Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![Silicon Valley Bank Crisis - How Security and Financial Leaders Can Collaborate to Protect their Organizations](/sites/default/files/styles/4_3_small/public/2023/03/15/Silicon%20Valley%20Bank%20Crisis%20-%20How%20Security%20and%20Financial%20Leaders%20Can%20Collaborate%20to%20Protect%20their%20Organizations.png.webp?itok=1yHqkd3u)
How financial and security leaders can work together to protect their organizations in the wake of the recent crisis affecting Silicon Valley Bank (SVB).
![third party vendor risk management for financial institutions](/sites/default/files/styles/4_3_small/public/2023/03/02/third%20party%20vendor%20risk%20management%20for%20financial%20institutions%2C%20SIZED.jpg.webp?itok=4zogLtq9)
Learn how to automate and streamline the process for third-party vendor risk management at financial institutions.
![vendor risk management reporting](/sites/default/files/styles/4_3_small/public/2023/03/08/vendor%20risk%20management%20reporting.jpg.webp?itok=a795KLwC)
Presenting results is the key to showing the value of your vendor risk management efforts. These 7 reports will effectively communicate your wins.
![BitSight identifies thousands of organizations using Internet-facing and exposed webcams blog hero image](/sites/default/files/styles/4_3_small/public/2023/02/16/BitSight%20identifies%20thousands%20of%20organizations%20using%20Internet-facing%20and%20exposed%20webcams.jpg.webp?itok=R6D_uHcs)
Bitsight has identified thousands of organizations around the world using Internet-facing webcams and similar devices, finding many video and audio feeds susceptible to eavesdropping.
![US National Cybersecurity Strategy 2023](/sites/default/files/styles/4_3_small/public/2023/03/06/US%20National%20Cybersecurity%20Strategy%202023%2C%20SIZED.jpg.webp?itok=B_2Mncm1)
The U.S. government recently released a new National Cybersecurity Strategy, detailing recommendations and changes to ensure a safe and secure digital ecosystem. Here's our takeaways.
![How to Conduct a Cloud Security Audit: A 5-Step Checklist](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1722461929%2520%25281%2529_0.jpg.webp?itok=YO-UIv_V)
For the first time, cloud security breaches and incidents are more commonplace than on-premises attacks. According to the 2021 Verizon Data Breach Investigations Report (DBIR), in 2020, 73% of cyberattacks involved cloud assets, compared to only 27% in the previous year.
![Cybersecurity Board Report](/sites/default/files/styles/4_3_small/public/2023/02/23/Shutterstock_222195631%20%281%29.jpg.webp?itok=OJW9TsS4)
Learn what three key metrics can help you create a cybersecurity board report that tells a good story and resonates with your board.
![iso 27001 requirements vendor risk management](/sites/default/files/styles/4_3_small/public/2023/02/24/iso%2027001%20requirements%20vendor%20risk%20management.jpg.webp?itok=G6w3kWFF)
Learn what ISO 27001 controls apply to vendor risk management and how to successfully map them to your VRM framework.
![Tea leaves in a cup, representing that you need to interpret information](/sites/default/files/styles/4_3_small/public/2023/01/27/Reading%20Tea%20Leaves%2C%20SIZED.jpg.webp?itok=IuJ3gyex)
On the surface, the Bitsight Rating and associated Risk Vectors look self-explanatory, but there's an artistic element as well. In the case of Bitsight, that means having a thorough understanding of cybersecurity and drawing inferences from the data.
![Mylobot- Investigating a proxy botnet](/sites/default/files/styles/4_3_small/public/2024/03/27/Mylobot-%20Investigating%20a%20proxy%20botnet_0.jpg.webp?itok=RbLR15m8)
Mylobot is a malware that targets Windows systems, it first appeared in 2017. In this article, we'll focus on its main capability, which is transforming the infected system into a proxy.
![A Security Operations Center Report Template for Executive Buy-in](/sites/default/files/styles/4_3_small/public/migration/images/AdobeStock_168596068_1.jpeg.webp?itok=flBu9F6E)
A monthly or quarterly report is a great way to summarize a SOC’s performance and uncover insights for executive leadership. But as a security and risk manager or executive, what information should you request from the managers who report to you?
![Cybersecurity Controls Every Organization Needs in 2021](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_751366552_1.jpg.webp?itok=otMY67CO)
The cybersecurity controls used to manage an organization’s cybersecurity program in previous years will not work against bad actors targeting networks today. Organizations rely more on cloud computing technology, connecting their sensitive data to more third party networks and in turn expanding their attack surface.
![Cyber insurance guiding security program](/sites/default/files/styles/4_3_small/public/2023/01/10/Practitioner%27s%20Corner_%20Cyber%20Insurance%2C%20SIZED.jpg.webp?itok=S4MqJQp4)
While many organizations look at cyber insurance as a way to transfer risk and mitigate financial losses, the assessment process used by cyber insurers can help shape your security program for the better.
![system hacked](/sites/default/files/styles/4_3_small/public/2022/11/18/Shutterstock_1916985977%20%281%29.jpg.webp?itok=HLYjHJLd)
A study reveals the correlation between these security flaws and the likelihood of cybersecurity incidents. Learn more.
![BitSight Google Cloud](/sites/default/files/styles/4_3_small/public/2023/01/18/BitSight%2BGCloud_blog.png.webp?itok=cK_4Bi6H)
Bitsight is partnering with Google Cloud to provide customers with a centralized repository of Google Cloud questionnaires, certifications, and documentation, now available through Bitsight Vendor Risk Management. Learn more about the partnership in our blog.