- Human Cyber Risk
How User Risk Finds the Shadow AI Outside Your Directory
Your directory shows the AI tools you approved. Here’s how User Risk finds the ones in your browsers that it doesn’t, before an auditor asks.
Shane Moosa
Featured post
Human Cyber Risk
-
- Human Cyber Risk
Best Shadow AI Governance Tools for Enterprises: Buyer's Shortlist
Compare top shadow AI governance tools for enterprises, covering key capabilities and how to shortlist the right platform for your organization.
Shane Moosa -
- Human Cyber Risk
Human Risk Management Platforms: How to Choose the Right Software
Protect your workforce with human risk management software that fits. Compare 10 platforms, the features that matter, and how to choose the right one.
Shane Moosa -
- Human Cyber Risk
- Compliance and Regulations
AI Assurance: The Third Head of Your AI Governance Watchdog
AI governance needs three things: policy, enforcement, and assurance. Most organizations have built the first two. Here's why the third one matters now.
Shane Moosa -
- Human Cyber Risk
How to Mitigate Human Risk in Cybersecurity: A Practical Framework
Security awareness training alone isn't human risk management. Use this seven-step framework to discover, govern, and coach workforce behavior.
Shane Moosa -
- Human Cyber Risk
Best AI Governance Platforms and Software (2026 Comparison)
Compare the top AI governance platforms of 2026 and find the right fit for your workforce and compliance needs.
Shane Moosa -
- Human Cyber Risk
The Architecture of an AI-Powered Breach: The Shadow Supply Chain
Decode three real-world AI breaches. Learn how Shadow AI pipelines bypass security and how real-time browser guidance can stop data leaks.
Shane Moosa -
- Human Cyber Risk
Decoding the Copilot Ecosystem
Don't let Copilot extend its permission sprawl. Learn the structural risks of M365 and GitHub Copilot, and how to enforce real-time browser guardrails.
Shane Moosa -
- Human Cyber Risk
Governing Excessive Agency in the Anthropic Ecosystem
Agentic AI is moving fast. Learn how to govern Claude safely, neutralize Excessive Agency, and enforce real-time browser-level guardrails.
Shane Moosa -
- Human Cyber Risk
The 2026 Enterprise AI Security Index
Cut through the marketing hype. Uncover the architectural risks, data defaults, and vulnerabilities of leading AI models in our AI Security Index.
Shane Moosa -
- Vendor Risk Management
- Human Cyber Risk
Shadow IT: Usage-Based Tiering for Vendor Risk
How UpGuard User Risk and Vendor Risk use real-time usage signals to discover shadow IT and tier every app by true risk profile in 2026.
Cassy van Eeden -
- Human Cyber Risk
The Shadow Supply Chain: A Pivot To Usage-Based Discovery
Pivot from "purchase-based" to usage-based discovery. See how browser telemetry and identity logs work together to secure your true vendor footprint.
Shane Moosa -
- Human Cyber Risk
The Shadow Supply Chain: The SSO & AI Visibility Gap
Is your SSO enough? 31.4% of vendor interactions bypass identity logs. Discover how Shadow AI and direct logins redefine vendor visibility.
Shane Moosa -
- Human Cyber Risk
The Shadow Supply Chain: A 72.9% Gap In Your Vendor Inventory
Your real vendor inventory is 8x larger than your official list. Discover how user behavior creates a hidden shadow supply chain that legacy tools miss.
Shane Moosa -
- Human Cyber Risk
- Attack Surface Management
Shadow IT Solutions: Tools to Discover and Manage Unsanctioned Apps
Your SSO logs only tell half the story. Learn what shadow IT is, how discovery tools compare, and how teams are closing the gap without banning apps.
Edward Kost -
- Human Cyber Risk
Emerging Risks: Typosquatting in the MCP Ecosystem
The MCP server ecosystem is susceptible to brand impersonation for both local and remote servers.
Greg Pollock -
- Human Cyber Risk
YOLO Mode: Hidden Risks in Claude Code Permissions
Developers are frequently granting Claude Code permission to download, execute, and delete code, creating fertile ground for prompt injection attacks.
Greg Pollock
