Lessons learned from Vanta's FedRAMP 20x pilot program

In late March 2025, the General Services Administration (GSA) announced the first major overhaul to FedRAMP in over a decade, soft-launching a new, fast-track authorization path called FedRAMP 20x. ‍ In May 2025, we submitted our initial package for the pilot, quickly followed by a resubmission of our final package. We’re now excited to share that Vanta has officially achieved FedRAMP 20x Low Authorization and a listing on the FedRAMP Marketplace.

Summer, AI, and Identity-Based Threats: A Strategic Wake-Up Call for MSPs

As CSOs, we know cybercriminals don't clock out for summer. If anything, the seasonal drop in staffing and vigilance creates ideal conditions for identity-based attacks, especially for MSPs juggling multiple client environments. You need more than ever security that “just works” even under imperfect conditions with tools that remain reliable and effective—not fragile theory.

The Link Between Asset Classification and Threat Response Accuracy

The cybersecurity landscape continues to evolve at an unprecedented pace, with organizations facing increasingly sophisticated threats targeting their most valuable resources. In this environment, the accuracy and speed of threat response can determine the difference between a minor security incident and a catastrophic data breach. The fundamental truth: organizations cannot adequately protect what they cannot properly identify and classify.

AI vs. AI: The Race Between Adversarial and Defensive Intelligence

The AI battleground is here. Adversaries are weaponizing AI to launch attacks with unprecedented scale, speed, and effectiveness. In response, defenders are turning to AI as an analyst force-multiplier, using it to offload repetitive tasks, accelerate decision-making, and scale expertise across the SOC.

Framework Intelligence

Tired of spending hours reviewing vendor artifacts, policies, and questionnaires? Meet Bitsight Framework Intelligence—the AI-powered engine that transforms static compliance documents into structured, actionable insights. This capability, embedded in Bitsight’s Continuous Monitoring product, automatically parses vendor documentation, maps control evidence to frameworks like SIG Lite, NIST CSF, and ISO 27001, and generates audit-ready reports in just a few clicks.

CrowdStrike 2025 Threat Hunting Report: AI Becomes a Weapon and a Target

Today’s enterprising adversaries are weaponizing AI to scale operations, accelerate attacks, and target the autonomous AI agents quickly transforming modern businesses. The CrowdStrike 2025 Threat Hunting Report details this new chapter in the threat landscape. This year’s report, based on frontline intelligence from CrowdStrike’s elite threat hunters and intelligence analysts, examines how threat actors are using AI to do more with less.