Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![resilience framework](/sites/default/files/styles/4_3_small/public/2022/03/08/shutterstock_1997301182.jpg.webp?itok=8tI09jTU)
What is a cyber resilience framework? Learn how your organization can better prepare for, respond to, and recover from a cyber attack.
![soc 2 for third party risk management](/sites/default/files/styles/4_3_small/public/2023/05/04/soc%202%20for%20third%20party%20risk%20management.jpeg.webp?itok=aBfh4f6r)
What is a SOC 2 report and why is it essential in due diligence and vendor risk management programs? Here's what you need to know.
![what is zero trust](/sites/default/files/styles/4_3_small/public/2023/04/27/what%20is%20zero%20trust.jpg.webp?itok=hUIK6yl0)
Learn the basic principles of Zero Trust and how to apply them to your third-party risk management program to create more secure remote access connections.
![A Mere Five Percent of Vulnerable Enterprises Fix Their Issues Every Month- How to Help Them Do Better](/sites/default/files/styles/4_3_small/public/2023/06/22/A%20Mere%20Five%20Percent%20of%20Vulnerable%20Enterprises%20Fix%20Their%20Issues%20Every%20Month-%20How%20to%20Help%20Them%20Do%20Better.jpg.webp?itok=xOQwZhwr)
People’s perception of your cyber risk will outweigh its actual performance. And when trust in cybersecurity takes a nosedive, it can make a big dent in your financials. Learn how to prove protection and build trust with three key stakeholder groups.
![Vulnerability alert](/sites/default/files/styles/4_3_small/public/2023/04/26/Vulnerability%20alert-min.jpg.webp?itok=PREnq-Uj)
Researchers from Bitsight and Curesec have jointly discovered a high-severity vulnerability — tracked as CVE-2023-29552 — in the Service Location Protocol (SLP).
![expanding into cyber risk management](/sites/default/files/styles/4_3_small/public/2023/04/26/Steve-cyber-risk-management-min.jpg.webp?itok=_v-idgUP)
Our strategic direction is bolstered by an expanded partnership with Moody’s Corporation, enhanced Third-Party Vulnerability Detection & Response capabilities, and an improvement to our proprietary ratings algorithm.
![bitsight rating algorithm update](/sites/default/files/styles/4_3_small/public/2023/04/19/Header_RAU.png.webp?itok=6ZE8BbXS)
We have made several adjustment to continue to provide Bitsight users with the best external indicator of the performance of cybersecurity controls.
![Panel discussion BitSight RSA](/sites/default/files/styles/4_3_small/public/2023/04/07/BitSight%20%26%20RSA%202023%2C%20SIZED.jpg.webp?itok=VuRSUSeG)
At the upcoming RSA Conference, Bitsight’s Derek Vadala will moderate a panel to explain new cybersecurity disclosure requirements and how timely, consistent, and informative disclosure can benefit companies in the marketplace.
![mobile application protection](/sites/default/files/styles/4_3_small/public/2023/04/05/mobile%20application%20protection.jpg.webp?itok=E9D5NMqW)
What risks do mobile apps present to your business and how can you get ahead of these threats?
![8 Examples of Dangerous Ransomware](/sites/default/files/styles/4_3_small/public/migration/images/8%2520types%2520of%2520ransomware%2520blog%2520post%2520image_2.jpg.webp?itok=4ncgyjsL)
The threat of ransomware has been increasingly prevalent, especially within the high-stakes industries like healthcare and those involved in the election.
![Tofsee Botnet: Proxying and Mining](/sites/default/files/styles/4_3_small/public/2023/03/27/Tofsee-Botnet.png.webp?itok=azUkeB8r)
Bitsight has recently observed a 15-year-old modular spambot called Tofsee being distributed by PrivateLoader (ruzki), a notorious malware distribution service we also closely monitor.
![What are Cyber Security False Positives & How To Prevent Them](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1840324507_0.png.webp?itok=O12SHPDH)
Imagine you've alerted your IT team to a critical infrastructure error plaguing your network. You ask them to drop their current work and focus on immediate remediation of this detected vulnerability. After further investigation, however, it is found to be a false positive.
![4 Things to Know About FISMA](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1243021015%2520%25281%2529_1.jpg.webp?itok=FWzy_nsS)
Recently we wrote about the top cybersecurity frameworks to reduce cybersecurity risk, and the Federal Information Security Management Act (FISMA) certainly belongs in that list. But what is FISMA? Who does it apply to? Why is it so important?
![Practical advice to secure your expanding attack surface](/sites/default/files/styles/4_3_small/public/2023/03/21/Practical%20advice%20to%20secure%20your%20expanding%20attack%20surface.png.webp?itok=orBunXpe)
Bitsight published research identifying exposed webcams. In light of that, Orgs must develop an understanding of how to handle the expanding attack surface.
![Vendor lifecycle management process](/sites/default/files/styles/4_3_small/public/2023/03/16/vendor%20lifecycle%20management%20process%2C%20SIZED.jpg.webp?itok=Sdh_-K8E)
The vendor lifecycle management process involves understanding and remediating third-party risk at every stage of the relationship, from onboarding to offboarding.