Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Evolution of AI: From Symbolic Reasoning to GPTs and Agentic Systems

It seems like Artificial Intelligence (AI) has suddenly appeared in everything, everywhere, all at once. What feels like “five minutes ago”, there was “pre-AI life”, and now we have AI assistants that speak like real people, apps that create images, music, and video from nothing, and AI agents that do work for us.

Meeting Security Standards Through Effective Penetration Testing Practices

These days, cyberattacks aren't just more common; they're smarter and far more costly. That's why companies can't afford to gamble with their security. Enter penetration testing (or pentesting). Done right, it's a crucial tool that helps organizations find weak spots before attackers do and proves they're meeting key security standards.

Hack to School: Top 10 Cyber Threats Facing the Education Sector in 2025

As students return to classrooms, a different kind of "back-to-school" activity is ramping up: Hack-to-School. Cybercriminals and nation-state actors are intensifying their focus on educational institutions. According to Bitsight Threat Intelligence, the education sector is now the third-most targeted industry by cyber threat actors, facing a wide range of persistent and emerging risks.

Nucleus Momentum Validated Across Three Industry Analyst Reports

It’s one thing for us to say Nucleus is changing how enterprises address vulnerability and exposure management. It’s another when three different analyst firms all say it, and at the same time. In recent weeks, Forrester, IDC, and GigaOm each published their latest market evaluations, recognizing Nucleus in all three. That’s rare validation in a market where many vendors don’t even make the cut for inclusion.

Report: Shadow AI Poses an Increasing Risk to Organizations

The use of “shadow AI” is an increasing security risk within organizations, according to a new report from Netskope. Shadow AI is a newer variant of shadow IT, in which employees use unauthorized technology without the knowledge of the IT department. This is generally driven by a desire for increased productivity rather than malicious motives, but employees are often unaware of the risks introduced by unauthorized tools.

Introducing proactive, AI-powered risk management that breaks the cycle of reactive risk

Risk doesn’t live in just one place—it comes from vendors, suppliers, partners, and from inside your business through processes, people, and systems. ‍ Managing that risk is often fragmented, too. Vendor reviews live in one system, internal issues in another, and leadership reports take hours to compile. And every new vendor, tool, or requirement contributes to another layer of risk.

Bitsight GIA Update: How Gen-AI and LLMs Get You Faster (and Better) Entity Mapping

Bitsight’s mission to keep evolving the capability of our data engine through AI enhancements hit a new milestone today. The latest addition is a new entity mapping capability added to Bitsight AI and the data engine, which uses GenAI agents to create more complete and consistent sets of identifiers for organizations scanned and added to Bitsight’s entity inventory.

What is an Enterprise Risk Retainer?

Organizations today are under pressure to effectively respond to acute risk events that can threaten financial stability, regulatory compliance, executive safety and stakeholder trust. Hear from Managing Director Nickolas Savage on the importance of getting the right support quickly, while maintaining cost efficiency and operational resilience.

Why Growing Tech Startups Keep Running Into Unexpected Expenses

You're probably across your burn rate, runway, and core operational costs. You've got projections, maybe even a part-time CFO. But if you're in the middle of growing a tech startup, there's a good chance you'll still run into expenses that weren't on your radar. It's not that you missed something obvious. It's just that building and scaling a tech business creates financial friction in places you don't expect until you're right in the middle of it.

Vanta Delivers: New AI-powered Capabilities to Help Security Teams Move Beyond Reactive Risk

AI-powered workflows and Vanta AI Agent extend to policy management, enterprise risk oversight, vendor monitoring, and Slack collaboration. Product announcements and demos debut at Vanta Delivers: AI-Powered Risk Management virtual event September 10.