Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![The Biggest Challenge for CISOs Isn't What You Think](/sites/default/files/styles/4_3_small/public/migration/images/AdobeStock_173503359-min_1.jpeg.webp?itok=tx89Vi7n)
The biggest challenge for CISOs in the next five years won’t be blockbuster malware, shadow IT, the explosion of connected devices, or even regulatory pressure.
![3 Ways to Avoid the Top Causes of Data Breaches](/sites/default/files/styles/4_3_small/public/migration/images/3%2520Ways%2520to%2520Avoid%2520blog%2520post-1_1.png.webp?itok=Ny6AlRDp)
As the number and costs of cyber-attacks and data breaches continue to rise, more money is being thrown at the problem. IDC projects that by 2022, organizations will spend $133.8 billion to protect their IT infrastructures against cybersecurity threats.
![Financial services in Asia Pac face regulatory driven scrutiny of cyber risk management](/sites/default/files/styles/4_3_small/public/migration/images/blog_apac_financial_services_regulations_1.jpg.webp?itok=qaqYjmeb)
The evolution of the technology environment and related security threats is so fast paced it often seems businesses and regulators are playing an endless game of catch-up.
![Get Ready For Ransomware Season](/sites/default/files/styles/4_3_small/public/migration/images/holiday%2520ransomware_1.jpg.webp?itok=lQ4z7W6Y)
As retailers and consumers across the country begin gearing up for the 2019 holiday shopping season, hackers are also preparing for the days between Thanksgiving and Christmas. And all signs point to ransomware as their preferred method of attack.
![Control and Accountability: The New Watchwords for Regulatory Compliance](/sites/default/files/styles/4_3_small/public/migration/images/control_accountability_blog_1.jpg.webp?itok=qkHuwdMy)
The regulatory environment is evolving rapidly as national and international regulatory bodies attempt to keep pace with changing business models, technology infrastructure and continuously escalating cyberthreats.
![Third-Party Vendor Risk Management for Financial Institutions](/sites/default/files/styles/4_3_small/public/2022/02/18/Third-Party%20Vendor%20Risk%20Management%20for%20Financial%20Institutions.png.webp?itok=9j-pJubH)
The nature of financial services necessitates global connections and vast third-party ecosystems, with connections to millions of users and devices. This makes financial services firms a favorite target for cyber criminals, accounting for a full 10% of global breaches in 2018.
![New Study: Why Cybersecurity Breach Survivors Are Your Firm’s Most Valued Asset](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1357654529-3_1.png.webp?itok=y87ZvMem)
No one wants to talk about their failures, especially in the cybersecurity realm where the stakes are high. But new insight from Symantec and Goldsmiths, University of London, finds that security professionals who have lived through a cybersecurity attack or breach could be the answer to protecting your organization against future threats.
![A Security Score vs. A Security Rating: What’s The Difference?](/sites/default/files/styles/4_3_small/public/migration/images/scorevsrating-stock-big_1.jpg.webp?itok=0TGcRhBA)
This post was originally published July 18, 2016 and has been updated for accuracy and comprehensiveness.
![BitSight Study: Just How Secure is the Business Services Sector?](/sites/default/files/styles/4_3_small/public/migration/images/Business%2520Services%2520Blog_1.jpg.webp?itok=DOtKZHgy)
Management consultants, accountants, public safety offices, marketing firms, and many more business and professional services organizations are high-value targets for cybercriminals due to the range of confidential client information they handle. Companies in this sector should all have solid security postures — and many do. But there’s still an alarming number of enterprises that do not.
![Airbus Incident Shines Spotlight on Third-Party Vendor Security Risks](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1319730824_1.jpg.webp?itok=SWXTMUgV)
2019 has been a year of high-profile attacks, and, as we predicted, it’s only getting worse. That’s certainly the case for Airbus.
![Financial Data Breaches 2019: Capital One, First American, Desjardins, More](/sites/default/files/styles/4_3_small/public/migration/images/AdobeStock_93365244-min-1_1.jpeg.webp?itok=svdukgNU)
Cyber attacks are occurring more frequently and banks, insurance companies, and other financial services firms are prime targets. Due to the nature of these businesses and the sensitivity of their data, financial firms are hit with approximately 300 times more cyber attacks than businesses in other industries.
![Social Engineering: How Attackers Exploit People's Vulnerabilities](/sites/default/files/styles/4_3_small/public/migration/images/9.28%2520-%2520Social%2520Engineering%2520Blog_1.jpg.webp?itok=1c7i60GQ)
A new report from the Information Security Forum (ISF) contains some fascinating insights into how hackers probe and exploit people's psychological vulnerabilities to gain access to corporate systems. From phishing to "whaling" (targeting high level executives) to "baiting" (offering something in return for credentials or information), hackers are using several tactics to gain a foothold. They also know the best time to deploy those tactics – at the end of the day, for example, when a person is tired and may not make the best decisions.
![Just How Secure is the Technology Sector?](/sites/default/files/styles/4_3_small/public/migration/images/924%2520Blog_3.jpg.webp?itok=dZzXDUA3)
Technology companies — along with their partner ecosystems — are some of the most targeted organizations when it comes to cyber-attacks. In 2018, enterprises invested an average of 3.5 million on cloud apps, platforms, and services — making the sensitive information held in those platforms a top target for hackers.
![Turning Business Unit Heads Into Security Management Leaders](/sites/default/files/styles/4_3_small/public/migration/images/920%2520Blog_1.jpg.webp?itok=XTYOWqWu)
The old adage “it’s hard to find good help these days” has never been more true than when talking about security management. The well-documented cybersecurity shortage is very real, and the long hours and pressure experienced by those who are in charge of security performance management is causing stress and burnout.
![BitSight Study: Healthcare Sector is Far Too Vulnerable to Cyber Threats](/sites/default/files/styles/4_3_small/public/migration/images/917%2520Blog%2520%25281%2529_1.jpg.webp?itok=BcJCXMnM)
Healthcare is under attack. Hospitals, doctors’ networks, insurance companies, and others are prime targets for hackers due to the valuable protected health information (PHI) they store and the vital role they play in our nation’s critical infrastructure.