Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![BitSight Is A Partner for Cybersecurity In Law Enforcement](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_657163924_1.jpg.webp?itok=jba_5rYp)
You can tell a lot about someone by the company they keep, and the same goes for your security ratings partner. All security ratings are not created equal.
![How To Prevent Organizational Data Leaks In 2021](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_243468685_1.jpg.webp?itok=MgvK4om6)
It’s every security manager's worst nightmare. A member of the IT department reaches to alert that malicious software has been detected on an internal network, and the hacker potentially has access to layers of sensitive data. In the following days and weeks of remediation, locating an access point, and reinforcing cybersecurity measures, security managers often ask themselves, “could this data leak have been prevented?”
![Three Things You Should Ask Your Security Ratings Partner](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1820093804_1.jpg.webp?itok=kpOlHghv)
Bitsight was recently named a Leader in The Forrester New Wave™: Cybersecurity Risk Rating Solutions, Q1 2021. As the creator and largest vendor by market presence in the category, we were honored to be recognized and to be the only vendor recognized for having differentiated product roadmap and go-to-market strategy.
![The Three T’s Behind Successful Enterprise Risk Management: Team, Technique, and Tools](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_796560889_1.jpg.webp?itok=XMbHsh5k)
Despite the best efforts from security and risk leaders, it can be extremely difficult to establish an efficient and effective enterprise risk management plan. As with anything that requires buy-in from the executive level, there has to be defined goals and clear paths the security team will take to make investments in their program feel worth it.
![How to Measure Cybersecurity Risk Across Your Digital Ecosystem](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_514749169_1.jpg.webp?itok=tC86_yYZ)
Cyber risk is everywhere. As organizations become increasingly interconnected — across business units, geographies, subsidiaries, remote offices, and third-party networks — the digital ecosystem is expanding rapidly. And this increased attack surface introduces a variety of new and evolving vulnerabilities.
![How CISOs Can Use Authority To Strengthen Supply Chain Cyber Security](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_771480601_1.jpg.webp?itok=h_cwnsKs)
The SolarWinds supply chain attack did more than just create cybersecurity problems for businesses and government agencies – it has had a strong impact on the mindset of CISOs. Already under stress, the incident further dispirited many CISOs who continually face escalating cyber threats. The SolarWinds hack was the latest – and biggest – shot across the bow.
![4 Must-have Best Practices for Better Vendor Risk Management](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1421446100_1.jpg.webp?itok=_ZCHFpoo)
Vendor risk management is top of everyone’s mind in light of the recent SolarWinds supply chain attack and concerns around weak points in the COVID-19 vaccination supply chains. Both exemplify the need for organizations of all types to take steps to fortify their vendor risk management processes.
![The BitSight Team Answers Your Questions About The SolarWinds Hack](/sites/default/files/styles/4_3_small/public/migration/images/SolarWinds_BitSightAnswersQuestions_BlogPost_1.png.webp?itok=MkFhbGeg)
The SolarWinds hack, discovered in late 2020 when FireEye announced it had been targeted through a third party vulnerability, has now become one of the most widespread and impactful supply chain attacks in history.
![Common Cybersecurity Vulnerabilities and Exposures to Pay Attention to in 2021](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1094704532_1.jpg.webp?itok=D0HA3CrI)
The SolarWinds supply chain attack discovered in late 2020 was a wakeup call for security managers across all industries. The hack is shaping up to be one of the most impactful attacks against a critical supply chain partner in history.
![Ransomware Emerges as Most Destructive Cybersecurity Trend of 2020](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_667910359_1.jpg.webp?itok=PujeePlP)
As if the COVID-19 pandemic wasn’t bad enough, the unpredictable events of 2020 created the perfect storm for a huge escalation in ransomware attacks.
![The Big Data Breaches of 2020: What Happened and What Did We Learn?](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_218372422_1.jpg.webp?itok=hSp_Bj_y)
Not to be forgotten during the chaos that was 2020 were the massive cybersecurity breaches that directly impacted some of the country’s largest businesses and their customers. Let’s take a closer look at four of the big data breaches of 2020 — and what we can learn from these incidents to avoid a repeat of similar events in 2021.
![The Financial Impact of SolarWinds Breach](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_755847970_2.jpg.webp?itok=7n3eVAke)
The SolarWinds breach is already one of the most significant cybersecurity incidents ever. And as with any unprecedented cyber event, this will have long-term effects on the way businesses and government consider their security programs. While many questions remain unanswered, the SolarWinds impact on the insurance sector has become clearer after an analysis we’ve completed with one of our partners. So, what should we expect the financial impact of SolarWinds on cyber insurers? And how can cyber insurers quantify a breach of this scale in the future?
![The Financial Impact of SolarWinds Breach](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_755847970_2.jpg.webp?itok=7n3eVAke)
The SolarWinds breach is already one of the most significant cybersecurity incidents ever. And as with any unprecedented cyber event, this will have long-term effects on the way businesses and government consider their security programs. While many questions remain unanswered, the SolarWinds impact on the insurance sector has become clearer after an analysis we’ve completed with one of our partners. So, what should we expect the financial impact of SolarWinds on cyber insurers? And how can cyber insurers quantify a breach of this scale in the future?
![Is Single Sign-On Secure? SSO Benefits for Remote Work](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1341139622_2.jpg.webp?itok=_x5HUMlj)
Remote work has always introduced unique and evolving cyber risks. In our “new normal” operating environment, where entire workforces have gone remote, IT security teams are facing an unprecedented challenge.
![2021 Cybersecurity Trends: BitSight Predicts the Top 3](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1814356268_1.jpg.webp?itok=XYqpH1va)
2020 was a transformative year that blew all predictions out of the water. As we look ahead to 2021, we will continue to see the repercussions of this year’s events.