Resources
BlogEventsBreachesResourcesNews

Cybersecurity & Risk Management Blog

Resources to help you keep up to date
with industry insights, best practices and more.
Categories
Attack Surface Management
Company news
Compliance and Regulations
Cybersecurity
Data breaches
Devops
Risks and Vulnerabilities
Third-Party Risk Management
Vendor Risk Management
The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management
Cassy van Eeden
Cassy van Eeden
September 22, 2026

Most recent posts

Attack Surface Management
Data Breaches

The Blind Spot in Brand Protection: Why App Stores Slip Past Standard Monitoring

Do Brand Protection Solutions scan the Apple App Store and Google Play? Don't wait to find out.
Lance Turner
Lance Turner
September 22, 2026
Third-Party Risk Management

The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management

UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why.
Cassy van Eeden
Cassy van Eeden
September 22, 2026
Data Breaches
Attack Surface Management

Your First Dark Web Scan Report, Explained

You scanned your domain. What do the results mean?
Lance Turner
Lance Turner
September 21, 2026
Attack Surface Management
Data Breaches

Brand Impersonation is moving into the App Store

Fake apps in the Apple App Store and Google Play Store. Breach Risk now spots them.
Lance Turner
Lance Turner
September 20, 2026

Attack Surface Management

Attack-Surface-Management

The Blind Spot in Brand Protection: Why App Stores Slip Past Standard Monitoring

Do Brand Protection Solutions scan the Apple App Store and Google Play? Don't wait to find out.
Lance Turner
Lance Turner
September 22, 2026
Attack-Surface-Management

Your First Dark Web Scan Report, Explained

You scanned your domain. What do the results mean?
Lance Turner
Lance Turner
September 21, 2026
Attack-Surface-Management

Brand Impersonation is moving into the App Store

Fake apps in the Apple App Store and Google Play Store. Breach Risk now spots them.
Lance Turner
Lance Turner
September 20, 2026
Attack-Surface-Management

Good Security Rating? Your Dark Web Exposure Says Otherwise

Scan your domain to see just how exposed you are on the Dark Web.
Lance Turner
Lance Turner
September 20, 2026
All attack surface management posts

Company news

Company news

UpGuard Q3 2025 Summit Recap: What Did You Miss?

A recap of all the major announcements and product updates at UpGuard Summit, Q3 2025.
Edward Kost
Edward Kost
September 20, 2026
Company news

Cast a Wider Net: UpGuard Now Scans 5x More Sources

Introducing UpGuard’s enhanced news and incident coverage. 500% better coverage to keep you ahead of the latest security threats.
UpGuard Team
UpGuard Team
January 16, 2025
Company news

UpGuard Expands Vendor Risk Questionnaire Library with New DORA Questionnaire

Achieve compliance with DORA, UpGuard’s latest addition to its industry-leading Questionnaire Library.
Kyle Chin
Kyle Chin
November 19, 2024
Company news

G2 Names UpGuard #1 TPRM Software - Summer 2024

UpGuard has once again been recognized as a Leader in Third-Party and Supplier Risk Management Software by G2. Read on to discover more insights.
Kaushik Sen
Kaushik Sen
November 19, 2024
All company news posts

Compliance & Regulations

Compliance & Regulations

Cyber Resilience Act Preparedness: Who's Ready, and Who Can't Be Reached

We surveyed 2,374 EU-registered devices and 226 listed software makers for a way to report a vulnerability. Market leaders are ready. Others, not so much.
Greg Pollock
Greg Pollock
September 9, 2026
Compliance & Regulations

AI Assurance: The Third Head of Your AI Governance Watchdog

AI governance needs three things: policy, enforcement, and assurance. Most organizations have built the first two. Here's why the third one matters now.
Shane Moosa
Shane Moosa
September 21, 2026
Compliance & Regulations

NIST compliance in 2026: A complete implementation guide

NIST compliance ensures alignment with leading cybersecurity frameworks. Explore how the NIST standards can safeguard sensitive data and manage third-party
Edward Kost
Edward Kost
January 5, 2026
Compliance & Regulations

Introducing UpGuard’s DPDP Act Security Questionnaire

Discover the latest addition to UpGuard's industry-leading Questionnaire Library and learn how to achieve comprehensive DPDP compliance.
Nicholas Sollitto
Nicholas Sollitto
November 19, 2024
All compliance and regulations posts

Cybersecurity

Cybersecurity

Left Unsupervised: 10 Times Access Outlived Its Authorization

Access granted once shouldn’t mean access forever. Read more on how unmonitored access caused 10 of these real-life breaches and what they taught us.
Revashni Moodley
Revashni Moodley
August 25, 2026
Cybersecurity

No Hackers Required: 10 Shadow AI Leaks Hiding in Plain Sight

No hackers or malware, just employees using AI tools IT never approved. Read about 10 real Shadow AI incidents and the controls that could've stopped them.
Revashni Moodley
Revashni Moodley
August 25, 2026
Cybersecurity

Top 25 Cyberattacks in Sports: Does Defense Win Championships?

From malicious insider espionage to devastating double-extortion campaigns, here are the top 25 cyberattacks in sports history.
Nicholas Sollitto
Nicholas Sollitto
June 29, 2026
Cybersecurity

Surviving a LockBit Ransomware Attack: The ROI of Visibility

Read how veteran CISO Nick Gicinto saved his alma mater from a LockBit ransomware attack by discarding the standard playbook.
Nicholas Sollitto
Nicholas Sollitto
June 1, 2026
All cybersecurity posts

Data Breaches

Data Breaches

The Blind Spot in Brand Protection: Why App Stores Slip Past Standard Monitoring

Do Brand Protection Solutions scan the Apple App Store and Google Play? Don't wait to find out.
Lance Turner
Lance Turner
September 22, 2026
Data Breaches

Your First Dark Web Scan Report, Explained

You scanned your domain. What do the results mean?
Lance Turner
Lance Turner
September 21, 2026
Data Breaches

Brand Impersonation is moving into the App Store

Fake apps in the Apple App Store and Google Play Store. Breach Risk now spots them.
Lance Turner
Lance Turner
September 20, 2026
Data Breaches

Good Security Rating? Your Dark Web Exposure Says Otherwise

Scan your domain to see just how exposed you are on the Dark Web.
Lance Turner
Lance Turner
September 20, 2026
All data breaches posts

DevOps

Dev Ops

Boost Your Cybersecurity with DevSecOps

Explore how DevSecOps can significantly enhance your organization's cybersecurity posture by integrating security into your development process.
Leah Sadoian
Leah Sadoian
July 4, 2025
Dev Ops

Release Testing Basics

Learn how to start testing your software before releasing it to the public, an essential part of the Software Development Lifecycle (SDLC).
UpGuard Team
UpGuard Team
November 19, 2024
Dev Ops

SCOM vs Splunk

How does Microsoft's data center monitoring solution compare to Splunk's leading platform for IT operational intelligence? Read more to find out.
Abi Tyas Tunggal
Abi Tyas Tunggal
November 19, 2024
Dev Ops

Agent vs Agentless Monitoring: Why We Chose Agentless

Agentless data collection involves collecting data without installing any new agents. Learn why we didn't choose agent monitoring.
UpGuard Team
UpGuard Team
November 19, 2024
All DevOps posts

Risks and Vulnerabilities

Risks & Vulnerabilities

Oracle Just Shipped 1,449 Security Patches in One Quarter. We Checked How Much of It Is Actually New.

Oracle's July 2026 update shipped 1,449 security patches — 2.8x its all-time record. We parsed 23 quarters of advisories to find out how much is truly new.
Greg Pollock
Greg Pollock
July 22, 2026
Risks & Vulnerabilities

Data leakage risks with DBHub MCP servers

UpGuard found exposed DBHub servers leaking live databases to the open internet—an early sign that MCP exposure is becoming a systemic data risk.
Greg Pollock
Greg Pollock
July 20, 2026
Risks & Vulnerabilities

25 Security Vulnerabilities That Have Defined the 2020s (Thus Far)

From Log4j to SolarWinds, discover the 25 critical security vulnerabilities that have reshaped cybersecurity thus far in the 2020s.
Nicholas Sollitto
Nicholas Sollitto
May 28, 2026
Risks & Vulnerabilities

Understanding and Mitigating CVE-2025-55182 (React2Shell)

CVE-2025-55182 is a critical unauthenticated RCE in React Server Components (CVSS 10.0). Check if your Next.js or React 19 app is vulnerable and patch now.
Edward Kost
Edward Kost
December 14, 2025
Risks & Vulnerabilities

Third-Party Risk Management

Third-party Risk Management

The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management

UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why.
Cassy van Eeden
Cassy van Eeden
September 22, 2026
Third-party Risk Management

We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.

We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four.
Cassy van Eeden
Cassy van Eeden
September 21, 2026
Third-party Risk Management

How to Map Vendor Tiers to Inherent Risk

Map vendors to inherent risk using five observable criteria — data access, continuity, regulatory, strategic, and security.
Cassy van Eeden
Cassy van Eeden
September 20, 2026
Third-party Risk Management

The Best Vendor Performance Management Tools and Software (2026)

Compare the best vendor performance management tools for 2026. SLAs, KPIs, and how performance data connects to vendor security monitoring.
Cassy van Eeden
Cassy van Eeden
September 20, 2026
All third-party risk management posts

Vendor Risk Management

Vendor Risk Management

The Best IT and Cyber Risk Management Software

Discover the best IT and cyber risk management software, including UpGuard, Riskonnect, Diligent, Optro, ServiceNow, Archer, and MetricStream.
Cassy van Eeden
Cassy van Eeden
September 3, 2026
Vendor Risk Management

Best Vendor Risk Management Software for 2026

Compare top vendor risk management software solutions and learn how to choose, implement, and integrate the right tool for your organization’s needs.
Cassy van Eeden
Cassy van Eeden
September 22, 2026
Vendor Risk Management

Shadow IT: Tiering the Unseen to Manage Vendor Risk

Invisible apps become riskier with time. Use real-time user signals to categorize every vendor in your ecosystem based on its true risk profile.
Revashni Moodley
Revashni Moodley
September 20, 2026
Vendor Risk Management

The Vendor Tiering Series: Tiering that Scales

An effective TPRM program begins with a logical framework. Learn how to tier vendors using weighted risk scoring to maintain a defensible program.
Revashni Moodley
Revashni Moodley
September 20, 2026
All vendor risk management posts
Deliver icon

Sign up for our newsletter

UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.
Free instant security score

How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.
  • Check icon
    Instant insights you can act on immediately
  • Check icon
    Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities
Free score
Website Security scan resultsWebsite Security scan rating