Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![SLP Denial of Service Amplification - Attacks are ongoing and rising](/sites/default/files/styles/4_3_small/public/2023/12/15/SLP%20Denial%20of%20Service%20Amplification%20-%20Attacks%20are%20ongoing%20and%20rising.jpg.webp?itok=vumMqV7w)
We build on our previous work and look into how threat actors are abusing SLP to launch reflection/amplification DDoS attacks, their evolution, and what targets are they focused on at the moment.
![As Cyber Insurance Claims Soar, Businesses Need to Demonstrate a Standard of Care](/sites/default/files/styles/4_3_small/public/migration/images/913%2520Blog_1.jpg.webp?itok=ArOQNWUr)
Hardly a day goes by without the emergence of a disturbing new trend in cyber crime or headline-grabbing hack. Hackers are getting smarter and threat vectors are constantly evolving. The escalating threat is forcing businesses to file more cyber insurance claims than ever. But are they taking the proactive steps necessary to boost their security postures and become a better underwriting risk?
![3 Critical CISO Roles and Responsibilities](/sites/default/files/styles/4_3_small/public/migration/images/Thumb_-_3_Critical_CISO_Roles_And_Responsibilities_1.jpg.webp?itok=iTpv-8fM)
A chief information security officer (CISO)'s roles and responsibilities include many hats in the realm of cybersecurity — but they are primarily responsible for translating complex business problems into effective information security controls.
![cybersecurity scanning](/sites/default/files/styles/4_3_small/public/2021/11/18/cybersecurity%20scanning.jpg.webp?itok=36Ri2W50)
Taking back control of your network in light of hackers’ growing sophistication can be time-consuming. Even well-established organizations with money to spend on solid cybersecurity programs are still falling victim to some of the new sneaky breach attempts, as seen with this year's ransomware attacks.
But as your digital infrastructure expands, understanding where cyber risk lies hidden can be challenging. In this increasingly diverse environment, your security team ends up buried in a sea of data and alerts — and may end up missing something important. They are also hopping between multiple tools and lack a complete picture of your company’s security posture.
Rather than play whack-a-mole with threats, here are three reasons you should focus on attack surface scanning to mitigate risk.
But as your digital infrastructure expands, understanding where cyber risk lies hidden can be challenging. In this increasingly diverse environment, your security team ends up buried in a sea of data and alerts — and may end up missing something important. They are also hopping between multiple tools and lack a complete picture of your company’s security posture.
Rather than play whack-a-mole with threats, here are three reasons you should focus on attack surface scanning to mitigate risk.
![Google Bitsight Blog thumbnail](/sites/default/files/styles/4_3_small/public/2023/12/12/Google_Bitsight_Blog_thumbnail.png.webp?itok=7BclTBqI)
Bitsight and Google have collaborated to study global organizational performance across cybersecurity controls in the Minimum Viable Secure Product (MVSP) framework.
![3 Attack Vectors That Lead to Cybersecurity Breaches](/sites/default/files/styles/4_3_small/public/migration/images/3_Attack_Vectors_That_Lead_To_Cybersecurity_Breaches_-_thumb_1.jpg.webp?itok=MvnqRL5T)
When we talk about cybersecurity events, we often discuss “the three principles of security” — which can be abbreviated as “CIA”:
![quantitative risk](/sites/default/files/styles/4_3_small/public/2022/11/11/shutterstock_758356729.jpg.webp?itok=LaIFQMW_)
Quantitative risk assessments in cybersecurity draw on data and analytics to help you understand the probability of risk and inform strategic management decisions.
![healthcare vendor risk management](/sites/default/files/styles/4_3_small/public/2023/02/07/healthcare%20vendor%20risk%20management.jpg.webp?itok=M4OX6k1V)
Delivering medical services involves hundreds of third-party vendors. We explore the criticality of healthcare vendor risk management and how organizations can overcome common challenges.
![A View into the Dark Web](/sites/default/files/styles/4_3_small/public/migration/images/Dark_Web_Blog_Post_large_1.jpg.webp?itok=A_7k1zjU)
There is a parallel universe in the cyber world known as the “Dark Web.” It’s a part of the Internet inaccessible via standard browsers or search engines, and it’s where cyber criminals share botnet kits, trade bitcoins, and recruit other hackers to carry out attacks. Over the years, the “Dark Web” has also provided an anonymous marketplace for criminals to sell information stolen from data breaches. An example is from 2015, when nearly 10GBs of data including account details and passwords for some 32 million users of Ashley Madison, were posted on the dark web.
![benefits of successful vrm](/sites/default/files/styles/4_3_small/public/2022/12/13/benefits%20of%20successful%20vrm.jpg.webp?itok=PnELNEL3)
Traditional vendor risk management methods fail to capture new and evolving risks. Learn how a better approach to VRM can benefit your organization.
![Introducing Bitsight Portfolio Risk Analytics](/sites/default/files/styles/4_3_small/public/2023/12/04/Introducing%20Bitsight%20Portfolio%20Risk%20Analytics.jpg.webp?itok=yHNLrdkI)
See risk, drive action across your entire vendor portfolio.
![Cybersecurity News: The 15 Best Places To Get Great Info](/sites/default/files/styles/4_3_small/public/migration/images/Cybersecurity_news_newspaper_thumbnail_1.jpg.webp?itok=ECwCsjic)
Reading the top cybersecurity blogs is, of course, one of the best ways to stay up on the latest news in the security industry. But while these niche blogs do often address news stories, most often they’re doing so while also interjecting their own opinions. And sometimes you just need the straight, unbiased facts.
![BitSight Ratings Tree, person working on laptop utilizing the ratings tree](/sites/default/files/styles/4_3_small/public/2022/06/09/Reflect%20your%20Security%20Posture%20-%20Ratings%20Tree%20Blog.jpg.webp?itok=kTCkFv27)
The Bitsight Ratings Tree gives you insight into the different portions of your business to identify gaps and weaknesses in your program performance.
![external attack surface management - bitsight](/sites/default/files/styles/4_3_small/public/2023/08/21/Attack%20surface%20-%20%20bitsight.jpeg.webp?itok=Cf5lazLD)
Your attack surface is expanding everyday. Learn how external attack surface management can help you understand what you’re up against and inform remediation.
![Report to the Board Effectively With Financial Quantification](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1578659503.jpg.webp?itok=i7DnWPwh)
As the digital transformation of enterprises continues to accelerate, cyber risk remains a top concern for business leaders. But cyber risk is often thought about in technical terms as opposed to business terms — making it more important than ever for security leaders to educate their board and other non-technical stakeholders on what cyber risk really means to their organization.