One of Japan’s biggest karaoke box operators has revealed a data breach at a supplier which it claims may have exposed personal information of over eight million customers. Daiichi Kosho has several popular brands including Big Echo, one of the… Read More "Karaoke Giant Reveals Data Breach Impacting Eight Million"
Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Open Certificate Authority (CA) Let’s Encrypt is taking the first step towards reducing the validity period of the certificates it issues. Beginning February 10, 2027, it will issue certificates with 64-day lifetimes by default, in preparation for 45-day lifetimes planned… Read More "Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch"
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings together commodity offensive tools like Cobalt Strike with an AI orchestration… Read More "CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records"
Grounded: The ARINC vMUSE Attack Disrupting Multiple Airports
The line between the digital and physical worlds blurs completely when a cyber attack results in widespread, tangible disruption. For thousands of travelers, this became a harsh reality when major European airports were forced to delay flights due to a… Read More "Grounded: The ARINC vMUSE Attack Disrupting Multiple Airports"
A CISO’s Guide to Defending Against Social Media Impersonation
The platforms your customers trust to connect with your brand are now being weaponized to destroy its reputation. AI is equipping cybercriminals with industrial-scale operations that can replicate your brand presence across all major social platforms in just minutes. This… Read More "A CISO’s Guide to Defending Against Social Media Impersonation"
UpGuard Q3 2025 Summit Recap: What Did You Miss?
Editor’s note: This post reflects our positioning in the CRPM category as of Q3 2025. To learn more about UpGuard’s Risk Operations Center, visit our platform page. The UpGuard Q3 2025 Summit has officially wrapped. This particular Summit marked a… Read More "UpGuard Q3 2025 Summit Recap: What Did You Miss?"
What Is Shadow AI? | UpGuard
Employees adopt AI faster than security teams can review it. When a marketer pastes a confidential brief into a browser extension, or a developer wires an AI agent into internal repositories, it never appears in a security log. That gap… Read More "What Is Shadow AI? | UpGuard"
What is an Impersonation Attack?
An impersonation attack is a type of targeted phishing attack where a malicious actor pretends to be someone else or other entities to steal sensitive data from unsuspecting employees using social engineering tactics. Hackers attempt to trick the victim into… Read More "What is an Impersonation Attack?"
Digital Brand Protection in the Age of Impersonation
Online fraud remains a significant and rapidly expanding threat in today’s cyber threat landscape. According to the FTC, consumers in the U.S. lost a staggering $12.5 billion to fraud in 2024, a 25% surge from the previous year. The most… Read More "Digital Brand Protection in the Age of Impersonation"
Everything Everywhere: Systemic Data Exposure in Supabase Apps
Are you a journalist writing about cybersecurity? Contact us at pr@upguard.com to receive early access to our research. Since 2025, the database service Supabase has been known to leak data through a variety of configuration issues. Despite improvements to Supabase product… Read More "Everything Everywhere: Systemic Data Exposure in Supabase Apps"