Risks and Vulnerabilities
Protect Against HTTP Attacks with HTTPS Strict Transport Policy
Ensure your HTTPS Strict Transport Policy is configured properly to ensure secure communications.
Read more
Caitlin Postal
July 4, 2025
Your HTTPS Redirection Risk Exposure
Without encrypted communications, information transfer is not protected and sensitive data becomes vulnerable to attackers. Set up HTTPS redirection.
Read more
Caitlin Postal
July 4, 2025
How to Identify and Strengthen Weak SSL
If your server uses a weak SSL algorithm or an insecure SSL/TLS version, you'll need to update the system to protect your customers and your assets.
Read more
Caitlin Postal
November 16, 2025
How to Respond to Ivanti EPMM/MobileIron Vulnerabilities (CVE-2023-35078)
Identify if your assets are impacted by the Ivanti EPMM and MobileIron vulnerabilities (CVEs) and, if so, what actions to take next.
Read more
Caitlin Postal
January 16, 2025
What End-of-life Software Means for Your Business
Software with an end-of-life finding can lead to security vulnerabilities in your technical stack. Identify risks and coordinate updates for EOL software.
Read more
Caitlin Postal
January 16, 2025
What is the SSL Not Available Risk?
If your server does not have a valid SSL/TLS certificate installed and configured, your site will not be able to serve traffic using SSL/TLS encryption.
Read more
Caitlin Postal
January 16, 2025
What is SSL Certificate Expiration?
SSL/TLS certificates provide a critical security layer for encrypting traffic to your public web systems.
Read more
Caitlin Postal
January 16, 2025
How to Respond: CVE-2023-27997 (Fortigate SSL VPN)
Learn how to identify if you've been impacted by CVE-2023-27997 and, if you are, how to quickly secure your IT ecosystems from exploitation.
Read more
Edward Kost
January 7, 2025
The MOVEit Zero-Day Vulnerability: How to Respond
Learn how to protect your organization from the MOVEit Transfer Vulnerability before it's too late.
Read more
Edward Kost
July 11, 2025
Critical Microsoft Exchange Flaw: What is CVE-2021-26855?
Learn about the latest Microsoft Exchange zero-day exploits and the urgent actions required to protect your organization.
Read more
Edward Kost
July 4, 2025
Jira Security Vulnerability CVE-2019-11581
We analyzed a critical security vulnerability in Jira Server and Data Center (CVE-2019-11581) and found tens of thousands of affected servers.
Read more
.jpeg){kind=avatar}
Greg Pollock
July 25, 2025
Sign up for our newsletter
UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.
Free instant security score
How secure is your organization?
Request a free cybersecurity report to discover key risks on your website, email, network, and brand.
Instant insights you can act on immediately- Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities
