Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![global digital perimeter](/sites/default/files/styles/4_3_small/public/2022/02/23/shutterstock_1643121439.jpg.webp?itok=2h-byzWy)
As cyber attacks evolve and your attack surface increases, learn how you can protect your digital perimeter.
![Cyber intrusion, hacker looking at your network](/sites/default/files/styles/4_3_small/public/2022/02/07/Cyber%20Intrusion%2C%20Sized.jpg.webp?itok=_H7TnpQw)
Learn how to reduce the threat of cyber intrusion with a detection and prevention approach grounded in continuous monitoring.
![4 Best Practices for Attack Surface Management](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_613167605_1.jpg.webp?itok=2WiePjlt)
Accelerated by the pandemic, digital ecosystems are expanding. New ways of working remotely, and the rapid adoption of cloud technologies have increased the number of digital touch-points that employees interact with. Unfortunately this expanded attack surface creates new points of exposure that make it difficult for security leaders to pinpoint where cyber risk exists, or when a risk is worth concern.
![Grow Your Business Without Increasing Your Attack Surface Vulnerabilities](/sites/default/files/styles/4_3_small/public/migration/images/Attack%2520surface%2520SPM%2520blog%2520picture_1.jpg.webp?itok=4sbqDL6n)
With the expanding perimeter companies are creating as they move more of their business into the cloud, as well the addition of work-from-home network connections, there is a greater attack surface for hackers to penetrate. Focusing on these three attack surface risk reductions best practices will help security managers protect their programs.
![Discover and Mitigate Cyber Risk Across Your Cloud Environment](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_222190471_1.jpg.webp?itok=IQs3d9wm)
Did you know that the volume of attacks on cloud services more than doubled in 2019? According to the 2020 Trustwave Global Security Report, cloud environments are now the third most targeted environment for cyber attacks. While these incidents are on the rise, migrating to the cloud is no longer optional for many organizations, due to the widespread shift to remote work. In today’s ever-evolving, dynamic security landscape, mitigating risk effectively requires thorough cloud security monitoring and continued visibility into your expanding attack surface.
![Report Shows Cyber Attacks on Cloud Services Have Doubled](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1458581246_1.jpg.webp?itok=A5jIX5Cx)
As cloud services increase in popularity, a worrying cybersecurity trend has emerged. According to the 2020 Trustwave Global Security Report, the volume of attacks on cloud services more than doubled in 2019 and accounted for 20% of investigated incidents. Although corporate and internal networks remain the most targeted domains, representing 54% of incidents, cloud environments are now the third most targeted environment for cyber attacks.
![Shine a Light on Shadow IT](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_653465086_1.jpg.webp?itok=8X6ao8RG)
Over the last several years Shadow IT has grown from a minor annoyance into a major threat to business operations. While the term is often used to refer to runaway tech spending by users in marketing or dev-ops or finance, it has in fact become a much larger issue that involves the very core of organizational infrastructure with the potential to pose enormous cyber risk.