LTS Benchmark v2.0.0: Added 122 recommendations across 4 sections, dropped 101 recommendations, moved 69 recommendations, and updated 129 recommendations across 16 sections
• CIS Google Cloud Platform Foundations Benchmark v5.0.0: Added 10 new recommendations and a new section for Google Organization Resources settings, updated CIS Controls mappings, and updated console steps to reflect GUI changes
• CIS Microsoft Windows Server 2019 Benchmark v5.0.0: Added 2 new security settings, updated 11 settings, removed 14 settings, and reorganized sections due to updated ADMX templates
• CIS Kubernetes Benchmark v2.0.1 and CIS Kubernetes STIG Benchmark v1.1.0: Added support for Kubernetes v1.34 and v1.35, with the STIG version including 53 audit and remediation enhancements and AAC support

Who is affected

Organizations globally using Amazon Linux, Microsoft Intune, Google Cloud Platform, Cisco IOS networking equipment, Microsoft SQL Server 2022, Microsoft 365, Windows Server 2019, Ubuntu Linux 24.04 LTS, Kubernetes clusters, and Debian Linux 12. SecureSuite members have access to additional formats and resources through CIS WorkBench.