Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![Trust Management Hub blog](/sites/default/files/styles/4_3_small/public/2024/07/25/trust-management-hub-blog-min.jpg.webp?itok=zIkpjSle)
Trust Management Hub gives GRC teams a centralized & scalable way to manage & share critical security questionnaires and documentation.
![crowdstrike timeline mystery hero](/sites/default/files/styles/4_3_small/public/2024/07/23/crowdstrike-blog.png.webp?itok=tAaVgKud)
Bitsight's analysis of the CrowdStrike outage and timeline mysteries.
![4 Important Vendor Risk Management Principles For Security Managers](/sites/default/files/styles/4_3_small/public/migration/images/The_4_Most_Important_Vendor_Risk_Management_Principles_For_Security_Managers_-_thumb_1.jpg.webp?itok=nTtpNWf5)
Organizations today aren’t single entities—they are interconnected networks of third parties. And while third party relations are critical for success in most businesses, they also leave data more vulnerable to exposure from bad actors. Because of this, vendor risk management (VRM) is becoming an even more important business practice.
![Groma-blog-hero](/sites/default/files/styles/4_3_small/public/2024/07/22/Groma-blog-hero.png.webp?itok=eFdYkFmA)
This post will focus on recent developments in Bitsight Groma.
![What Is Cybersecurity Compliance? An Industry Guide](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1159332316.jpg.webp?itok=2tK78-jI)
If you operate in specific sectors, cybersecurity maturity is more than a best practice, it’s a regulatory requirement. These regulations are complex and constantly changing. To help you better understand your organization's regulatory environment and the standards and controls they stipulate, let's break down key cyber compliance regulations by industry.
![Crowdstrike-outage-blog](/sites/default/files/styles/4_3_small/public/2024/07/19/Crowdstrike-outage-blog.png.webp?itok=aFkrdu8G)
We’re closely analyzing the cause of–and response to–the CrowdStrike global incident to better understand how organizations can understand and mitigate risk.
![KEV cutting room floor hero](/sites/default/files/styles/4_3_small/public/2024/07/12/KEV-cutting-room-floor-hero.png.webp?itok=cfJBjp-Z)
Curious about software vulnerabilities and their fixes? Check out my latest blog on KEV exposures and common weaknesses for surprising insights!
![Empty piggy bank to show cut budgets](/sites/default/files/styles/4_3_small/public/2023/06/30/Budget%20Scrutiny%2C%20SIZED.jpeg.webp?itok=p1fmoKSA)
Economic pressures push CISOs to justify resources and consolidate tech for data, operational, and cost efficiency. Bitsight aids with comprehensive risk data and solutions.
![The Impact of the Kaspersky Ban](/sites/default/files/styles/4_3_small/public/2024/07/08/The%20Impact%20of%20the%20Kaspersky%20Ban%20hero.png.webp?itok=s-Xf1UdO)
How will the prohibition of Kaspersky Lab, Inc. impact global users? Read our analysis of the prevalence of Kaspersky products used by organizations around the globe.
![NIS2 Requirements- Get a Handle on Critical Supplier Assessments](/sites/default/files/styles/4_3_small/public/2024/07/02/NIS2%20Requirements-%20Get%20a%20Handle%20on%20Critical%20Supplier%20Assessments.png.webp?itok=EEzpHRu6)
How do you determine who is a 'critical supplier'? Delve into practical strategies to identify crucial partners and ensure compliance with NIS2 requirements.
![Painted image of a poppy](/sites/default/files/styles/4_3_small/public/2024/06/18/Evaluating%20dependence%20on%20NVD_0.png.webp?itok=EYCAVUyl)
Learn about what the latest reduction in capacity in the NVD means for the state of vulnerabilities.
![Blog CloudSync Azure GCP Launch hero](/sites/default/files/styles/4_3_small/public/2024/06/17/Blog%20CloudSync%20Azure%20GCP%20Launch%20v2.png.webp?itok=-7dO794P)
As more IT resources shift to cloud service providers, it becomes increasingly complex to get a full digital footprint picture. See how Bitsight helps.
![Latrodectus hero 2](/sites/default/files/styles/4_3_small/public/2024/06/18/Latrodectus-hero-2.png.webp?itok=xpSzsyE2)
This article provides a technical analysis of Latrodectus, offering insights into its campaigns and victims up until Operation Endgame.
![A Vendor Risk Management Questionnaire Template](/sites/default/files/styles/4_3_small/public/migration/images/AdobeStock_79440695_1.jpeg.webp?itok=rvbYWLaf)
Digital relationships with third-party vendors increase opportunities for growth, but they also increase opportunities for cyberattacks — a recent study found that 61% of U.S. companies said they have experienced a data breach caused by one of their vendors or third parties (up 12% since 2016).