Articles, news, and research on cybersecurity.
A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news.
WannaCry is a ransomware cryptoworm cyber attack that targets computers running the Microsoft Windows operating system.
The cyber kill chain maps the stages of a cyberattack. Understanding it can help prevent security breaches, and advanced persistent attacks (APTs).
This is a complete overview of cyber resilience. Learn how to make your organization more cyber resilient in this in-depth post.
This is a complete guide to security ratings and common use cases. Learn why security and risk management teams have adopted security ratings in this post.
This is a complete guide to the best cybersecurity and information security websites and blogs. Learn where CISOs and senior management stay up to date.
Common Vulnerabilities and Exposures (CVE) is a list of publicly disclosed information security vulnerabilities and exposures.
A man-in-the-middle attack (MITM attack) is a cyber attack where an attacker relays and possibly alters communication between two parties.
The CIS Critical Security Controls are a prioritized set of actions that form a defense-in-depth set of best practices to prevent common cyber attacks.
A data breach is the intentional or unintentional release of secure or private/confidential information to an untrusted environment.
Domain-based Message Authentication, Reporting & Conformance is an email authentication protocol designed to protect your organization from email spoofing.
This is a complete overview of vulnerability assessments. Learn how to conduct a vulnerability assessment for your organization in this in-depth post.
Learn more about typosquatting, what it is, how it works, and how to protect your business. Explore legal strategies, tools, and real-world examples here.
Malware, or malicious software, is any program or file that is harmful to a computer user.
Personally identifiable information (PII) is data that could identify a specific individual. Learn how to protect this critical category of data.
Indicators of compromise (IOCs) are pieces of forensic data, such as system log entries, system files or network traffic that identify malicious activity.
A zero-day (0-day) is an unpatched security vulnerability that is previously unknown to the software, hardware or firmware producer.
UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.
