The Cybersecurity and Infrastructure Security Agency (CISA) has released 4 new best practices for security

https://www.us-cert.gov/ncas/current-activity/2019/09/20/cisa-releases-four-new-insights-products

Each of the following products provides a description of the threat, lessons learned, recommendations, and additional relevant resources: