Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![Mitigating Risk in Your Expanding Digital Ecosystem](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1160196997_1.jpg.webp?itok=ULBeLJl9)
As time goes on, organizations are taking on more and more new digital transformation initiatives to become increasingly agile and boost productivity — dramatically transforming the number of digital touchpoints employees interact with on a day-to-day basis.
![FBI Alerts Companies of Cyber Attacks Aimed at Supply Chains](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1243021015_1.jpg.webp?itok=y99dVI45)
Earlier this month, ZDNet broke the news that the FBI had sent a cybersecurity alert to the U.S. private sector warning of an ongoing hacking campaign against supply chain software providers. According to the FBI, hackers are attempting to infect upstream companies — particularly those in the energy sector — with the Kwampirs malware, a remote access trojan (RAT).
![BitSight Partners with OneTrust Vendorpedia to Offer Advanced Third-Party Risk Monitoring](/sites/default/files/styles/4_3_small/public/migration/images/onetrust%2520partnership_1.png.webp?itok=Vz-hUGM9)
When it comes to monitoring the third-party cyber risk associated with vendors, suppliers, and others, companies and organizations all over the world rely on Bitsight and OneTrust Vendorpedia. When used together, the two platforms empower third-party risk management teams with enhanced vendor visibility, rich monitoring capabilities, and increased automation throughout the vendor risk management lifecycle.
![Get Ahead of the Quantum Computing Security Threat](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_707534518_1.jpg.webp?itok=9EXFBA7s)
Quantum computing has the ability to change the world, both for better and worse, and while it may be far off in the future, security teams need to start preparing for the new reality it will usher in.
![BitSight’s John Kelly Recognized by CRN as a 2020 Channel Chief](/sites/default/files/styles/4_3_small/public/2022/07/28/CRN%20channel%20chief%202020.png.webp?itok=ussqrxOr)
Bitsight is proud to announce that John Kelly, Bitsight’s vice president of global channel sales, has been named to CRN’s 2020 Channel Chiefs list. The annual award recognizes an elite group of IT channel leaders who drive the channel agenda and evangelize the importance of channel partnerships.
![ElevenPaths CyberSecurity Report Outlines Cyber Risk Ratings by Sector](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1096465133_1.jpg.webp?itok=3PxCiRhW)
ElevenPaths, Telefonica’s Cybersecurity Unit, recently released a new report that summarizes the latest cybersecurity insights from the second half of 2019 — covering everything from relevant incidents and vulnerabilities to cyber risk ratings by sector. The information presented is mostly based on the collection and synthesis of internal data that has been contrasted with public information from high-quality sources, including Bitsight Security Ratings.
![Employee Spotlight](/sites/default/files/styles/4_3_small/public/2022/02/18/employee%2520spotlight%2520banner_13.png.webp?itok=WGk1kwQh)
What do you do at Bitsight and when did you start?
![New Study Reveals Cybersecurity Risks in the World’s Largest Airports](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1189545343_1.jpg.webp?itok=aKYJ_nXB)
Back in 1990, Hollywood producers imagined a complex plot in which an army of mercenaries with malicious intent hack into and take over the air traffic control system at Washington Dulles International Airport. The result was the classic movie, Die Hard 2.
![New Windows Vulnerabilities Highlight Patch Management Challenges](/sites/default/files/styles/4_3_small/public/2022/02/18/shutterstock_337846166_1.png.webp?itok=KMky4QwR)
For anyone in IT (and even home computer users), Microsoft’s monthly “Patch Tuesday” is an important part of their cyber hygiene routine. This month’s update proved to be a particularly critical one.
![FFIEC IT Handbook Updates: Business Continuity Is 2020 Focus](/sites/default/files/styles/4_3_small/public/migration/images/FFIEC_IT_Handbook_Updates_Business_Continuity_Is_2020_Focus_1.jpeg.webp?itok=aJm0WC0j)
In November 2019, the Federal Financial Institutions Examination Council (FFIEC) released an update to the Information Technology Examination Handbook (IT Handbook). This handbook is a guide for examiners at its member agencies, which include the FRB, FDIC, NCUA, OCC, and CFPB.
![Windows 7 End of Life: What Organizations Are Using the Now Outdated OS?](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_6587947_1.jpg.webp?itok=T4MZZL_P)
This week, Microsoft ended support for the Windows 7 operating system. Among other implications, Microsoft will no longer issue security patches for the nine-year-old OS. Any organization relying on the OS moving forward could be susceptible to a security issue, attack or data breach unless they purchased extended support from Microsoft.
![Employee Spotlight](/sites/default/files/styles/4_3_small/public/2022/02/18/employee%2520spotlight%2520banner_13.png.webp?itok=WGk1kwQh)
I am on the technical research team and I manage the data breach team. We have about five people in Lisbon that record breaches that you see in the news and that we request through the Freedom of Information Act (FOIA). I approve their work, and I send FOIA requests to various attorney generals’ offices for breach notifications that they get. I do those requests myself, and the team records them into the Bitsight portal.
![Businesses Must Prepare Now for the Growing Cybersecurity Cold War](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_82895713_1.jpg.webp?itok=UrrcWa_4)
Each January, cybersecurity pundits busily fill the airwaves with their predictions for the year ahead. There’s much to think about. However one trend is particularly troubling for U.S. and European businesses – an intensification of a new cybersecurity “cold war.”
![Tensions with Iran Could Have Cybersecurity Ramifications for U.S. Businesses](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_761940757_1.jpg.webp?itok=gN1C10YT)
Rising tensions in the Middle East in the wake of the killing of General Qasem Soleimani, the head of Iran’s military Quds Forces, has U.S. troops on high alert.
![Most Urgent CISO Skills 2020: Reporting, Avoiding Burnout, More](/sites/default/files/styles/4_3_small/public/migration/images/AdobeStock_114644268-min-1_1.jpeg.webp?itok=9eufqWIJ)
Since the creation of the first CISO role about 25 years ago, the job has changed dramatically. What was once an uncommon position has quickly become standard, with the majority of companies including a cybersecurity-specific role in their C-suites.