CIS Benchmarks Monthly Update September 2025

CIS announced multiple benchmark updates and new releases across a wide range of platforms, including AKS Optimized Azure Linux (v2 and new v3), IBM i, GitHub, ChromeOS (with new AI usage guidance), Windows Server STIGs, MongoDB (v7 updates and new v8), Oracle Database 23ai, Oracle Linux 8, RHEL 8/10, Rocky Linux 8, and Palo Alto 10. Highlights include substantial additions, removals, and updates to recommendations and sections, updated control mappings, clarifications to audits/remediations, and a shift to FirewallD guidance for Linux host-based firewalls. CIS also requested community SME participation and warned that Zoom, Check Point Firewall, and Bottlerocket benchmarks may be archived by October 10, 2025 without renewed support.