Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![How Secure is that Third Party Mobile App?](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-Hand-using-phone-with-centrali-231266215_1.jpg.webp?itok=zCAR72Rw)
In a world where business is increasingly conducted on mobile devices, it is imperative that organizations offer mobile applications to serve their customer base. In fact, for many businesses, mobile applications are one of the primary channels used to interact with customers and to sell products and services.
![third party data breach](/sites/default/files/styles/4_3_small/public/2023/06/06/third%20party%20data%20breach.jpeg.webp?itok=OpkVMLhJ)
Third parties may have weaker security controls than the organizations they provide services to. Learn how to prevent a third party data breach.
![cybersecurity baseline](/sites/default/files/styles/4_3_small/public/2023/06/05/cybersecurity%20baseline.jpeg.webp?itok=ZD1qDb6M)
Let’s look at how you can establish a cybersecurity baseline that works for your unique risks, industry, and business.
![The Importance of Continuous Improvement in Security Performance Management](/sites/default/files/styles/4_3_small/public/migration/images/bigstock--202892632_1.jpg.webp?itok=NCBg2BSz)
When it comes to managing their organization’s cybersecurity performance, security and risk leaders must take a risk-based, outcome-driven approach. They can do so through targeted measurement, continuous monitoring, and detailed planning and forecasting in an effort to measurably reduce cyber risk.
![SOC Cyber Vulnerability Awareness](/sites/default/files/styles/4_3_small/public/2023/04/13/security%20operations%20center.jpg.webp?itok=WpC19SUq)
To be effective as a security leader you must find ways to help your SOC teams improve cyber vulnerability awareness and time to remediate. Let’s explore how.
![New vulnerability discovered by Bitsight can lead to dos attack](/sites/default/files/styles/4_3_small/public/2023/05/26/New-vulnerability-discovered-by-bitsight-dos-attack.jpg.webp?itok=14z66npl)
The other week, Bitsight released a piece of high-profile research alerting the public to a high-severity vulnerability. Here’s a summary of what happened and why it matters.
![digital infrastructure, IT worker in a server room](/sites/default/files/styles/4_3_small/public/2023/05/19/Digital%20Infrastructure%20SIZED.jpg.webp?itok=mqVWwSY3)
Learn how to reduce exposure and manage cybersecurity risk across your expanding digital infrastructure.
![How to Introduce Information Security Risk Assessment Methodology](/sites/default/files/styles/4_3_small/public/migration/images/How_To_Introduce_Information_Security_Risk_Assessment_Methodology_To_Your_Company_-_thumb_1.jpg.webp?itok=3mC6QCQQ)
Today, performing information security risk analysis is an accepted part of managing any business, and it’s something most CEOs and board members take very seriously. They don’t just want to “check a box” for information risk management—they understand that their ability to manage risk adequately is a fundamental part of their long-term success. What’s more, they want to meet the standards of care that similarly-situated, like-minded organizations are meeting.
![IoT Cybersecurity: How Your Organization Can Tame the Wild West](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1462012349_0.png.webp?itok=cnzO3Eiz)
From sensors on the factory floor to those that guide autonomous vehicles, the Internet of Things (IoT) is transforming how we live and work. Over the coming years, IoT will continue to change our world, with the number of connected devices expected to grow from 13.8 billion units in 2021 to 30.9 billion by 2025.
![Is Your Cyber Security Communication Strategy Effective?](/sites/default/files/styles/4_3_small/public/migration/images/Is%2520your%2520communcation%2520effective%2520blog%2520post%2520image_1.jpg.webp?itok=YHyZ6K3j)
One of the more challenging aspects of third party risk management is effectively communicating risk. Often the risks posed by vendors are highly technical, and it can be tempting to simply put together a slide or list to review with business owners, executives or board members. But this can often create an obstacle to buy in, as few people have the expertise to understand what these risks mean.
![Data exfiltration, continuous monitor, prevent risk](/sites/default/files/styles/4_3_small/public/2022/07/28/data%20exfiltration%20sized.jpg.webp?itok=B9Et2r1S)
Data exfiltration is the unauthorized transfer of data from a host device, such as an application, database, or server. Here’s how you can prevent it.
![IT Security Manager Responsibilities: Oversight, Reporting, Personnel Management](/sites/default/files/styles/4_3_small/public/migration/images/IT_Security_Manager_Responsibilities_1.jpeg.webp?itok=e1RMqFiD)
The role of IT security manager, information security manager, or cybersecurity manager will vary depending on a number of factors — industry, business size, network sophistication, and so on. However, a person in this role can expect to be held to some or all of the following information security manager responsibilities:
![Template - Everything you Need to Craft a Supplier Risk Management Plan.jpeg](/sites/default/files/styles/4_3_small/public/2022/02/02/Template%20Everything%20you%20Need%20to%20Craft%20a%20Supplier%20Risk%20Management%20Plan.jpeg.webp?itok=3Mm9sAEL)
Third-party vendors are a vital part of your business ecosystem. But if you’re not careful, these companies can introduce cyber risk. The SolarWinds supply chain hack is a notable example of the jeopardy that even the most trusted partnerships can yield.
![cybersecurity ecosystem](/sites/default/files/styles/4_3_small/public/2023/05/08/Cybersecurity%20Ecosystem%2C%20SIZED%20%281%29.jpg.webp?itok=cL3Z26yW)
Learn how to secure your expanding cybersecurity ecosystem, including your supply chain.
![5 Keys to Building a Scalable VRM Program](/sites/default/files/styles/4_3_small/public/2023/06/29/Scalable%20VRM%20blog.jpg.webp?itok=HaU__r94)
Learn how to centralize, automate, and streamline your VRM process to manage hundreds of vendors as effectively as you manage ten.