Enterprise software maker SAP on Tuesday announced the release of 22 new and updated security notes, including four that address critical-severity vulnerabilities. At the top of the list is CVE-2026-89111 (CVSS score of 10/10), an OAuth2 SSRF vulnerability in Cloud… Read More "SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities"
8 Ways Finance Companies Can Prevent Data Leaks
The risk of a data breach is exceptionally high for financial organizations. Hackers recognize the high value financial data has on the dark web. Other cybercriminals pay significant amounts to get their hands on customers’ personally identifiable information (PII) and… Read More "8 Ways Finance Companies Can Prevent Data Leaks"
How to Reduce False Positives in Data Leak Detection
According to a 2021 study by UpGuard, over 51% of analyzed Fortune 500 companies were unknowingly leaking sensitive metadata in public documents – data leaks that could be very useful in a reconnaissance campaign preceding a major data breach. Without… Read More "How to Reduce False Positives in Data Leak Detection"
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools,… Read More "Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug"
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Ransomware actors have been threatening their victims with physical violence, according to new survey data. Many are reporting actual physical attacks being carried out in service of ransomware extortions, though hard data substantiating these claims is missing. A combined two… Read More "Ransomware Gangs Embrace Physical Threats, Family Stalking?"
Introducing the UpGuard Risk Operations Center
For most lean security teams, the same person, or the same two or three, covers your vendors, your attack surface, and your workforce. The analyst who triaged this morning’s dark web alert is also reviewing a vendor’s SOC 2 report… Read More "Introducing the UpGuard Risk Operations Center"
What is Vendor Risk? The Big Impact of Third-Party Breaches
UpGuard’s researchers regularly uncover and report on corporate data breaches. We often find that the breach is not directly caused by the company, but by one of their third-party vendors. This series of posts is about a less-understood aspect of… Read More "What is Vendor Risk? The Big Impact of Third-Party Breaches"
OpenAI’s AI misalignment problem is growing
OpenAI’s misalignment problems seem to only be getting worse, based on yet another trio of reports detailing its models’ troubling and overzealous behaviors. In ad hoc misalignment testing, OpenAI models found creative ways to subversively access restricted information by cheating… Read More "OpenAI’s AI misalignment problem is growing"
Salesforce Extortion Accelerates With New Leak Site
For months now, journalists and cybersecurity experts, including UpGuard, have been following the movements of the hacker collective “Scattered Lapsus$ Hunters,” a sort of supergroup of the already well-known cybercriminal entities ShinyHunters, Scattered Spider and Lapsus$. Now, this collective has… Read More "Salesforce Extortion Accelerates With New Leak Site"
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company’s San Francisco offices to covertly record sensitive conversations. Abdulrahman Alfozan, 35, has been charged with… Read More "OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room"