##### Technical Writer # Caitlin Postal * [](#) * [](#) * [](#) * [](#) * [](#) * [](#) Caitlin is a technical writer at UpGuard. Previously, she worked at DigitalOcean and taught at the University of Washington. ## Latest from Caitlin Postal Learn more about the latest issues in cybersecurity. [Email Messaging Protocols and Port Exposure](/blog/message-protocol-ports) #### [Email Messaging Protocols and Port Exposure](/blog/message-protocol-ports) Learn more about email messaging protocols and how to protect exposed ports. [](/team/caitlin-postal) [Caitlin Postal](#) July 3, 2025 [Internet of Risks: Cybersecurity Risk in the Internet of Things](/blog/iot-port-risk) #### [Internet of Risks: Cybersecurity Risk in the Internet of Things](/blog/iot-port-risk) With the continuing development of the Internet of Things come new attack surfaces and cybersecurity risk directly related to the IoT. [](/team/caitlin-postal) [Caitlin Postal](#) July 3, 2025 [Scaling Third-Party Risk Management Despite the Odds](/blog/tprm-despite-the-odds) #### [Scaling Third-Party Risk Management Despite the Odds](/blog/tprm-despite-the-odds) Use this guide to help you evaluate how to scale your vendor management program in an ever-changing cyber risk landscape. [](/team/caitlin-postal) [Caitlin Postal](#) November 18, 2024 [Programmable Logic Controllers and Cybersecurity Risk](/blog/plc-risk) #### [Programmable Logic Controllers and Cybersecurity Risk](/blog/plc-risk) Safety and security are critical when using programmable logic controllers for industrial manufacturing and critical infrastructure. [](/team/caitlin-postal) [Caitlin Postal](#) December 1, 2025 [Critical Authentication Bypass Vulnerability in ScreenConnect (CVE-2024-1709)](/blog/screenconnect-cve-2024) #### [Critical Authentication Bypass Vulnerability in ScreenConnect (CVE-2024-1709)](/blog/screenconnect-cve-2024) Cybercriminals can chain vulnerabilities in ScreenConnect, leveraging authentication bypass first and then moving through the system with path traversal. [](/team/caitlin-postal) [Caitlin Postal](#) July 3, 2025 [A Grim Outlook for Microsoft with MonikerLink and Exchange Vulnerabilities](/blog/microsoft-monikerlink-exchange-cve2024) #### [A Grim Outlook for Microsoft with MonikerLink and Exchange Vulnerabilities](/blog/microsoft-monikerlink-exchange-cve2024) Dual vulnerabilities allow remote code execution, leaked credentials, and privilege escalation among Microsoft Outlook and Microsoft Exchange Server. [](/team/caitlin-postal) [Caitlin Postal](#) July 3, 2025 [VPN Security Concerns in 2026](/blog/vpn-risk) #### [VPN Security Concerns in 2026](/blog/vpn-risk) VPN internet connections protect web traffic through an encrypted tunnel, keeping sensitive data from interception. So what are the risks? [](/team/caitlin-postal) [Caitlin Postal](#) December 28, 2025 [Don't Git Attacked: How Git Protects Against Source Code Exposure](/blog/git-risk) #### [Don't Git Attacked: How Git Protects Against Source Code Exposure](/blog/git-risk) Git is widely used for version control of production code across industry sectors. Keep your repositories and your applications protected. [](/team/caitlin-postal) [Caitlin Postal](#) July 10, 2025 [Hackers Ready to Go Anywhere with Critical Vulnerability in GoAnywhere MFT (CVE-2024-0204)](/blog/goanywhere-cve-2024) #### [Hackers Ready to Go Anywhere with Critical Vulnerability in GoAnywhere MFT (CVE-2024-0204)](/blog/goanywhere-cve-2024) A critical authentication bypass exploit in the GoAnywhere MFT software allows unauthorized users to create admin users and bypass authentication. [](/team/caitlin-postal) [Caitlin Postal](#) July 3, 2025 [DNS Security Extensions (DNSSEC) and Cybersecurity Risk](/blog/dnssec-risk) #### [DNS Security Extensions (DNSSEC) and Cybersecurity Risk](/blog/dnssec-risk) DNSSEC creates additional security for your domain, protecting against a variety of DNS-related attacks. [](/team/caitlin-postal) [Caitlin Postal](#) October 21, 2026 [Remote Access and Cybersecurity Exposure](/blog/remote-access) #### [Remote Access and Cybersecurity Exposure](/blog/remote-access) Remote access is a powerful tool for configuration and system management, but it also introduces new risks around unauthorized access and unsecured network [](/team/caitlin-postal) [Caitlin Postal](#) July 3, 2025 [Connect Secure No More: Ivanti's Zero-Day Vulnerabilities (CVE-2024-21887 and CVE-2023-46805)](/blog/ivanti-csps-cve-2024) #### [Connect Secure No More: Ivanti's Zero-Day Vulnerabilities (CVE-2024-21887 and CVE-2023-46805)](/blog/ivanti-csps-cve-2024) Two chainable zero-day vulnerabilities face Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS): CVE-2023-46805 and CVE-2024-21887. [](/team/caitlin-postal) [Caitlin Postal](#) November 18, 2024 1 / 4 [Next](?1d3d3839_page=2) ## Cybersecurity & Risk Management Blog Learn more about the latest issues in cybersecurity. #### [Find Out if You're Exposed on the Dark Web](/blog/find-out-if-youre-exposed-on-the-dark-web) Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure. [](/team/lance-turner) [Lance Turner](#) October 14, 2026 #### [12 Cybersecurity Horror Stories of 2026 (No Costume Required)](/blog/cybersecurity-horror-stories-2026) A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news. [](/team/revashni-moodley) [Revashni Moodley](#) October 14, 2026 #### [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape) UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why. [](/team/cassy-van-eeden) [Cassy van Eeden](#) October 18, 2026 #### [Your First Dark Web Scan Report, Explained](/blog/your-first-dark-web-scan-report-explained) You scanned your domain. What do the results mean? [](/team/lance-turner) [Lance Turner](#) October 11, 2026 #### [We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.](/blog/ai-evidence-analysis-tools-for-tprm) We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four. [](/team/cassy-van-eeden) [Cassy van Eeden](#) September 29, 2026 #### [Good Security Rating? Your Dark Web Exposure Says Otherwise](/blog/good-security-rating-your-dark-web-exposure-says-otherwise) Scan your domain to see just how exposed you are on the Dark Web. [](/team/lance-turner) [Lance Turner](#) October 11, 2026 [All blog posts](/blog) ## Cybersecurity & Risk Management Library The ultimate guide to attack surface and third-party risk management – actionable advice for security teams, managers, and executives. ### [Breaches](/breaches) Security research and global news about data breaches. Explore resources ### [Third-party risk management](/category/third-party-risk-management) Articles, news, and research on third-party risk management. Explore resources ### [Attack Surface Management](/category/attack-surface-management) Articles, news, and research on attack surface management. Explore resources ### [Cybersecurity](/category/cybersecurity) Articles, news, and research on cybersecurity. Explore resources Experience superior visibility and a simpler approach to cyber risk management [Get a demo](/contact-sales) [Free trial](/demo)