- Attack Surface Management
- Data Breaches
Find Out if You're Exposed on the Dark Web
Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure.
Lance Turner
Featured post
Most recent posts
-
- Cybersecurity
10 Black Friday Cybersecurity Incidents That Prove Attackers Use Peak Retail Traffic to Hide
Before ASOS, there was Target. And IKEA. See 10 Black Friday cybersecurity incidents, from a stolen vendor login to 33 million exposed accounts.
Revashni Moodley -
- Third-Party Risk Management
- Vendor Risk Management
The Best Supplier Risk Management Software in 2026
Discover the best supplier risk management software in 2026, including UpGuard Vendor Risk, Bitsight, and Riskconect.
Cassy van Eeden -
- Attack Surface Management
The Digital Risk Protection Market: Analyst Coverage Explained
Understand how Gartner, Forrester, and others cover digital risk protection (DRP), why no single quadrant exists, and how to build a defensible shortlist.
Lance Turner -
- Risks and Vulnerabilities
PHP2Shell: A Clear Explanation and Response Framework
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) lets unauthenticated attackers run code on PHP servers. Learn who’s affected and how to respond.
UpGuard Team
Attack Surface Management
-
- Attack Surface Management
The Digital Risk Protection Market: Analyst Coverage Explained
Understand how Gartner, Forrester, and others cover digital risk protection (DRP), why no single quadrant exists, and how to build a defensible shortlist.
Lance Turner -
- Attack Surface Management
Security Posture Monitoring and Board Reporting Tools
Learn how continuous security posture monitoring helps track risk trends, decode posture scores, and deliver clear, executive-ready reports for your board.
Lance Turner -
- Attack Surface Management
Attack Surface Management Vendors Compared
We compared ASM vendors and helped you rate them before agreeing to a POC!
Lance Turner -
- Attack Surface Management
Find Out if You're Exposed on the Dark Web
Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure.
Lance Turner
All Attack Surface Management posts
Company news
-
- Company news
UpGuard Q3 2025 Summit Recap: What Did You Miss?
A recap of all the major announcements and product updates at UpGuard Summit, Q3 2025.
Edward Kost -
- Company news
Cast a Wider Net: UpGuard Now Scans 5x More Sources
Introducing UpGuard’s enhanced news and incident coverage. 500% better coverage to keep you ahead of the latest security threats.
UpGuard Team -
- Company news
UpGuard Expands Vendor Risk Questionnaire Library with New DORA Questionnaire
Achieve compliance with DORA, UpGuard’s latest addition to its industry-leading Questionnaire Library.
Kyle Chin -
- Company news
G2 Names UpGuard #1 TPRM Software - Summer 2024
UpGuard has once again been recognized as a Leader in Third-Party and Supplier Risk Management Software by G2. Read on to discover more insights.
Kaushik Sen
All Company news posts
Compliance and Regulations
-
- Compliance and Regulations
Cyber Resilience Act Preparedness: Who's Ready, and Who Can't Be Reached
We surveyed 2,374 EU-registered devices and 226 listed software makers for a way to report a vulnerability. Market leaders are ready. Others, not so much.
Greg Pollock -
- Compliance and Regulations
AI Assurance: The Third Head of Your AI Governance Watchdog
AI governance needs three things: policy, enforcement, and assurance. Most organizations have built the first two. Here's why the third one matters now.
Shane Moosa -
- Compliance and Regulations
NIST compliance in 2026: A complete implementation guide
NIST compliance ensures alignment with leading cybersecurity frameworks. Explore how the NIST standards can safeguard sensitive data and manage third-party
Edward Kost -
- Compliance and Regulations
Introducing UpGuard’s DPDP Act Security Questionnaire
Discover the latest addition to UpGuard's industry-leading Questionnaire Library and learn how to achieve comprehensive DPDP compliance.
Nicholas Sollitto
All Compliance and Regulations posts
Cybersecurity
-
- Cybersecurity
10 Black Friday Cybersecurity Incidents That Prove Attackers Use Peak Retail Traffic to Hide
Before ASOS, there was Target. And IKEA. See 10 Black Friday cybersecurity incidents, from a stolen vendor login to 33 million exposed accounts.
Revashni Moodley -
- Cybersecurity
Security Posture Monitoring and Board Reporting Tools
Learn how continuous security posture monitoring helps track risk trends, decode posture scores, and deliver clear, executive-ready reports for your board.
Lance Turner -
- Cybersecurity
12 Cybersecurity Horror Stories of 2026 (No Costume Required)
A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news.
Revashni Moodley -
- Cybersecurity
Left Unsupervised: 10 Times Access Outlived Its Authorization
Access granted once shouldn’t mean access forever. Read more on how unmonitored access caused 10 of these real-life breaches and what they taught us.
Revashni Moodley
All Cybersecurity posts
Data Breaches
-
- Data Breaches
Attack Surface Management Vendors Compared
We compared ASM vendors and helped you rate them before agreeing to a POC!
Lance Turner -
- Data Breaches
Find Out if You're Exposed on the Dark Web
Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure.
Lance Turner -
- Data Breaches
The Blind Spot in Brand Protection: Why App Stores Slip Past Standard Monitoring
Do Brand Protection Solutions scan the Apple App Store and Google Play? Don't wait to find out.
Lance Turner -
- Data Breaches
Your First Dark Web Scan Report, Explained
You scanned your domain. What do the results mean?
Lance Turner
All Data Breaches posts
DevOps
-
- DevOps
Boost Your Cybersecurity with DevSecOps
Explore how DevSecOps can significantly enhance your organization's cybersecurity posture by integrating security into your development process.
Leah Sadoian -
- DevOps
Bitbucket vs GitHub (Updated for 2026)
Bitbucket and Github are two of the largest web-based hosting services for source code and development projects.
Abi Tyas Tunggal -
- DevOps
What Is Configuration Management and Why Is It Important?
Configuration management (CM) is a systems engineering process for establishing and maintaining consistency of a system's attributes.
UpGuard Team -
- DevOps
The Windows Server Hardening Checklist
Follow these 10 simple steps to harden your Windows server against the most common cyber attacks and exploits before you put them into production.
UpGuard Team
All DevOps posts
Risks and Vulnerabilities
-
- Risks and Vulnerabilities
PHP2Shell: A Clear Explanation and Response Framework
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) lets unauthenticated attackers run code on PHP servers. Learn who’s affected and how to respond.
UpGuard Team -
- Risks and Vulnerabilities
Everything Everywhere: Systemic Data Exposure in Supabase Apps
Supabase is a favorite of AI coding agents. It's also prone to misconfiguration. We studied more than 16,000 open databases to see what's leaking.
Greg Pollock -
- Risks and Vulnerabilities
Oracle Just Shipped 1,449 Security Patches in One Quarter. We Checked How Much of It Is Actually New.
Oracle's July 2026 update shipped 1,449 security patches — 2.8x its all-time record. We parsed 23 quarters of advisories to find out how much is truly new.
Greg Pollock -
- Risks and Vulnerabilities
Data leakage risks with DBHub MCP servers
UpGuard found exposed DBHub servers leaking live databases to the open internet—an early sign that MCP exposure is becoming a systemic data risk.
Greg Pollock
All Risks and Vulnerabilities posts
Third-Party Risk Management
-
- Third-Party Risk Management
The Best Supplier Risk Management Software in 2026
Discover the best supplier risk management software in 2026, including UpGuard Vendor Risk, Bitsight, and Riskconect.
Cassy van Eeden -
- Third-Party Risk Management
The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management
UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why.
Cassy van Eeden -
- Third-Party Risk Management
We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.
We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four.
Cassy van Eeden -
- Third-Party Risk Management
How to Map Vendor Tiers to Inherent Risk
Map vendors to inherent risk using five observable criteria — data access, continuity, regulatory, strategic, and security.
Cassy van Eeden
All Third-Party Risk Management posts
Vendor Risk Management
-
- Vendor Risk Management
The Best Supplier Risk Management Software in 2026
Discover the best supplier risk management software in 2026, including UpGuard Vendor Risk, Bitsight, and Riskconect.
Cassy van Eeden -
- Vendor Risk Management
The Best IT and Cyber Risk Management Software
Discover the best IT and cyber risk management software, including UpGuard, Riskonnect, Diligent, Optro, ServiceNow, Archer, and MetricStream.
Cassy van Eeden -
- Vendor Risk Management
Best Vendor Risk Management Software for 2026
Compare top vendor risk management software solutions and learn how to choose, implement, and integrate the right tool for your organization’s needs.
Cassy van Eeden -
- Vendor Risk Management
Shadow IT: Usage-Based Tiering for Vendor Risk
How UpGuard User Risk and Vendor Risk use real-time usage signals to discover shadow IT and tier every app by true risk profile in 2026.
Cassy van Eeden
All Vendor Risk Management posts
