Resources [Blog ](/blog)[Events ](/events)[Breaches ](/breaches)[Resources ](/resources)[News](/news) # Human Cyber Risk Articles explaining human cyber risks and their impact on cybersecurity. Categories * [View all](/blog) * [Attack Surface Management](/category/attack-surface-management) * [Company news](/category/company-news) * [Compliance and Regulations](/category/compliance-and-regulations) * [Cyber Risk Posture Management](/category/cyber-risk-posture-management) * [Cybersecurity](/category/cybersecurity) * [Data Breaches](/category/data-breaches) * [DevOps](/category/devops) * [Human Cyber Risk](/category/human-cyber-risk) * [Risk Automations](/category/risk-automations) * [Risks and Vulnerabilities](/category/risks-and-vulnerabilities) * [Third-Party Risk Management](/category/third-party-risk-management) * [Trust Exchange](/category/trust-exchange) * [Vendor Risk Management](/category/vendor-risk-management) ## Featured post * Human Cyber Risk ## [How User Risk Finds the Shadow AI Outside Your Directory](/blog/find-shadow-ai-outside-your-directory) Your directory shows the AI tools you approved. Here’s how User Risk finds the ones in your browsers that it doesn’t, before an auditor asks. Shane Moosa October 29, 2026 ## Human Cyber Risk * * Human Cyber Risk ### [Best Shadow AI Governance Tools for Enterprises: Buyer's Shortlist](/blog/best-shadow-ai-tools) Compare top shadow AI governance tools for enterprises, covering key capabilities and how to shortlist the right platform for your organization. Shane Moosa September 7, 2026 * * Human Cyber Risk ### [Human Risk Management Platforms: How to Choose the Right Software](/blog/best-human-risk-management-platforms) Protect your workforce with human risk management software that fits. Compare 10 platforms, the features that matter, and how to choose the right one. Shane Moosa August 31, 2026 * * Human Cyber Risk * Compliance and Regulations ### [AI Assurance: The Third Head of Your AI Governance Watchdog](/blog/ai-governance-to-ai-assurance) AI governance needs three things: policy, enforcement, and assurance. Most organizations have built the first two. Here's why the third one matters now. Shane Moosa October 29, 2026 * * Human Cyber Risk ### [How to Mitigate Human Risk in Cybersecurity: A Practical Framework](/blog/how-to-mitigate-human-risk) Security awareness training alone isn't human risk management. Use this seven-step framework to discover, govern, and coach workforce behavior. Shane Moosa August 25, 2026 * * Human Cyber Risk ### [Best AI Governance Platforms and Software (2026 Comparison)](/blog/best-ai-governance-platforms) Compare the top AI governance platforms of 2026 and find the right fit for your workforce and compliance needs. Shane Moosa August 10, 2026 * * Human Cyber Risk ### [The Architecture of an AI-Powered Breach: The Shadow Supply Chain](/blog/ai-powered-breach-and-the-shadow-supply-chain) Decode three real-world AI breaches. Learn how Shadow AI pipelines bypass security and how real-time browser guidance can stop data leaks. Shane Moosa July 6, 2026 * * Human Cyber Risk ### [Decoding the Copilot Ecosystem](/blog/the-copilot-ecosystem) Don't let Copilot extend its permission sprawl. Learn the structural risks of M365 and GitHub Copilot, and how to enforce real-time browser guardrails. Shane Moosa October 29, 2026 * * Human Cyber Risk ### [Governing Excessive Agency in the Anthropic Ecosystem](/blog/governing-agency-in-the-anthropic-ecosystem) Agentic AI is moving fast. Learn how to govern Claude safely, neutralize Excessive Agency, and enforce real-time browser-level guardrails. Shane Moosa October 29, 2026 * * Human Cyber Risk ### [The 2026 Enterprise AI Security Index](/blog/enterprise-ai-security-index) Cut through the marketing hype. Uncover the architectural risks, data defaults, and vulnerabilities of leading AI models in our AI Security Index. Shane Moosa October 29, 2026 * * Vendor Risk Management * Human Cyber Risk ### [Shadow IT: Usage-Based Tiering for Vendor Risk](/blog/shadow-it-tiering-vendor-risk) How UpGuard User Risk and Vendor Risk use real-time usage signals to discover shadow IT and tier every app by true risk profile in 2026. Cassy van Eeden October 20, 2026 * * Human Cyber Risk ### [The Shadow Supply Chain: A Pivot To Usage-Based Discovery](/blog/the-pivot-to-usage-based-discovery) Pivot from "purchase-based" to usage-based discovery. See how browser telemetry and identity logs work together to secure your true vendor footprint. Shane Moosa July 2, 2026 * * Human Cyber Risk ### [The Shadow Supply Chain: The SSO & AI Visibility Gap](/blog/the-sso-visibility-gap) Is your SSO enough? 31.4% of vendor interactions bypass identity logs. Discover how Shadow AI and direct logins redefine vendor visibility. Shane Moosa August 25, 2026 * * Human Cyber Risk ### [The Shadow Supply Chain: A 72.9% Gap In Your Vendor Inventory](/blog/the-gap-in-your-vendor-inventory) Your real vendor inventory is 8x larger than your official list. Discover how user behavior creates a hidden shadow supply chain that legacy tools miss. Shane Moosa July 2, 2026 * * Human Cyber Risk * Attack Surface Management ### [Shadow IT Solutions: Tools to Discover and Manage Unsanctioned Apps](/blog/shadow-it) Your SSO logs only tell half the story. Learn what shadow IT is, how discovery tools compare, and how teams are closing the gap without banning apps. Edward Kost September 23, 2026 * * Human Cyber Risk ### [Emerging Risks: Typosquatting in the MCP Ecosystem](/blog/typosquatting-in-the-mcp-ecosystem) The MCP server ecosystem is susceptible to brand impersonation for both local and remote servers. Greg Pollock July 2, 2026 * * Human Cyber Risk ### [YOLO Mode: Hidden Risks in Claude Code Permissions](/blog/yolo-mode-hidden-risks-in-claude-code-permissions) Developers are frequently granting Claude Code permission to download, execute, and delete code, creating fertile ground for prompt injection attacks. Greg Pollock October 29, 2026 1 / 2 [Next](/category/human-cyber-risk?page=2) ## Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?)