Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![Life Under the California Consumer Privacy Act: What It Means for Cybersecurity](/sites/default/files/styles/4_3_small/public/2022/02/18/shutterstock_1353251855_1.png.webp?itok=1jCToicd)
The California Consumer Privacy Act (CCPA) is one of the most sweeping acts of legislation in the U.S. relating to the protection of personal consumer information collected by businesses. But what does CCPA mean for cybersecurity and risk leaders? In this post, we explore the key compliance requirements of the CCPA and what actions businesses need to take from both a data privacy and cybersecurity standpoint.
![New Orleans Suffers Friday the 13th Ransomware Attack](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1050436496_1.jpg.webp?itok=DzFuLQk8)
Friday the 13th of December proved to be a cybersecurity nightmare for the city of New Orleans -- and it’s not over yet. At around 5.00 a.m., “suspicious activity”, including evidence of both ransomware and phishing, was detected on the City’s network. Activity progressed throughout the morning until 11.00 a.m., when a cybersecurity incident was confirmed.
![How to Protect your Organization from the Emerging Deepfake Threat](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1464098960_1.jpg.webp?itok=Yha8x4eM)
Mimicking reality is the latest frontier of cybercrime and it’s a growing threat. Cyber criminals are increasingly deploying AI and machine learning to fool unsuspecting victims into believing that they’re seeing or hearing something that they’re not--and pulling off deepfake scams in the process.
![BitSight Predicts the Top 5 Cybersecurity Trends for 2020](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_689486338_1.jpg.webp?itok=qHp3J-B3)
Cyber-attacks have dominated the headlines in the past decade; wreaking havoc with systems, holding data to ransom, undermining public trust in corporations and governments, and causing untold financial damage.
![The DoD’s Cybersecurity Maturity Model Certification Draws a Line in the Sand for Third Party Risk](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_725365696_1.jpg.webp?itok=TytqDZmn)
Federal technology contractors hold the keys to our nation’s security in their networks, servers, and databases. Yet, recent incidents point to worrisome vulnerabilities that indicate increased cyber risk to defense contractors and the supply chain.
![Australian Companies Now Have 6 Months For APRA Compliance](/sites/default/files/styles/4_3_small/public/migration/images/bigstock---July----Canberra-Austra-276708157_1.jpg.webp?itok=NllxUk-X)
Early in 2019, unknown threat actors attempted to hack the Australian federal Parliament’s computer network and the servers used by every politician, staffer, and security officer in Parliament House. Authorities believe there is a strong chance this could have been executed by a state-based actor.
![How Healthcare Organizations Can Get Ahead of New and Worrisome Cybersecurity Developments](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_574043182_1.jpg.webp?itok=ryhZOJBc)
Cybersecurity is a priority for many organizations these days, but one sector of particular concern is healthcare.
![Guide: Fourth-Party Cyber Risk & Management](/sites/default/files/styles/4_3_small/public/migration/images/Fourth%2520party%2520blog%2520post_1.png.webp?itok=OWaBUUiV)
In today’s interconnected world, supply chains are growing exponentially. As a result, third-party risk has become a big focus for senior management. But what about the vendors that your suppliers rely on and the threat of fourth-party risk?
![How to Develop a Vendor Cyber Risk Management Framework](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_588813473_1.jpg.webp?itok=TRqqSHOe)
Third-party vendors are an essential part of today’s business ecosystem. A study by Gartner finds that, in 2019, 60% of organizations work with more than 1,000 third parties and those networks are only expected to grow.
![Why Bayer Chose BitSight](/sites/default/files/styles/4_3_small/public/migration/images/BAYER_1.png.webp?itok=D11R9vdN)
Companies must build a “trust and verify” strategy when it comes to managing third party risk. Requesting documentation about a supplier’s security performance is good – but how can you verify it? How can you continuously review performance?
![Forecasting and Advanced Analytics: Building a Solid Security Strategy For 2020](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_450875209_1.jpg.webp?itok=kS62fC-M)
2020 is not only the beginning of a new year, but the start of a new decade, and with it comes the dawn of a new era for the digital world. We’re now in the midst of the once far-off, “futuristic” time periods old books and movies used to dream about. But does your security performance management strategy match the functionality of today’s technology?
![BitSight Honored as CRN® Tech Innovator Award Winner](/sites/default/files/styles/4_3_small/public/migration/images/2019_CRN%2520Tech%2520Innovators_Winner_Social%2520Image_1.jpg.webp?itok=rUBjuOop)
In recognition of our groundbreaking innovation and true differentiation in serving the IT channel, we’re proud to announce that the Bitsight Peer Analytics solution has been selected as a winner in the CRN 2019 Tech Innovator Awards.
![Cyber-Attack on Indian Nuclear Power Plant Exposes Threat of “Snooping” Malware](/sites/default/files/styles/4_3_small/public/migration/images/nuclear%2520plant%2520breach_1.jpg.webp?itok=S5vxQxrD)
On October 20th, 2019, authorities in India confirmed that one of its nuclear power plants had been hacked. The malware attack on the Kudankulam Nuclear Power Plant (KKNPP), first noticed on September 4th, has since been attributed to the North Korean state-sponsored threat group known as Lazarus.
![Texas Senate Bill 820: New Regulation Takes Aim at Cyber Threats in Education Sector](/sites/default/files/styles/4_3_small/public/migration/images/Texas%2520bill%2520820%2520blog%2520post_1.png.webp?itok=Vi-Cj-ZV)
Schools and colleges are facing an alarming increase in cybersecurity incidents. Some hackers seek ransoms while others see value in scooping up personally identifiable information to sell to identity thieves.
![Cloud outsourcing poses new challenges for regulators and Financial Services](/sites/default/files/styles/4_3_small/public/migration/images/Strategic%2520cloud%2520outsourcing_EMEABlog_1.jpg.webp?itok=XpAY-Ml1)
Cyber risk and regulatory compliance are two sides of the same coin in the Financial Services sector. Together, they spur Financial Services companies to take action to protect customers, their business and the global financial ecosystem from the malicious cyber attacks or the risk of critical system failures.