Resources

Attack Surface Management

Articles, news, and research on attack surface management.

Featured post

  • Attack Surface Management
  • Data Breaches

Find Out if You're Exposed on the Dark Web

Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure.

Lance Turner

Attack Surface Management

    • DevOps
    • Attack Surface Management

    What Is Configuration Management and Why Is It Important?

    Configuration management (CM) is a systems engineering process for establishing and maintaining consistency of a system's attributes.

    UpGuard Team
    • Attack Surface Management
    • Cybersecurity

    What Is Email Security? Best Practices for 2026

    This is a complete overview of email security. Learn about email security best practices and how to implement them with this in-depth post.

    Abi Tyas Tunggal
    • Attack Surface Management
    • Cybersecurity

    What is an Open Port? Definition & Free Checking Tools

    This is a complete overview of open ports. Learn why open ports can be dangerous and how to detect them in this in-depth post.

    Abi Tyas Tunggal
    • Cybersecurity
    • Attack Surface Management

    Cybersecurity Risk Assessment Platforms Explained

    Discover leading cybersecurity risk assessment tools that help organizations identify vulnerabilities, manage threats, and enhance their security posture.​

    Abi Tyas Tunggal
    • Attack Surface Management
    • Cybersecurity

    SMB Ports 445 and 139: Risks and How to Secure Them

    An SMB port is a network port commonly used for file sharing that is susceptible to an exploit known as EternalBlue exploit that resulted in WannaCry.‍

    Abi Tyas Tunggal
    • Attack Surface Management
    • Cybersecurity

    What is DNS Spoofing?

    This is a complete overview of DNS spoofing. Learn how DNS cache poisoning can impact your organization's cybersecurity in this in-depth post.

    Abi Tyas Tunggal
    • Attack Surface Management
    • Cybersecurity

    What is Cross-Site Scripting (XSS)?

    This is a complete overview of cross-site scripting (XSS). Learn about how to prevent XSS attacks in this in-depth post.

    Abi Tyas Tunggal
    • Cybersecurity
    • Attack Surface Management

    What is Operations Security (OPSEC)?

    Operations security (OPSEC) identifies friendly actions that could be useful for a potential attacker if properly analyzed.

    Abi Tyas Tunggal
    • Cybersecurity
    • Attack Surface Management
    • Third-Party Risk Management
    • Data Breaches

    What is Data Security?

    Data security is the process of protecting sensitive data from unauthorized access and corruption throughout its lifecycle.

    Abi Tyas Tunggal
    • Attack Surface Management
    • Cybersecurity
    • Data Breaches

    Don’t Use Production Data In Your Test Environment: The Impact Of Leaked Test Credentials

    Read about why your third-party vendors and test environments should not contain production data, and how to protect your customers by taking a few steps.

    Kaushik Sen
    • Attack Surface Management
    • Cybersecurity

    IT Security Risk Assessment Methodology: Qualitative vs Quantitative

    Formulating an IT security risk assessment methodology is a key part of building a robust information security risk management program. 

    Abi Tyas Tunggal
    • Cybersecurity
    • Attack Surface Management

    What is Zero Trust? A Model for More Effective Security

    This is a complete overview of Zero Trust. Learn about Zero Trust and how to implement it with this in-depth post.

    Abi Tyas Tunggal
    • Cybersecurity
    • Attack Surface Management
    • Third-Party Risk Management
    • Data Breaches

    What is Defense in Depth?

    Defense in depth is a cyber security strategy that uses a series of layered, redundant defensive measures to protect sensitive data, PII and other assets.

    Abi Tyas Tunggal
    • Attack Surface Management
    • Cybersecurity

    The Email Security Checklist

    This 13 step checklist will protect your users, your email servers and your reputation against the most common types of attacks on the internet.

    UpGuard Team
    • Cybersecurity
    • Attack Surface Management

    What is the Principle of Least Privilege?

    The principle of least privilege (POLP) is the practice of limiting access rights for users, accounts and computing processes to only those needed.

    Abi Tyas Tunggal
    • Cybersecurity
    • Attack Surface Management

    What is HSTS (HTTP Strict Transport Security)?

    This is a complete overview of the HTTP Strict Transport Security. Learn about what HSTS is and why it is important in this in-depth post.

    Abi Tyas Tunggal

Sign up for our newsletter

UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.

Free instant security score

How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.
Website Security scan results table Cyber security rating score 850 out of 950