Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![Building a Shadow IT Policy](/sites/default/files/styles/4_3_small/public/2024/01/11/Building%20a%20Shadow%20IT%20Policy.png.webp?itok=a3hTyprE)
Create a comprehensive policy that includes detection, reporting, and control measures to manage shadow IT.
![street crosswalk on capitol hill where new sec rules on cybersecurity are created](/sites/default/files/styles/4_3_small/public/2024/01/11/cyber%20exposure%20management%20meets%20the%20new%20sec%20reporting%20requirements.jpg.webp?itok=qOxQjISa)
Explore the impact of the SEC's new breach disclosure rules on CISOs and the crucial role of cyber exposure management in streamlining compliance and enhancing enterprise risk management.
![4 Ways to Minimize the Risk of a Third-Party Data Breach](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_739310431_1.jpg.webp?itok=UgdfAYOf)
Today, 59% of data breaches originate with third-party vendors. And, as globalization brings more interconnected supply chains, that number is anticipated to grow.
![5 Common Issues In Building An Information Security Management System](/sites/default/files/styles/4_3_small/public/migration/images/5_Common_Issues_When_Building_An_Information_Security_Management_System_-_thumb_1.jpg.webp?itok=7ZXoityN)
An information security management system (ISMS) is a structured approach used to better manage your company’s most critical data and information. It can be achieved by adopting an ISMS standard like ISO 27001 or NIST 800-53 and through a certification process. But integrating an information security management system at your organization can be fraught with issues and complexities. Below, we’ve outlined five issues you should avoid while building out your ISMS.
![5 Core Elements of a Risk-Based Cybersecurity Dashboard](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1100046194_1.jpg.webp?itok=d-jND-8O)
Curated cyber risk reports are essential to ensuring that security performance management information gets communicated effectively to the right stakeholders across your organization. Of course, reporting falls on a long list of ever-evolving responsibilities for security and risk managers.
![network security](/sites/default/files/styles/4_3_small/public/2021/11/14/Network%20Security.jpg.webp?itok=tPaFdqxG)
Network security monitoring tools are a critical component of any IT security toolkit.
![network security threats](/sites/default/files/styles/4_3_small/public/2021/11/14/Blog%205%20image.jpg.webp?itok=vA7OMuIQ)
Network security threats are constantly evolving, and right now we’re in the middle of a particularly challenging time. While big-name breaches like SolarWinds and others grab headlines, multitudes of smaller incidents continue to occur everyday, costing companies millions of dollars.
![Managing Hidden Risk Across Your Expanding Attack Surface](/sites/default/files/styles/4_3_small/public/2024/01/10/Managing%20Hidden%20Risk%20Across%20Your%20Expanding%20Attack%20Surface.jpg.webp?itok=r_iMGluH)
Shadow IT risks are growing—but that’s just the tip of the iceberg when it comes to hidden risks across today’s expanding attack surface.
![5 Shocking IT & Cybersecurity Burnout Statistics](/sites/default/files/styles/4_3_small/public/2022/02/18/AdobeStock_243272074-min-1_1.png.webp?itok=9Gx0xHvR)
No one should be surprised to learn that IT and cybersecurity jobs can be extremely stressful. Now, a convergence of trends has, in many cases, brought this stress to a breaking point.
![network segmentation cybersecurity](/sites/default/files/styles/4_3_small/public/2021/11/14/network%20segmentation.jpg.webp?itok=t0gFhE3B)
These days, we often hear the word “quarantine” in everyday conversations--but quarantining takes on a different meaning when it comes to protecting your network.
Often, when we discuss quarantining from a cyber security perspective we’re referring to network segmentation cyber security. But what is network segmentation, and is it the right approach for your organization? The answer to the first part is easy. The second is a bit more complicated.
Often, when we discuss quarantining from a cyber security perspective we’re referring to network segmentation cyber security. But what is network segmentation, and is it the right approach for your organization? The answer to the first part is easy. The second is a bit more complicated.
![ShadowIT-Hidden Risk-and the insights that drive action to reduce exposure](/sites/default/files/styles/4_3_small/public/2024/01/10/ShadowIT%20Hidden%20Risk%20and%20the%20insights%20that%20drive%20action%20to%20reduce%20exposure.jpg.webp?itok=nPkSrIV4)
Bitsight's Auto Vendor Discovery empowers teams to effortlessly uncover and navigate the complexities of third-party relationships, providing invaluable insights that drive actions, mitigate risks, and ensure a healthy program.
![Data Insights on AgentTesla and OriginLogger Victims hero banner](/sites/default/files/styles/4_3_small/public/2024/01/04/Data%20Insights%20on%20AgentTesla%20and%20OriginLogger%20Victims%20hero%20banner.jpg.webp?itok=bZXS5XQq)
AgentTesla (also known as OriginLogger) remains a prevalent commodity stealer, being daily distributed, mainly via email attachments
![5 Things a Security Manager Should Check Every Morning](/sites/default/files/styles/4_3_small/public/2023/04/25/5%20Things%20a%20Security%20Manager%20Should%20Check%20Every%20Morning.png.webp?itok=FUCmLgBh)
Here are five questions you should ask yourself as part of your morning cybersecurity checklist that will help to protect your organization.
![Introducing Automatic Vendor Discovery](/sites/default/files/styles/4_3_small/public/2024/01/08/Introducing%20Automatic%20Vendor%20Discovery.jpg.webp?itok=GKi3uCJg)
Vendor Discovery, the latest capability in Bitsight’s Third-Party Risk Management solution, instantly identifies third-party relationships.
![Bitsight Delivers Enhanced Analytics on IT Infrastructure Service Providers](/sites/default/files/styles/4_3_small/public/2024/01/07/Bitsight%20Delivers%20Enhanced%20Analytics%20on%20IT%20Infrastructure%20Service%20Providers%202-min.jpg.webp?itok=hFnAs1RR)
We are rolling out a new enhanced capability with innovative techniques to improve attribution of customer and corporate infrastructure associated with IT infrastructure businesses.