Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Custom Risk Scoring Is the Missing Link Between Disconnected Findings and Real Exposure Management

Most large organizations rely on multiple vulnerability and exposure scanning tools out of necessity. Infrastructure scanners, cloud security platforms, application security testing tools, container scanners, and attack surface management solutions all play a role. Each one is designed to answer a specific question. But when it comes to understanding the risk of the vulnerabilities and exposures they detect, each tool has its own approach to quantifying it.

The Philanthropist's Take: Bolstering Cyber Civil Defense

“Doing well by doing good” – there’s something to be said for that. Join Aleksandr Yampolskiy (CEO & Co-Founder, SecurityScorecard) and Craig Newmark (Founder, craigslist, Craig Newmark Philanthropies) for this discussion on: SecurityScorecard monitors and scores over 12 million companies worldwide. Find your company's security score for free at SecurityScorecard.com Follow our CEO Dr. Aleksandr Yampolskiy.

Securing AI Where It Acts: Why Agents Now Define AI Risk

In the first round of the AI gold rush, most conversations about AI security centered on models: large language models, training data, hallucinations, and prompt safety. That focus made sense when AI was largely confined to generating text, images, or recommendations. But that era is already giving way to something far more consequential.

Ensuring Institutional AI Ownership With the AI Compliance Officer

‍Artificial intelligence (AI) systems and generative AI (GenAI) tools have already been embedded across enterprise operations in a myriad of ways that trigger compliance obligations, both in terms of AI-specific regulations and other reporting mandates. In many cases, this adoption is occurring informally, through employee-driven tools or AI features embedded within third-party platforms, without centralized visibility or approval.
Featured Post

Security's Next Turning Point Is the Workforce

Cybersecurity is entering a turning point. It has less to do with new tools than a new reality: the workforce has changed. For years, security programs assumed risk lived in systems, controls, and configurations. People were the variable managed through policies, training, and best-effort awareness. That model was already under strain. Now it is being outpaced.

Understanding Open-Source License Risk in Modern Software

Open source is one of the best things to ever happen to software development. It is also one of the easiest ways to accidentally ship legal obligations you did not sign up for. Most teams know they rely heavily on open-source dependencies. Fewer teams know exactly what licenses those dependencies use, what obligations come with them, or how those licenses travel through transitive dependencies and container images. That gap is what we call open-source license risk.

The Data Scientist's Take: Making AI Work for the Enterprise

In retrospect, it’s a lot easier to determine whether or not something has been overhyped. But for the moment? We’re bullish on agentic systems – and their adoption. Is your enterprise ready for the age of autonomous AI? Join Aleksandr Yampolskiy (CEO & Co-Founder, SecurityScorecard) and Ilya Mezyin (SVP, Head of Data Science, Dun & Bradstreet) for this discussion on: SecurityScorecard monitors and scores over 12 million companies worldwide. Find your company's security score for free at SecurityScorecard.com.

Meet GitGuardian's Machine Learning-Powered Risk Scoring

The GitGuardian Platform now automatically ranks every secrets incident with a risk score from 0–100, turning alert floods into a prioritized, trustworthy work queue. Scores are computed from incident context (like validity, exposure, where it was found, and exploitability) and build on existing ML capabilities like Secret Enricher and our False-Positive Remover, which cuts false positives by 80%+.

4 Predictions Our Researchers Say Could Break (or Break Through) in 2026

As we step into 2026, Bitsight researchers are closely watching key developments across the cyber risk landscape. Their insights reveal a dynamic tension between rising threats and new opportunities to strengthen defenses. Here's what they predict for the year ahead, and what security teams should be prepared to navigate.