Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![Mobile Application Risk Report Cover 2021](/sites/default/files/styles/4_3_small/public/2022/01/20/Mobile%20Application%20Risk%20Report%20Cover.png.webp?itok=z3scQxPf)
As internet use continues moving toward a mobile-centric experience, it has become essential to consider mobile applications when crafting a security strategy. Bitsight’s latest research demonstrates exactly why. We are excited to announce that Bitsight Insights: Mobile Application Risk Report is available now.
![Cyber risk data, CISO presenting about cybersecurity and cyber risk to board of directors and c-suite](/sites/default/files/styles/4_3_small/public/2021/12/20/Cyber%20Risk%20Data%20Sized.jpg.webp?itok=24505oTu)
Learn how to use cyber risk data to protect your organization and its financial assets.
![cyber risk banner](/sites/default/files/styles/4_3_small/public/2021/12/08/cyber%20risk%20banner.jpg.webp?itok=FiIIwzUe)
You can’t reduce the cyber risks faced by your organization if you don’t know what you’re up against. That’s the purpose of a vulnerability probe.
![Protecting Sensitive Data: 4 Things To Keep In Mind](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_382458778_1.jpg.webp?itok=p4SUQiuE)
Given the recent security breaches and reported hacking attempts, it is increasingly important for companies to have a handle on their most sensitive data. Sensitive data can include employees’ personal information, customer information, trade secrets, and other types of data that would cause internal breaches to company information if obtained by a hacker. To identify your organizations’ sensitive data points, refer to our recent article highlighting 5 examples of sensitive data.
![Secure Remote Work: New Threats Require a Shift in Policy and Training](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_431935282_1.jpg.webp?itok=kpxfqnAC)
Working from home introduces significant cyber risk to any organization. However, recent events reveal that it’s not a case of “if” but “when” bad actors will exploit the rampant vulnerabilities on home networks.
![Get Ahead of the Quantum Computing Security Threat](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_707534518_1.jpg.webp?itok=9EXFBA7s)
Quantum computing has the ability to change the world, both for better and worse, and while it may be far off in the future, security teams need to start preparing for the new reality it will usher in.
![Windows 7 End of Life: What Organizations Are Using the Now Outdated OS?](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_6587947_1.jpg.webp?itok=T4MZZL_P)
This week, Microsoft ended support for the Windows 7 operating system. Among other implications, Microsoft will no longer issue security patches for the nine-year-old OS. Any organization relying on the OS moving forward could be susceptible to a security issue, attack or data breach unless they purchased extended support from Microsoft.
![Why Bayer Chose BitSight](/sites/default/files/styles/4_3_small/public/migration/images/BAYER_1.png.webp?itok=D11R9vdN)
Companies must build a “trust and verify” strategy when it comes to managing third party risk. Requesting documentation about a supplier’s security performance is good – but how can you verify it? How can you continuously review performance?
![Cloud outsourcing poses new challenges for regulators and Financial Services](/sites/default/files/styles/4_3_small/public/migration/images/Strategic%2520cloud%2520outsourcing_EMEABlog_1.jpg.webp?itok=XpAY-Ml1)
Cyber risk and regulatory compliance are two sides of the same coin in the Financial Services sector. Together, they spur Financial Services companies to take action to protect customers, their business and the global financial ecosystem from the malicious cyber attacks or the risk of critical system failures.
![Financial services in Asia Pac face regulatory driven scrutiny of cyber risk management](/sites/default/files/styles/4_3_small/public/migration/images/blog_apac_financial_services_regulations_1.jpg.webp?itok=qaqYjmeb)
The evolution of the technology environment and related security threats is so fast paced it often seems businesses and regulators are playing an endless game of catch-up.
![Control and Accountability: The New Watchwords for Regulatory Compliance](/sites/default/files/styles/4_3_small/public/migration/images/control_accountability_blog_1.jpg.webp?itok=qkHuwdMy)
The regulatory environment is evolving rapidly as national and international regulatory bodies attempt to keep pace with changing business models, technology infrastructure and continuously escalating cyberthreats.
![BitSight Study: Just How Secure is the Business Services Sector?](/sites/default/files/styles/4_3_small/public/migration/images/Business%2520Services%2520Blog_1.jpg.webp?itok=DOtKZHgy)
Management consultants, accountants, public safety offices, marketing firms, and many more business and professional services organizations are high-value targets for cybercriminals due to the range of confidential client information they handle. Companies in this sector should all have solid security postures — and many do. But there’s still an alarming number of enterprises that do not.
![Financial Data Breaches 2019: Capital One, First American, Desjardins, More](/sites/default/files/styles/4_3_small/public/migration/images/AdobeStock_93365244-min-1_1.jpeg.webp?itok=svdukgNU)
Cyber attacks are occurring more frequently and banks, insurance companies, and other financial services firms are prime targets. Due to the nature of these businesses and the sensitivity of their data, financial firms are hit with approximately 300 times more cyber attacks than businesses in other industries.
![Social Engineering: How Attackers Exploit People's Vulnerabilities](/sites/default/files/styles/4_3_small/public/migration/images/9.28%2520-%2520Social%2520Engineering%2520Blog_1.jpg.webp?itok=1c7i60GQ)
A new report from the Information Security Forum (ISF) contains some fascinating insights into how hackers probe and exploit people's psychological vulnerabilities to gain access to corporate systems. From phishing to "whaling" (targeting high level executives) to "baiting" (offering something in return for credentials or information), hackers are using several tactics to gain a foothold. They also know the best time to deploy those tactics – at the end of the day, for example, when a person is tired and may not make the best decisions.
![Just How Secure is the Technology Sector?](/sites/default/files/styles/4_3_small/public/migration/images/924%2520Blog_3.jpg.webp?itok=dZzXDUA3)
Technology companies — along with their partner ecosystems — are some of the most targeted organizations when it comes to cyber-attacks. In 2018, enterprises invested an average of 3.5 million on cloud apps, platforms, and services — making the sensitive information held in those platforms a top target for hackers.