Introducing the Vendor Risk digest

To help you keep on top of your vendor risk management, we’ve introduced the Vendor Risk digest, a monthly email highlighting key information related to your vendor portfolio in UpGuard. The email includes team activity such as risk assessments, remediations and questionnaires, and changes to vendor risk profile, highlighting key risk areas.

All full-access users will receive the digest monthly by default. This can be configured in Manage Notifications.

New vulnerability detections added

We’ve added detections for Jenkins and TeamCity instances and any vulnerabilities associated with their respective product versions to protect against ongoing campaigns against CI/CD infrastructure.

Added IP reputation data to Typosquatting

To help identify malicious domains impersonating your brand, we have enhanced the Typosquatting module to show whether those domains or IP addresses have been flagged by DNS blocklists. This information provides a strong signal that these similar domains are used by malicious actors.

Infostealer malware alerts added to Identity Breaches

Employee credentials can be stolen when their devices are infected with malware. We’ve added the option for alerts for this kind of event to Identity Breaches, included with Professional, Corporate, and Enterprise plans.

Other improvements

• We’ve added an Export to the Detected Products pages in BreachSight.
• To make it easier for you to tag and identify historical reports we’ve added the ability to re-name generated reports. To learn more see Reporting in UpGuard
• We’ve added more flexibility to user permissions, by adding the option for portfolio restricted users to have access to the questionnaire builder. This is controlled by setting permissions in the user settings and is set to off by default.
• AI Autofill is now available on more questionnaire types.
• Duplicate document detection has been added to the Content Library, to make it easier to manage your security documentation.
• Shared Profile users can now add an “Other” category for their Trust & Security Pages.
• We have updated our Platform Terms & Conditions and Subprocessors to better reflect the services we provide.
• This release also includes a number of bug fixes