Use the Risk Vectors & Risk Categories directory to learn about Bitsight risk vectors; including what they are and how they are assessed. Risk vectors are introduced in beta status. They are evaluated for a period before being factored into Bitsight Security Ratings.
This article is updated on a regular basis. Entries older than 2 years are removed.
Select the Follow button at the top-right of the page to be notified of changes to this article via email. You can also follow any of the Notices to be notified of newly published articles in those sections: Platform Updates, Bitsight Data Changes, and Integration Updates.
- 10-JUL-2025
2025 Ratings Algorithm Update (RAU). See changes.
- 18-JUN-2025
TeamCity 2025.03.3 released.
- 17-JUN-2025
-
- 2.402 released.
- 2.401 EOL.
- 02-JUN-2025
-
- 2.401 released.
- 2.400 EOL.
- 28-MAY-2025
SUSE Linux Enterprise Server 15 SP7 released.
- 25-MAY-2025
-
- 2.400 released.
- Webmin 2.303 EOL.
- 13-MAY-2025
Red Hat Enterprise Linux 10 released.
- 08-MAY-2025
TeamCity 2025.03.2 released.
- 17-APR-2025
Ubuntu "Plucky Puffin" released.
- 16-APR-2025
TeamCity 2025.03.1 released.
- 15-APR-2025
Fedora 42 released.
- 11-APR-2025
Exposed Credentials – Additional ‘sensitive’ breaches, underlying service upgrades, and minor UI updates.
- 09-APR-2025
-
- 10.0 released.
- 9.9 EOL.
- 20-MAR-2025
-
- 2025.03 released.
- 2024.07.3 EOL.
- 2024.07.2 EOL.
- 2024.07.1 EOL.
- 2024.07 EOL.
- 17-MAR-2025
-
- 2.303 released.
- 2.302 EOL.
- 07-MAR-2025
TeamCity 2024.12.3 released.
- 05-MAR-2025
-
- 2.302 released.
- 2.301 EOL.
- 16-FEB-2025
-
- 2.301 released.
- 2.300 EOL.
- 14-FEB-2025
-
- 2.300 released.
- 2.202 EOL.
- 11-FEB-2025
-
- 6.7.2 released.
- 6.7.1 EOL.
- 03-FEB-2025
TeamCity 2024.12.2 released.
- 23-JAN-2025
-
- 2.4.63 released.
- 2.4.62 end-of-life.
- 17-JAN-2025
TeamCity 2024.12.1 released.
- 31-DEC-2024
OpenSuse 15.5 end-of-life.
- 12-DEC-2024
Web Application Security – Assessment weights and finding grades. See evaluation for details.
- 05-DEC-2024
-
- 2024.12 released.
- 2024.03.3 end-of-life.
- 2024.03.2 end-of-life.
- 2024.03.1 end-of-life.
- 2024.03 end-of-life.
- 23-NOV-2024
Fedora 39 end-of-life.
- 21-NOV-2024
-
- 6.7 EOL.
- 6.7.1 released.
- 12-NOV-2024
WordPress 6.7 released.
- 01-NOV-2024
Windows – Server 2025 released.
- 29-OCT-2024
Fedora 41 released.
- 22-OCT-2024
ServiceNow – Xanadu supported.
- 15-OCT-2024
TLS/SSL Certificates – Certain Entrust-signed certificates no longer trusted by Google and Mozilla.
- 10-OCT-2024
Ubuntu 24.10 released.
- 01-OCT-2024
TeamCity 2024.07.3 released.
- 11-SEP-2024
Data Feeds and Historical Analytics – Expanded available data.
- 29-AUG-2024
TeamCity 2024.07.2 released.
- 12-AUG-2024
-
- 2.202 released.
- 2.201 EOL.
- 06-AUG-2024
TeamCity 2024.07.1 released.
- 19-SEP-2024
-
- 9.9 released.
- 9.8 EOL.
- 25-JUL-2024
Groma Target Hostname List Expansion (v2)
- 23-JUL-2024
-
- 2.201 released.
- 2.200 EOL.
- 6.6.1 released.
- 6.6 EOL.
- 21-JUL-2024
-
- 2.200 released.
- 2.111 EOL.
- 18-JUL-2024
-
- 2024.07 released.
- 2023.11 to 2023.11.4 EOL.
- 17-JUL-2024
-
- 2.4.62 released.
- 2.4.61 EOL.
- 16-JUL-2024
WordPress 6.6 released.
- 10-JUL-2024
Ratings Algorithm Update – The Patching Cadence lifetime is decreased from 300 to 90 days.
- 03-JUL-2024
-
- 2.4.61 released.
- 2.4.60 EOL.
- 01-JUL-2024
-
Apache 2.4.59 EOL.
- 9.7 EOL.
- 9.8 released.
- 27-JUN-2024
TeamCity 2024.03.3 released.
- 26-JUN-2024
SUSE Linux Enterprise Server 15 SP6 released.
- 24-JUN-2024
-
- 6.5.5 released.
- 6.5.4 EOL.
- 6.4.5 released.
- 6.4.4 EOL.
- 6.3.5 released.
- 6.3.4 EOL.
- 6.2.6 released.
- 6.2.5 EOL.
- 6.1.7 released.
- 6.1.6 EOL.
- 6.0.9 released.
- 6.0.8 EOL.
- 5.9.10 released.
- 5.9.9 EOL.
- 5.8.10 released.
- 5.8.9 EOL.
- 5.7.12 released.
- 5.7.11 EOL.
- 5.6.14 released.
- 5.6.13 EOL 24-JUN-2024
- 5.5.15 released.
- 5.5.14 EOL 24-JUN-2024
- 5.4.16 released.
- 5.4.15 EOL.
- 5.3.18 released.
- 5.3.17 EOL 24-JUN-2024
- 5.2.21 released.
- 5.2.20 EOL.
- 5.1.19 released.
- 5.1.18 EOL.
- 5.0.22 released.
- 5.0.21 EOL.
- 4.9.25 released.
- 4.9.26 EOL.
- 4.8.25 released.
- 4.8.24 EOL.
- 4.7.29 released.
- 4.7.28 EOL.
- 4.6.29 released.
- 4.6.28 EOL.
- 4.5.32 released.
- 4.5.31 EOL.
- 4.4.33 released.
- 4.4.32 EOL.
- 4.3.34 released.
- 4.3.33 EOL.
- 4.2.38 released.
- 4.2.37 EOL.
- 4.1.41 released.
- 4.1.40 EOL.
- 10-JUN-2024
OpenSUSE 15.6 released.
- 07-JUN-2024
ServiceNow – Washington supported.
- 05-JUN-2024
-
- 6.5.3 EOL.
- 6.5.4 released.
- 29-MAY-2024
- TLS/SSL Certificates – Use the
Certificate Serial Numberas the finding identifier. - TeamCity 2024.03.2 released.
- TLS/SSL Certificates – Use the
- 07-MAY-2024
-
- 6.5.3 released.
- 6.5.2 EOL.
- 09-APR-2024
-
- 6.4.4 released.
- 6.4.3 EOL.
- 6.3.4 released.
- 6.3.3 EOL.
- 6.2.5 released.
- 6.2.4 EOL.
- 6.1.6 released.
- 6.1.5 EOL.
- 6.0.8 released.
- 6.0.7 EOL.
- 27-MAR-2024
-
- 2024.01 released.
- 2023.05 EOL.
- 11-MAR-2024
-
- 9.7 released.
- 9.6 EOL.
- 09-MAR-2024
TeamCity 2023.11.4 released.
- 08-FEB-2024
-
Infrastructure Data Quality & Collection:
- Increased asset discovery capability. We believe that our expanded ability to discover hostnames and IPs would be a contributing factor to a steady increase in findings.
- Improved data quality: ul
- Improved internet scanning techniques to support not only the Web Application Header and TLS/SSL Configuration risk vectors, but also the rest of the Diligence risk vectors, including the Open Ports, Server Software, TLS/SSL Certificates, and Patching Cadence.
- TLS/SSL Configuration - Support for different certificate versions and ciphers.
- 31-JAN-2024
SUSE Linux Enterprise Server 15 SP1 EOL.
- 30-JAN-2024
TeamCity 2023.11.3 released.
- 29-JAN-2024
Groma Target Hostname List Expansion (v1)
- 25-JAN-2024
Ubuntu 23.04 "Lunar Lobster" EOL.
- 18-JAN-2024
TeamCity 2023.11.2 released.
- 31-DEC-2023
OpenSUSE 15.4 EOL.
- 18-DEC-2023
-
- 9.6 released.
- 9.5 EOL.
- 12-DEC-2023
ServiceNow – Vancouver supported.
- 28-NOV-2023
-
- 2023.11 released.
- 2022.10.3 EOL.
- 2022.10.2 EOL.
- 2022.10.1 EOL.
- 2022.10 EOL.
- 21-NOV-2023
-
- Findings in assets that are owned by the organization but are partially or fully controlled by their customers are excluded from the organization’s Bitsight rating.
- Findings in assets identified as not having delegated controls (i.e., assets for which the company has full responsibility over security controls) will keep impacting the corresponding risk vector grade.
- 09-NOV-2023
-
- 6.4.1 released.
- 6.4 EOL.
- 08-NOV-2023
-
- 2.105 released.
- 2.104 EOL.
- 07-NOV-2023
-
Fedora 39 released.
- 6.4 released.
- 6.3.2 EOL.
- 01-NOV-2023
- Appweb 9 released.
- Appweb 8 EOL.
- 31-OCT-2023
Mobile Application Analysis – Android and iOS tests, version 2023.
- 30-OCT-2023
Vulnerability Intelligence – A Bitsight cybersecurity data solutions product. Data is delivered (.csv) via a Bitsight-developed tool that automatically delivers files according to each configuration and purchased product.
- 19-OCT-2023
-
- 2.4.58 released.
- 2.4.57 EOL.
- 16-OCT-2023
-
- 2.104 released.
- 2.103 EOL.
- 12-OCT-2023
-
Ubuntu 23.10 “Mantic Minotaur” released.
- 6.3.2 released.
- 6.3.1 EOL.
- 08-OCT-2023
-
- 2.103 released.
- 2.102 EOL.
- 04-OCT-2023
-
- 9.5 released.
- 9.4 EOL.
- 18-SEP-2023
TeamCity 2023.05.4 released.
- 07-SEP-2023
- OpenSSH 9.4 released.
- Web Application Security – Released.
- 29-AUG-2023
-
- 6.3.1 released.
- 6.3 end-of-life.
- 24-AUG-2023
- 10-AUG-2023
OpenSSH 9.3 end-of-life.
- 08-AUG-2023
-
Webmin 2.100 end-of-life.
- 6.3 released.
- 6.2.2 end-of-life.
- 07-AUG-2023
Webmin 2.101 released.
- 25-JUL-2023
TeamCity 2023.05.2 released.
- 23-JUL-2023
-
- 2.102 released.
- 2.021 end-of-life.
- 20-JUL-2023
Supported Operating Systems: Ubuntu 22.10 end-of-life.
- 11-JUL-2023
TeamCity 2023.05.1 released.
Comments
Please sign in to leave a comment.