Resources [Blog](/blog)[Events](/events)[Breaches](/breaches)[Resources](/resources)[News](/news) # Cybersecurity & Risk Management Blog Resources to help you keep up to date\ with industry insights, best practices and more. ##### Categories [Attack Surface Management](#attack-surface-management) [Company news](#company-news) [Compliance and Regulations](#compliance-regulation) [Cybersecurity](#cybersecurity) [Data breaches](#data-breaches) [Devops](#devops) [Risks and Vulnerabilities](#risks-and-vulnerabilities) [Third-Party Risk Management](#third-party-risk-management) [Vendor Risk Management](#vendor-risk-management) [UpGuard](/blog/upguard-named-leader-in-idc-marketscape) [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape) ## [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape) UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why. [](/team/cassy-van-eeden) [Cassy van Eeden](/team/cassy-van-eeden) September 22, 2026 ### Most recent posts Attack Surface Management Data Breaches #### The Blind Spot in Brand Protection: Why App Stores Slip Past Standard Monitoring Do Brand Protection Solutions scan the Apple App Store and Google Play? Don't wait to find out. [Read more](/blog/the-blind-spot-in-brand-protection-why-app-stores-slip-past-standard-monitoring) [](/team/lance-turner) [Lance Turner](/team/lance-turner) September 22, 2026 Third-Party Risk Management #### The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why. [Read more](/blog/upguard-named-leader-in-idc-marketscape) [](/team/cassy-van-eeden) [Cassy van Eeden](/team/cassy-van-eeden) September 22, 2026 Data Breaches Attack Surface Management #### Your First Dark Web Scan Report, Explained You scanned your domain. What do the results mean? [Read more](/blog/your-first-dark-web-scan-report-explained) [](/team/lance-turner) [Lance Turner](/team/lance-turner) September 21, 2026 Attack Surface Management Data Breaches #### Brand Impersonation is moving into the App Store Fake apps in the Apple App Store and Google Play Store. Breach Risk now spots them. [Read more](/blog/brand-impersonation-is-moving-into-the-app-store) [](/team/lance-turner) [Lance Turner](/team/lance-turner) September 20, 2026 ### [Attack Surface Management](/category/attack-surface-management) Attack-Surface-Management #### [The Blind Spot in Brand Protection: Why App Stores Slip Past Standard Monitoring](/blog/the-blind-spot-in-brand-protection-why-app-stores-slip-past-standard-monitoring) Do Brand Protection Solutions scan the Apple App Store and Google Play? Don't wait to find out. [](/team/lance-turner) [Lance Turner](/team/lance-turner) September 22, 2026 Attack-Surface-Management #### [Your First Dark Web Scan Report, Explained](/blog/your-first-dark-web-scan-report-explained) You scanned your domain. What do the results mean? [](/team/lance-turner) [Lance Turner](/team/lance-turner) September 21, 2026 Attack-Surface-Management #### [Brand Impersonation is moving into the App Store](/blog/brand-impersonation-is-moving-into-the-app-store) Fake apps in the Apple App Store and Google Play Store. Breach Risk now spots them. [](/team/lance-turner) [Lance Turner](/team/lance-turner) September 20, 2026 Attack-Surface-Management #### [Good Security Rating? Your Dark Web Exposure Says Otherwise](/blog/good-security-rating-your-dark-web-exposure-says-otherwise) Scan your domain to see just how exposed you are on the Dark Web. [](/team/lance-turner) [Lance Turner](/team/lance-turner) September 20, 2026 [All attack surface management posts](/category/attack-surface-management) ### [Company news](/category/company-news) Company news #### [UpGuard Q3 2025 Summit Recap: What Did You Miss?](/blog/upguard-q3-2025-summit-recap) A recap of all the major announcements and product updates at UpGuard Summit, Q3 2025. [](/team/edward-kost) [Edward Kost](/team/edward-kost) September 20, 2026 Company news #### [Cast a Wider Net: UpGuard Now Scans 5x More Sources](/blog/cast-a-wider-net) Introducing UpGuard’s enhanced news and incident coverage. 500% better coverage to keep you ahead of the latest security threats. [](/team/upguard) [UpGuard Team](/team/upguard) January 16, 2025 Company news #### [UpGuard Expands Vendor Risk Questionnaire Library with New DORA Questionnaire](/blog/upguard-dora-questionnaire) Achieve compliance with DORA, UpGuard’s latest addition to its industry-leading Questionnaire Library. [](/team/kyle-chin) [Kyle Chin](/team/kyle-chin) November 19, 2024 Company news #### [G2 Names UpGuard #1 TPRM Software - Summer 2024](/blog/g2-summer-2024) UpGuard has once again been recognized as a Leader in Third-Party and Supplier Risk Management Software by G2. Read on to discover more insights. [](/team/kaushik-sen) [Kaushik Sen](/team/kaushik-sen) November 19, 2024 [All company news posts](/category/company-news) ### [Compliance & Regulations](/category/compliance-and-regulations) Compliance & Regulations #### [Cyber Resilience Act Preparedness: Who's Ready, and Who Can't Be Reached](/blog/cyber-resilience-act-preparedness-whos-ready-and-who-cant-be-reached) We surveyed 2,374 EU-registered devices and 226 listed software makers for a way to report a vulnerability. Market leaders are ready. Others, not so much. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) September 9, 2026 Compliance & Regulations #### [AI Assurance: The Third Head of Your AI Governance Watchdog](/blog/ai-governance-to-ai-assurance) AI governance needs three things: policy, enforcement, and assurance. Most organizations have built the first two. Here's why the third one matters now. [](/team/shane-moosa) [Shane Moosa](/team/shane-moosa) September 21, 2026 Compliance & Regulations #### [NIST compliance in 2026: A complete implementation guide](/blog/nist-compliance) NIST compliance ensures alignment with leading cybersecurity frameworks. Explore how the NIST standards can safeguard sensitive data and manage third-party [](/team/edward-kost) [Edward Kost](/team/edward-kost) January 5, 2026 Compliance & Regulations #### [Introducing UpGuard’s DPDP Act Security Questionnaire](/blog/upguards-dpdp-security-questionnaire) Discover the latest addition to UpGuard's industry-leading Questionnaire Library and learn how to achieve comprehensive DPDP compliance. [](/team/nicholas-sollitto) [Nicholas Sollitto](/team/nicholas-sollitto) November 19, 2024 [All compliance and regulations posts](/category/compliance-and-regulations) ### [Cybersecurity](/category/cybersecurity) Cybersecurity #### [Left Unsupervised: 10 Times Access Outlived Its Authorization](/blog/10-times-access-outlived-authorization) Access granted once shouldn’t mean access forever. Read more on how unmonitored access caused 10 of these real-life breaches and what they taught us. [](/team/revashni-moodley) [Revashni Moodley](/team/revashni-moodley) August 25, 2026 Cybersecurity #### [No Hackers Required: 10 Shadow AI Leaks Hiding in Plain Sight](/blog/10-shadow-ai-leaks-in-plain-sight) No hackers or malware, just employees using AI tools IT never approved. Read about 10 real Shadow AI incidents and the controls that could've stopped them. [](/team/revashni-moodley) [Revashni Moodley](/team/revashni-moodley) August 25, 2026 Cybersecurity #### [Top 25 Cyberattacks in Sports: Does Defense Win Championships?](/blog/top-25-cyberattacks-in-sports) From malicious insider espionage to devastating double-extortion campaigns, here are the top 25 cyberattacks in sports history. [](/team/nicholas-sollitto) [Nicholas Sollitto](/team/nicholas-sollitto) June 29, 2026 Cybersecurity #### [Surviving a LockBit Ransomware Attack: The ROI of Visibility](/blog/surviving-a-lockbit-ransomware-attack) Read how veteran CISO Nick Gicinto saved his alma mater from a LockBit ransomware attack by discarding the standard playbook. [](/team/nicholas-sollitto) [Nicholas Sollitto](/team/nicholas-sollitto) June 1, 2026 [All cybersecurity posts](/category/cybersecurity) ### [Data Breaches](/category/data-breaches) Data Breaches #### [The Blind Spot in Brand Protection: Why App Stores Slip Past Standard Monitoring](/blog/the-blind-spot-in-brand-protection-why-app-stores-slip-past-standard-monitoring) Do Brand Protection Solutions scan the Apple App Store and Google Play? Don't wait to find out. [](/team/lance-turner) [Lance Turner](/team/lance-turner) September 22, 2026 Data Breaches #### [Your First Dark Web Scan Report, Explained](/blog/your-first-dark-web-scan-report-explained) You scanned your domain. What do the results mean? [](/team/lance-turner) [Lance Turner](/team/lance-turner) September 21, 2026 Data Breaches #### [Brand Impersonation is moving into the App Store](/blog/brand-impersonation-is-moving-into-the-app-store) Fake apps in the Apple App Store and Google Play Store. Breach Risk now spots them. [](/team/lance-turner) [Lance Turner](/team/lance-turner) September 20, 2026 Data Breaches #### [Good Security Rating? Your Dark Web Exposure Says Otherwise](/blog/good-security-rating-your-dark-web-exposure-says-otherwise) Scan your domain to see just how exposed you are on the Dark Web. [](/team/lance-turner) [Lance Turner](/team/lance-turner) September 20, 2026 [All data breaches posts](/category/data-breaches) ### [DevOps](/category/devops) Dev Ops #### [Boost Your Cybersecurity with DevSecOps](/blog/devsecops) Explore how DevSecOps can significantly enhance your organization's cybersecurity posture by integrating security into your development process. [](/team/leah-sadoian) [Leah Sadoian](/team/leah-sadoian) July 4, 2025 Dev Ops #### [Release Testing Basics](/blog/release-testing-basics) Learn how to start testing your software before releasing it to the public, an essential part of the Software Development Lifecycle (SDLC). [](/team/upguard) [UpGuard Team](/team/upguard) November 19, 2024 Dev Ops #### [SCOM vs Splunk](/blog/scom-vs-splunk) How does Microsoft's data center monitoring solution compare to Splunk's leading platform for IT operational intelligence? Read more to find out. [](/team/abi-tyas-tunggal) [Abi Tyas Tunggal](/team/abi-tyas-tunggal) November 19, 2024 Dev Ops #### [Agent vs Agentless Monitoring: Why We Chose Agentless](/blog/agent-vs-agentless-and-why-we-chose-agentless) Agentless data collection involves collecting data without installing any new agents. Learn why we didn't choose agent monitoring. [](/team/upguard) [UpGuard Team](/team/upguard) November 19, 2024 [All DevOps posts](/category/devops) ### [Risks and Vulnerabilities](/category/risks-and-vulnerabilities) Risks & Vulnerabilities #### [Oracle Just Shipped 1,449 Security Patches in One Quarter. We Checked How Much of It Is Actually New.](/blog/oracle-just-shipped-1-449-security-patches-in-one-quarter-we-checked-how-much-of-it-is-actually-new) Oracle's July 2026 update shipped 1,449 security patches — 2.8x its all-time record. We parsed 23 quarters of advisories to find out how much is truly new. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) July 22, 2026 Risks & Vulnerabilities #### [Data leakage risks with DBHub MCP servers](/blog/data-leakage-risks-with-dbhub-mcp-servers) UpGuard found exposed DBHub servers leaking live databases to the open internet—an early sign that MCP exposure is becoming a systemic data risk. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) July 20, 2026 Risks & Vulnerabilities #### [25 Security Vulnerabilities That Have Defined the 2020s (Thus Far)](/blog/top-25-security-vulnerabilities-of-the-2020s) From Log4j to SolarWinds, discover the 25 critical security vulnerabilities that have reshaped cybersecurity thus far in the 2020s. [](/team/nicholas-sollitto) [Nicholas Sollitto](/team/nicholas-sollitto) May 28, 2026 Risks & Vulnerabilities #### [Understanding and Mitigating CVE-2025-55182 (React2Shell)](/blog/understanding-and-mitigating-cve-2025-55182-react2shell) CVE-2025-55182 is a critical unauthenticated RCE in React Server Components (CVSS 10.0). Check if your Next.js or React 19 app is vulnerable and patch now. [](/team/edward-kost) [Edward Kost](/team/edward-kost) December 14, 2025 [Risks & Vulnerabilities](/category/risks-and-vulnerabilities) ### [Third-Party Risk Management](/category/third-party-risk-management) Third-party Risk Management #### [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape) UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why. [](/team/cassy-van-eeden) [Cassy van Eeden](/team/cassy-van-eeden) September 22, 2026 Third-party Risk Management #### [We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.](/blog/ai-evidence-analysis-tools-for-tprm) We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four. [](/team/cassy-van-eeden) [Cassy van Eeden](/team/cassy-van-eeden) September 21, 2026 Third-party Risk Management #### [How to Map Vendor Tiers to Inherent Risk](/blog/vendor-tiering-mapping-to-inherent-risk) Map vendors to inherent risk using five observable criteria — data access, continuity, regulatory, strategic, and security. [](/team/cassy-van-eeden) [Cassy van Eeden](/team/cassy-van-eeden) September 20, 2026 Third-party Risk Management #### [The Best Vendor Performance Management Tools and Software (2026)](/blog/vendor-performance-management-tools) Compare the best vendor performance management tools for 2026. SLAs, KPIs, and how performance data connects to vendor security monitoring. [](/team/cassy-van-eeden) [Cassy van Eeden](/team/cassy-van-eeden) September 20, 2026 [All third-party risk management posts](/category/third-party-risk-management) ### [Vendor Risk Management](/category/vendor-risk-management) Vendor Risk Management #### [The Best IT and Cyber Risk Management Software](/blog/best-it-and-cyber-risk-management-software) Discover the best IT and cyber risk management software, including UpGuard, Riskonnect, Diligent, Optro, ServiceNow, Archer, and MetricStream. [](/team/cassy-van-eeden) [Cassy van Eeden](/team/cassy-van-eeden) September 3, 2026 Vendor Risk Management #### [Best Vendor Risk Management Software for 2026](/blog/best-vendor-risk-management-software-solutions) Compare top vendor risk management software solutions and learn how to choose, implement, and integrate the right tool for your organization’s needs. [](/team/cassy-van-eeden) [Cassy van Eeden](/team/cassy-van-eeden) September 22, 2026 Vendor Risk Management #### [Shadow IT: Tiering the Unseen to Manage Vendor Risk](/blog/shadow-it-tiering-vendor-risk) Invisible apps become riskier with time. Use real-time user signals to categorize every vendor in your ecosystem based on its true risk profile. [](/team/revashni-moodley) [Revashni Moodley](/team/revashni-moodley) September 20, 2026 Vendor Risk Management #### [The Vendor Tiering Series: Tiering that Scales](/blog/vendor-tiering-that-scales) An effective TPRM program begins with a logical framework. Learn how to tier vendors using weighted risk scoring to maintain a defensible program. [](/team/revashni-moodley) [Revashni Moodley](/team/revashni-moodley) September 20, 2026 [All vendor risk management posts](/category/vendor-risk-management) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score) Experience superior visibility and a simpler approach to cyber risk management [Get a demo](/contact-sales) [Free trial](/demo)