Threat Insights Phase 2 - March 19th, 2026

We are releasing Phase 2 of Threat Insights, which introduces an adversary-centric experience inside Bitsight, consolidating all findings linked to Advanced Persistent Threat (APT) and Ransomware groups.

This feature is available in Security Posture Management, Continuous Monitoring, and Cyber Insurance.

What’s New?

• New Threat Groups Overview Page listing all tracked APT and Ransomware groups and associated findings.
  • In SPM, this is available in SPM standard or above
• Findings Table Improvements including a new filter to isolate findings associated with a specific Threat Group and a focus filter to filter findings based on activity level allowing users’ to prioritize the most active threats.
• Introducing Activity Comparison Metrics in Threat Insights Table, including:

• Trend Analysis: How the current activity level compares to the group's historical average.
• Peer Comparison: Comparing the group's activity against other APTs or Ransomware groups.
• Overall Comparison: Comparing the activity against all tracked APT and Ransomware groups.

• New SPM Threat Groups Dashboard that highlights finding volumes by specific Threat Groups.
  • This is only available in SPM

Why?

Until now, Threat Insights showed threat context at the finding level. With this update, security teams can:

• Move from reactive analysis to intelligence-driven prioritization
• Understand who is targeting them and why
• Track threat group activity trends over time
• Have strategic, data-driven conversations about where to focus efforts