Release notes

# NIST AI Risk Management Framework (AI RMF) security questionnaire

Toby Roger November 7, 2024

We’ve launched a new questionnaire designed to evaluate an organization’s compliance with the [NIST AI RMF](https://www.upguard.com/blog/the-nist-ai-risk-management-framework). This security questionnaire offers a structured framework for effectively assessing the risks associated with AI systems. It covers the core functions of the NIST AI RMF—governing, mapping, measuring, and managing AI systems—ensuring that vendors uphold best practices in AI governance and operational management.

### Expanded news and incident coverage

We’ve greatly enhanced our news and incident scanning capabilities, now delivering five times broader coverage to provide faster, high-impact insights. This empowers your security teams and SOC analysts to detect incidents affecting your organization or supply chain sooner, enabling proactive responses to mitigate risks early. With an expanded range of advanced data collectors, including official reports and government databases, we now offer a more comprehensive view of emerging threats to fortify your security posture.

### Other improvements

* This release includes small improvements to Trust Exchange, including a new home page for free users, and improvements to notifications.

* We’ve added product and version detection for the Roundcube email client to detect the following vulnerabilities:some text

  * [CVE-2024-42008](https://nvd.nist.gov/vuln/detail/CVE-2024-42008) - A cross-site scripting flaw via a malicious email attachment served with a dangerous Content-Type header
  * [CVE-2024-42009](https://nvd.nist.gov/vuln/detail/CVE-2024-42009) - A cross-site scripting flaw that arises from post-processing of sanitized HTML content
  * [CVE-2024-42010](https://nvd.nist.gov/vuln/detail/CVE-2024-42010) - An information disclosure flaw that stems from insufficient CSS filtering

* This release includes a number of bug fixes.

[View all release notes](/releases)

## UpGuard Release Notes

Learn about new features, changes, and improvements to UpGuard.

### Security Profile citations now include source control references

Mark Barber October 6, 2026

[Read more](/releases/security-profile-citations-now-include-source-control-references)

### Threat Posture: an executive view of external threat activity

Mark Barber September 22, 2026

[Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity)

### Brand impersonation detection across mobile app stores

Mark Barber September 9, 2026

[Read more](/releases/brand-impersonation-detection-across-mobile-app-stores)

### Clearer citations and timeline for Security Profile checks

Mark Barber August 26, 2026

[Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks)

### Subprocessors in Trust Center

Mark Barber August 12, 2026

[Read more](/releases/subprocessors-in-trust-center)

### Cloud and core infrastructure frameworks in Security Profile

Mark Barber July 29, 2026

[Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile)

### Complete questionnaires without closing remediation

Mark Barber July 15, 2026

[Read more](/releases/complete-questionnaires-without-closing-remediation)

### Company name aliases for smarter detection

Mark Barber July 1, 2026

[Read more](/releases/company-name-aliases-for-smarter-detection)

[View all release notes](/releases)

### See UpGuard In Action

Book a free, personalized onboarding call with one of our cybersecurity experts.

[Free trial](https://www.upguard.com/demo)

[Get a demo](https://www.upguard.com/contact-sales)

Free instant security score

## How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

* Instant insights you can act on immediately
* Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

[Free score](https://www.upguard.com/instant-security-score?)