##### Senior Cybersecurity Writer # Edward Kost * [](#) * [](https://www.linkedin.com/in/edward-kost/) * [](#) * [](#) * [](#) * [](#) Edward Kost is a senior cybersecurity writer at UpGuard. He is skilled in translating complex cybersecurity technical concepts into clear, accessible writing. His ability to understand these concepts is supported by his Mechanical Engineering background and his experience in tracking process alignment with financial regulations at one of the "Big 4" Australian banks. Outside of work, Ed enjoys writing comedy skits and eating wild-caught Atlantic salmon. ### Expertise Edward's expertise is in cybersecurity content production and translating complex technical concepts into clear, authoritative writing. His ability to analyze complex cyber incidents is demonstrated in his post-mortems on major events like the [Optus data breach](https://www.upguard.com/blog/how-did-the-optus-data-breach-happen). His work covers a wide range of advanced topics, including supply chain attacks, ransomware, data breaches, and third-party risk. His direct experience with banking regulatory requirements further reinforces this technical writing. ### Expereince Edward's analysis has been widely referenced by reputable publications, academic institutions, and government bodies. His comprehensive reports and articles on cybersecurity incidents and data breaches have been cited in Australian government submissions, such as the Parliament of Australia's i[nquiry into the Optus data breach](https://www.aph.gov.au/Parliamentary_Business/Committees/Senate/Environment_and_Communications/OptusNetworkOutage/Report/Chapter_3_-_Optus_response_to_the_network_outage), the [Office of the Information Commissioner Queensland](https://www.oic.qld.gov.au/__data/assets/pdf_file/0008/59255/Data-breach-response-plan-report.pdf); as well as international government bodies, such as the [Pacific Northwest National Laboratory](https://www.pnnl.gov/sites/default/files/media/file/Final%20CySCRM%20Proceedings.pdf). His work is also used in academic and legal research, having been referenced in papers by [Seton Hall University](https://scholarship.shu.edu/cgi/viewcontent.cgi?article=2491\&context=student_scholarship) and [ResearchGate](https://www.researchgate.net/publication/390470398_Data_Encryption_and_Privacy_in_Modern_Financial_Systems_A_Technical_Deep_Dive). His cybersecurity writing and analysis are regularly featured or referenced in major news and technology outlets, including: * [Apple](https://www.apple.com/newsroom/pdfs/The-Continued-Threat-to-Personal-Data-Key-Factors-Behind-the-2023-Increase.pdf) * [Procurious](https://www.procurious.com/procurement-news/5-ways-to-protect-digital-supply-chain#:~:text=If%20you%20give%20vendors%20any%20kind%20of%20digital%20access%2C%20you%20are%20at%20risk%20of%20a%20security%20breach%2C%20writes%20Edward%20Kost%20from%20UpGuard%20%E2%80%93%20a%20third%2Dparty%20risk%20management%20platform.%C2%A0) * [Cybersecurity Insiders](https://www.cybersecurity-insiders.com/what-is-dll-hijacking-the-windows-exploit-endangering-your-sensitive-data/) * [A Ransomware Task Force WhitePaper by the Institute for Security and Technology](https://securityandtechnology.org/wp-content/uploads/2021/09/IST-Ransomware-Task-Force-Report.pdf) ### Education Edward earned his Mechanical Engineering degree at the University of New South Wales, Australia. ## Latest from Edward Kost Learn more about the latest issues in cybersecurity. [Introducing Subprocessor listing in Trust Center profiles](/blog/introducing-subprocessor-listing-in-trust-center-profiles) #### [Introducing Subprocessor listing in Trust Center profiles](/blog/introducing-subprocessor-listing-in-trust-center-profiles) Publish your subprocessors in your UpGuard Trust Center, keep the list current, and let customers subscribe to changes. [](/team/edward-kost) [Edward Kost](#) September 8, 2026 [How to Choose Trust Center Software](/blog/how-to-choose-trust-center-software) #### [How to Choose Trust Center Software](/blog/how-to-choose-trust-center-software) Compare trust center software on the capabilities that matter: NDA gating, watermarks, access logs, and two-sided answering. Plus a vendor checklist for 20 [](/team/edward-kost) [Edward Kost](#) September 1, 2026 [AI Security Questionnaire Software (2026 Guide)](/blog/ai-security-questionnaire-software) #### [AI Security Questionnaire Software (2026 Guide)](/blog/ai-security-questionnaire-software) Compare AI security questionnaire software with this buyer's guide. Key criteria, red flags, and vendor comparisons to help you avoid choosing the wrong to [](/team/edward-kost) [Edward Kost](#) September 1, 2026 [Stop chasing your team for security questionnaire answers](/blog/stop-chasing-your-team-for-security-questionnaire-answers) #### [Stop chasing your team for security questionnaire answers](/blog/stop-chasing-your-team-for-security-questionnaire-answers) If you work in sales, you know the frustrations of chasing departments for help with questionnaire responses. Learn the faster and more calming approch. [](/team/edward-kost) [Edward Kost](#) August 19, 2026 [What Is Sales Enablement? A Guide for Security and Compliance Teams](/blog/what-is-sales-enablement) #### [What Is Sales Enablement? A Guide for Security and Compliance Teams](/blog/what-is-sales-enablement) Discover why security reviews are the hidden sales enablement bottleneck, and learn a strategy for overcoming this hurdle to accelerate deal velocity. [](/team/edward-kost) [Edward Kost](#) June 24, 2026 [What Is an RFP Response? A Guide for Security and GRC Teams](/blog/what-is-an-rfp-response-a-guide-for-security-and-grc-teams) #### [What Is an RFP Response? A Guide for Security and GRC Teams](/blog/what-is-an-rfp-response-a-guide-for-security-and-grc-teams) Stop letting the RFP security section bottleneck your sales. Learn how GRC teams can streamline response workflows, map controls, and close deals faster [](/team/edward-kost) [Edward Kost](#) June 24, 2026 [Shadow IT Solutions: Tools to Discover and Manage Unsanctioned Apps](/blog/shadow-it) #### [Shadow IT Solutions: Tools to Discover and Manage Unsanctioned Apps](/blog/shadow-it) Your SSO logs only tell half the story. Learn what shadow IT is, how discovery tools compare, and how teams are closing the gap without banning apps. [](/team/edward-kost) [Edward Kost](#) September 23, 2026 [Cyber TPRM vs Compliance TPRM: Which is right for you?](/blog/cyber-tprm-vs-compliance-tprm) #### [Cyber TPRM vs Compliance TPRM: Which is right for you?](/blog/cyber-tprm-vs-compliance-tprm) Cyber TPRM and compliance TPRM answer different questions and serve different buyers. Learn how to tell them apart and decide which is best for you. [](/team/edward-kost) [Edward Kost](#) April 13, 2026 [Announcing Risk Automations: From Discovery to Resolution In Seconds](/blog/announcing-risk-automations-by-upguard) #### [Announcing Risk Automations: From Discovery to Resolution In Seconds](/blog/announcing-risk-automations-by-upguard) Learn about UpGuard's new product launch. Transform your risk resolution engine by moving from alert to resolution in seconds, not days. [](/team/edward-kost) [Edward Kost](#) March 3, 2026 [Understanding and Mitigating CVE-2025-55182 (React2Shell)](/blog/understanding-and-mitigating-cve-2025-55182-react2shell) #### [Understanding and Mitigating CVE-2025-55182 (React2Shell)](/blog/understanding-and-mitigating-cve-2025-55182-react2shell) CVE-2025-55182 is a critical unauthenticated RCE in React Server Components (CVSS 10.0). Check if your Next.js or React 19 app is vulnerable and patch now. [](/team/edward-kost) [Edward Kost](#) December 12, 2025 [NIST compliance in 2026: A complete implementation guide](/blog/nist-compliance) #### [NIST compliance in 2026: A complete implementation guide](/blog/nist-compliance) NIST compliance ensures alignment with leading cybersecurity frameworks. Explore how the NIST standards can safeguard sensitive data and manage third-party [](/team/edward-kost) [Edward Kost](#) December 28, 2025 [Grounded: The ARINC vMUSE Attack Disrupting Multiple Airports](/blog/the-arinc-vmuse-attack-disrupting-multiple-airports) #### [Grounded: The ARINC vMUSE Attack Disrupting Multiple Airports](/blog/the-arinc-vmuse-attack-disrupting-multiple-airports) A ransomware attack on a single vendor grounded flights across Europe. We take a look at the critical failures that made it possible. [](/team/edward-kost) [Edward Kost](#) September 8, 2026 1 / 19 [Next](?1d3d3839_page=2) ## Cybersecurity & Risk Management Blog Learn more about the latest issues in cybersecurity. #### [Find Out if You're Exposed on the Dark Web](/blog/find-out-if-youre-exposed-on-the-dark-web) Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure. [](/team/lance-turner) [Lance Turner](#) October 14, 2026 #### [12 Cybersecurity Horror Stories of 2026 (No Costume Required)](/blog/cybersecurity-horror-stories-2026) A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news. [](/team/revashni-moodley) [Revashni Moodley](#) October 14, 2026 #### [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape) UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why. [](/team/cassy-van-eeden) [Cassy van Eeden](#) September 22, 2026 #### [Your First Dark Web Scan Report, Explained](/blog/your-first-dark-web-scan-report-explained) You scanned your domain. What do the results mean? [](/team/lance-turner) [Lance Turner](#) October 11, 2026 #### [We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.](/blog/ai-evidence-analysis-tools-for-tprm) We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four. [](/team/cassy-van-eeden) [Cassy van Eeden](#) September 29, 2026 #### [Good Security Rating? Your Dark Web Exposure Says Otherwise](/blog/good-security-rating-your-dark-web-exposure-says-otherwise) Scan your domain to see just how exposed you are on the Dark Web. [](/team/lance-turner) [Lance Turner](#) October 11, 2026 [All blog posts](/blog) ## Cybersecurity & Risk Management Library The ultimate guide to attack surface and third-party risk management – actionable advice for security teams, managers, and executives. ### [Breaches](/breaches) Security research and global news about data breaches. Explore resources ### [Third-party risk management](/category/third-party-risk-management) Articles, news, and research on third-party risk management. Explore resources ### [Attack Surface Management](/category/attack-surface-management) Articles, news, and research on attack surface management. Explore resources ### [Cybersecurity](/category/cybersecurity) Articles, news, and research on cybersecurity. Explore resources Experience superior visibility and a simpler approach to cyber risk management [Get a demo](/contact-sales) [Free trial](/demo)