.jpg){kind=avatar}
Human Cyber Risk
The Architecture of an AI-Powered Breach: The Shadow Supply Chain
Decode three real-world AI breaches. Learn how Shadow AI pipelines bypass security and how real-time browser guidance can stop data leaks.
Read more
Shane Moosa
July 6, 2026
Decoding the Copilot Ecosystem
Don't let Copilot extend its permission sprawl. Learn the structural risks of M365 and GitHub Copilot, and how to enforce real-time browser guardrails.
Read more
Shane Moosa
July 6, 2026
Governing Excessive Agency in the Anthropic Ecosystem
Agentic AI is moving fast. Learn how to govern Claude safely, neutralize Excessive Agency, and enforce real-time browser-level guardrails.
Read more
Shane Moosa
July 6, 2026
The 2026 Enterprise AI Security Index
Cut through the marketing hype. Uncover the architectural risks, data defaults, and vulnerabilities of leading AI models in our AI Security Index.
Read more
Shane Moosa
July 6, 2026
Shadow IT: Tiering the Unseen to Manage Vendor Risk
Invisible apps become riskier with time. Use real-time user signals to categorize every vendor in your ecosystem based on its true risk profile.
Read more
.jpeg){kind=avatar}
Revashni Moodley
July 1, 2026
The Shadow Supply Chain: A Pivot To Usage-Based Discovery
Pivot from "purchase-based" to usage-based discovery. See how browser telemetry and identity logs work together to secure your true vendor footprint.
Read more
Shane Moosa
July 2, 2026
The Shadow Supply Chain: The SSO & AI Visibility Gap
Is your SSO enough? 31.4% of vendor interactions bypass identity logs. Discover how Shadow AI and direct logins redefine vendor visibility.
Read more
Shane Moosa
July 2, 2026
What is Shadow IT?
Explore more on what Shadow IT is, its examples, risks, and the rapid rise of Shadow AI. Learn how mid-market teams are bridging the visibility gap.
Read more
Edward Kost
April 16, 2026
Emerging Risks: Typosquatting in the MCP Ecosystem
The MCP server ecosystem is susceptible to brand impersonation for both local and remote servers.
Read more
.jpeg){kind=avatar}
Greg Pollock
July 2, 2026
YOLO Mode: Hidden Risks in Claude Code Permissions
Developers are frequently granting Claude Code permission to download, execute, and delete code, creating fertile ground for prompt injection attacks.
Read more
Greg Pollock
January 16, 2026
Solving Human Risk: Build a Measurable, Security-First Culture
Turn your workforce into your first line of defense. Learn how User Risk builds a measurable, security-first culture and secures your human layer.
Read more
Shane Moosa
July 2, 2026
Solving Human Risk: Automate Governance and Prioritize Action
Visibility is not enough. Discover how User Risk empowers automated governance and drives immediate action by prioritizing human risk data.
Read more
Shane Moosa
July 2, 2026
Solving Human Risk: Close the Visibility Gap
Don't fly blind. In this blog, we expose the full scope of human risk visibility challenges and explore how User Risk provides the tools to address them.
Read more
Shane Moosa
July 2, 2026
Uncovering the Shadow AI Paradox
Our research into the motives of shadow AI user led to surprising discoveries.
Read more
Greg Pollock
July 2, 2026
The User Risk Puzzle: Why Your Security Tools Don't Add Up
Struggling to manage user risk at your organization? Discover how to unify fragmented security data for a clear, cohesive view and stronger defense.
Read more
Leah Sadoian
July 2, 2026
Why Your Organization's Security Awareness Training Isn't Working
Is your security awareness training failing to stop modern threats? Learn why traditional methods fail and how to build a stronger human risk strategy.
Read more
Leah Sadoian
June 18, 2025
Sign up for our newsletter
UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.
Free instant security score
How secure is your organization?
Request a free cybersecurity report to discover key risks on your website, email, network, and brand.
Instant insights you can act on immediately- Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities
