Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![Identifying Unique Risks of Work from Home Remote Office Networks](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1056112217%2520%25281%2529_1.jpg.webp?itok=CSEeGyZQ)
During the period of March 2020, we looked at a sample size of 41,000 US-based organizations to understand the difference between corporate networks and Work From Home-Remote Office (WFH-RO) networks from a cyber-risk perspective.
![Optimize Your Vendor Onboarding Process With Security Ratings](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_439385911_1.jpg.webp?itok=ozlrkczh)
Third parties can play an essential role in your ability to grow your business and remain competitive. Of course, if you’re not careful, these trusted partnerships may introduce unwanted cyber risk into your organization. This is particularly true as more and more businesses are moving to mandated work-from-home models — because residential IPs account for more than 90% of all observed malware infections and compromised systems. With this widespread workforce shift, new vulnerabilities are being introduced both internally and within your third-party network, thereby increasing risk across your ecosystem as a whole.
![Collaboration Tools Expose the Remote Office to New Vulnerabilities](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_302508602_1.jpg.webp?itok=zda-wyQG)
As the COVID-19 pandemic sees millions of employees shift to a work-from-home model, collaboration tools like Zoom and Slack have never been more critical or popular. Zoom is currently experiencing a 378% year-over-year growth in its daily active user count and was downloaded 2.13 million times in a single day as lockdowns went into effect worldwide.
![Reduce the Risk in Your Digital Ecosystem](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1056112217_1.jpg.webp?itok=sZchxcyX)
Cyber risk reduction is emerging as one of the most significant issues organizations face when managing their cybersecurity. As digital ecosystems expand, it’s crucial that organizations have insight into their core digital assets and the level of risk present. To improve performance over time, it’s critical to have visibility into your attack surface across various environments. With as much as 75% of the workforce shifting to remote work in some industries, this visibility is more important than ever.
![Vendor Onboarding 101: Balancing Security and Speed](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1166819983_1.jpg.webp?itok=b7kiWTJx)
In today’s ever-evolving, competitive business climate, organizations are partnering with more and more vendors to ensure they’re as agile, flexible, and efficient as possible. Now, at a time when as much as 75% of the workforce is shifting to remote work in some industries, this is more true than ever — with organizations seeking to rapidly acquire new software and technology to help accommodate new business requirements.
![Government Teleworking Could Last for Months, Exacerbating Cyber Risk](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1110675746_1.jpg.webp?itok=bB0yp2Ux)
As federal government guidance on social distancing due to the COVID-19 pandemic is extended through April, a new reality is setting in for federal workers — a prolonged period of telework, even beyond the coronavirus crisis.
![Coronavirus Pandemic Leads to New and Evolving Cyber Threats](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_222984970_1.jpg.webp?itok=stQwlLIz)
Over recent weeks, the ongoing spread of the COVID-19 coronavirus has had a major impact on the global economy and how businesses operate as a whole. More and more organizations are moving to a mandated work from home (WFH) model to help limit the spread of the virus — introducing a variety of unique and constantly evolving challenges for security leaders when it comes to mitigating cyber risk.
![Coronavirus Pandemic Highlights Government Cyber Vulnerabilities](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_669226093_1.jpg.webp?itok=Uc-L7bZo)
As citizens adjust their daily lives to reduce the chances of catching or spreading COVID-19, the risks associated with the pandemic are extending beyond a national health and economic crisis. Cyberthreats, including phishing scams, spam, and other attacks against organizations are spiking by as much as 40% as bad actors seek to take advantage of global uncertainty and anxiety, according to new data from CNBC.
![Why Third-Party Risk Management Has Never Been More Important](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1088000534_1.jpg.webp?itok=_7KDdJeB)
Over recent weeks, the ongoing spread of the COVID-19 coronavirus has forced companies around the country to make difficult decisions about how they can do their part to protect their employees — as well as their communities as a whole.
![Lack of Cyber Metrics Hamper U.S. Ability to Respond to Cyberattacks](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1218735091_1.jpg.webp?itok=B59XqqBM)
As the nation struggles to come to terms with the coronavirus and questions linger around our readiness for such a pandemic, government leaders are already grappling with the next potential catastrophe — a major cyberattack against the U.S.
![Novel Coronavirus Brings New Challenges For Security Teams](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1643947495_1.jpg.webp?itok=BQ9JZ4Oe)
As the world wrestles with the spread of the COVID-19 coronavirus, many businesses are instituting new work from home (WFH) policies to keep employees safe and do their part to help halt the rate of infection. While remote work has long been a reality for many employees and businesses, remote work on such a large scale is frankly unprecedented and has the potential to open entirely new problems for security teams. It may make already challenging but essential work more difficult, and will require a careful reexamination of long standing policies, systems, and procedures.
![Hackers Target Defense Contractors in an Effort to Reach the Pentagon](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_508154416_1.jpg.webp?itok=FY6Q8FhS)
The Department of Defense (DoD) has one of the largest supply chains in the world, scaling to hundreds of thousands of different vendors and partners. Yet, these vital partners in our nation’s defense infrastructure pose a huge cyber risk.
![Joint Effort with Microsoft to Disrupt Massive Criminal Botnet Necurs](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_661115089_1.jpg.webp?itok=XlbsTP-G)
Since 2017 Bitsight has been working together with Microsoft’s Digital Crimes Unit (DCU) to understand the inner workings of the Necurs malware, its botnets and command and control infrastructure in order to take disruptive action against the threat, including reverse engineering, malware analysis, modules updates, infection telemetry and command and control updates and forensic analysis. This week, an action took place to disrupt all Necurs botnets, followed by mitigation and eradication actions.
![Could Hackers Target Healthcare Next with Coronavirus Scam?](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_608032916_1.jpg.webp?itok=yha_D4K8)
Cyber hackers are an opportune group of people, hunting like predators and shifting their approach as needed. And now, they’re leveraging the concern and — in some cases — hysteria about the coronavirus outbreak to advance their nefarious objectives.
![Government Cyber Alert Highlights Growing Threat to Utilities Sector](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1050436496-1_1.jpg.webp?itok=XMO4_Vx8)
In mid-February, the Cybersecurity and Infrastructure Agency (CISA) alerted owners and operators in all critical infrastructure sectors to review their cybersecurity programs. The alert came in the wake of a ransomware attack against an unnamed natural gas compression facility that resulted in a two-day shutdown of the facility’s operations.