Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI Is Not the Destination-It's the Catalyst: Inside Bitsight's Vision for Third-Party Risk Management

A new era in third-party cyber risk and exposure management is underway, one that operates in real time, informed by intelligence and scaled by automation. This shift wasn’t feasible even a few years ago. The scale, speed, and complexity of today’s threat landscape—spanning thousands of vendors, assets, and attack vectors—demand more than human capacity can manage. Artificial Intelligence is the catalyst making this new model possible.

What's new in Riscosity: August 2025

Here at Riscosity, we believe in making our users’ lives as easy as possible when using our product. Whether users are running scans, triaging results, or viewing reports, the workflows must be intuitive and a seamless part of users’ own environments. To that end, we have finished rounding out our comprehensive support for ticketing system integrations by adding Asana and Linear into the fold.

Evolving Security Frameworks: From Compliance Checklists to Intelligence Engines

For years, security frameworks have served as essential tools for aligning cybersecurity practices, but they’ve also come with limitations. Designed primarily for compliance, many frameworks are rigid by nature, sometimes to the extent of being a checklist, making them ill-suited for today’s dynamic risk environments. But the threat landscape has evolved, and so too must our approach.

Akira Ransomware Exploits SonicWall SMA100 Vulnerabilities: What You Need to Know

A newly surfaced set of vulnerabilities in the SonicWall SMA100 series appliances has captured the attention of cybersecurity professionals. While SonicWall has released patches for CVE-2025-40596 through CVE-2025-40599, and media reports point to a surge in Akira ransomware attacks targeting SonicWall SSL VPN infrastructure, CISA has not formally confirmed exploitation of these specific vulnerabilities by Akira at this time.

Announcing Secure Data Exchange for Agentic AI

PwC recently did an AI agent survey where they found the following: This all sounds great, right? For many reasons it is, but agentic AI creates a challenge of visibility for organizations into how AI agents are communicating with each other and external third-party vendors. Imagine a multitude of AI agents autonomously exchanging data across a complex mesh of third-party vendors and applications.

Kovrr's CRQ Dashboard Upgrade Unifies the Full Picture of Cyber Risk

‍ ‍With the continuously expanding influence that cybersecurity has in determining an organization's financial and operational resilience, cyber risk quantification (CRQ) has steadily become a foundational component of any robust cyber governance, risk, and compliance (GRC) program.

Framework Intelligence

Tired of spending hours reviewing vendor artifacts, policies, and questionnaires? Meet Bitsight Framework Intelligence—the AI-powered engine that transforms static compliance documents into structured, actionable insights. This capability, embedded in Bitsight’s Continuous Monitoring product, automatically parses vendor documentation, maps control evidence to frameworks like SIG Lite, NIST CSF, and ISO 27001, and generates audit-ready reports in just a few clicks.

What Should You Know About Digital Risk Management Before Investing in Crypto?

Investing in cryptocurrency comes with exciting opportunities, but it also introduces potential risks. Understanding digital risk management is essential to safeguard your assets and make informed, secure investment decisions.

Top 7 Tools to Manage Cybersecurity Risks from AI-Generated Code and Software

Managing AIcoded ("vibe code") software vulnerabilities doesn't require a full rebuild of your security program. By combining runtime visibility with targeted guardrails, teams can close blind spots in days instead of months. Spektion makes that possible as the leading runtimefirst solution for securing and managing vulnerabilities in from AIgenerated code in live apps, delivering live behavioral insight the moment code executes.