Resources

Risks and Vulnerabilities

These articles focus on specific risk findings and vulnerabilities. Learn how to resolve and mitigate common issues facing your organization.

Featured post

  • Risks and Vulnerabilities

25 Security Vulnerabilities That Have Defined the 2020s (Thus Far)

From Log4j to SolarWinds, discover the 25 critical security vulnerabilities that have reshaped cybersecurity thus far in the 2020s.

Nicholas Sollitto

Risks and Vulnerabilities

    • Risks and Vulnerabilities

    How Diffie-Hellman Key Exchange Provides Encrypted Communications

    The Diffie-Hellman key exchange is a method for agreeing to and calculating a secret symmetric key between parties on a public network.

    Caitlin Postal
    • Risks and Vulnerabilities

    Exposed Server Headers and Cybersecurity Risk

    Your HTTP response header carries server information. If exposed, that server information can increase your attack surface.

    Caitlin Postal
    • Risks and Vulnerabilities

    DMARC Configuration Risks

    Implementing a DMARC policy protects your email recipients, while maintaining your domain and brand credibility.

    Caitlin Postal
    • Risks and Vulnerabilities

    LDAP Cybersecurity Risks and Prevention Techniques

    LDAP provides communication with data, including sensitive data like user credentials, so take proactive security measures.

    Caitlin Postal
    • Risks and Vulnerabilities

    Your Database Exposure Risk

    You use a database management system to interact with your stored data, so it's critical to implement security features that protect the DBMS and any data.

    Caitlin Postal
    • Risks and Vulnerabilities

    Your WordPress Data Exposure Risks

    43% of all websites are built in WordPress, and custom sites rely on plugins and themes that can be attack vectors.

    Caitlin Postal
    • Risks and Vulnerabilities

    The SysAid Zero-Day Vulnerability: CVE-2023-47246

    SysAid on-premises software faces a zero-day vulnerability for path traversal, currently tracked as CVE-2023-47246.

    Caitlin Postal
    • Risks and Vulnerabilities

    How Tracking Pixels Impact Cybersecurity

    Tracking pixels are a powerful way to aggregate user behaviors, but they can also become a siphon for data leaks.

    Caitlin Postal
    • Risks and Vulnerabilities

    How to Resolve SSL Configuration Risks

    A misconfigured SSL certificate puts communication at risk, whereas a revoked certificate could render the site inaccessible to most browsers.

    Caitlin Postal
    • Risks and Vulnerabilities

    What is a Content Security Policy (CSP)?

    The Content Security Policy is a standard to prevent cross-site scripting attacks (XSS), clickjacking, packet sniffing, and malicious code injection.

    Caitlin Postal
    • Risks and Vulnerabilities

    Cisco's Zero-Day Vulnerability (CVE-2023-20198)

    CVE-2023-20198 is a critical, unpatched vulnerability impacting Internet-facing Cisco IOS XE devices.

    Caitlin Postal
    • Risks and Vulnerabilities

    Your Sender Policy Framework (SPF) Risk Exposure

    If you do not set up an SPF record, untrustworthy emails from unauthorized sources can be sent to your employees and customers, seemingly from your domain.

    Caitlin Postal
    • Risks and Vulnerabilities

    Atlassian Confluence Zero-Day Vulnerability: What Is CVE-2023-25515?

    CVE-2023-22515 is a privilege escalation and broken access control vulnerability affecting Confluence Data Center and Confluence Server.

    Caitlin Postal
    • Risks and Vulnerabilities

    What is CVE-2023-4863? Google's libwebp at risk

    A major vulnerability in the libwebp library puts web users at risk of remote code execution.

    Caitlin Postal
    • Risks and Vulnerabilities

    What is a Remote Access Trojan (RAT)?

    UpGuard Breach Risk provides continuous monitoring and automated scanning for potential threats, including exposed ports that known RATs can exploit.

    Caitlin Postal
    • Risks and Vulnerabilities

    How to Fix Your Domain Name Registrar Issues

    Secure your domain against common findings related to your domain name registration.

    Caitlin Postal

Sign up for our newsletter

UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.

Free instant security score

How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.
Website Security scan results table Cyber security rating score 850 out of 950