Editor’s note: This post reflects our positioning in the CRPM category as of Q3 2025. To learn more about UpGuard’s Risk Operations Center, visit our platform page. The UpGuard Q3 2025 Summit has officially wrapped. This particular Summit marked a… Read More "UpGuard Q3 2025 Summit Recap: What Did You Miss?"
What Is Shadow AI? | UpGuard
Employees adopt AI faster than security teams can review it. When a marketer pastes a confidential brief into a browser extension, or a developer wires an AI agent into internal repositories, it never appears in a security log. That gap… Read More "What Is Shadow AI? | UpGuard"
What is an Impersonation Attack?
An impersonation attack is a type of targeted phishing attack where a malicious actor pretends to be someone else or other entities to steal sensitive data from unsuspecting employees using social engineering tactics. Hackers attempt to trick the victim into… Read More "What is an Impersonation Attack?"
Digital Brand Protection in the Age of Impersonation
Online fraud remains a significant and rapidly expanding threat in today’s cyber threat landscape. According to the FTC, consumers in the U.S. lost a staggering $12.5 billion to fraud in 2024, a 25% surge from the previous year. The most… Read More "Digital Brand Protection in the Age of Impersonation"
Everything Everywhere: Systemic Data Exposure in Supabase Apps
Are you a journalist writing about cybersecurity? Contact us at pr@upguard.com to receive early access to our research. Since 2025, the database service Supabase has been known to leak data through a variety of configuration issues. Despite improvements to Supabase product… Read More "Everything Everywhere: Systemic Data Exposure in Supabase Apps"
Best Threat Intelligence Platforms and Vendors
A threat intelligence platform (TIP) is the software layer that bridges the gap between raw threat data and your team’s security decisions. It aggregates signals from open, deep, and dark web sources, normalizes indicators of compromise (IOCs), enriches them with… Read More "Best Threat Intelligence Platforms and Vendors"
The EU Cyber Resilience Act: Securing Digital Products
The EU Cyber Resilience Act (CRA) is a major piece of cyber legislation passed in 2024 in the European Union (EU) that regulates cybersecurity for digital products and services. The EU Cyber Resilience Act directly complements the NIS2 Directive, which… Read More "The EU Cyber Resilience Act: Securing Digital Products"
What is the EU Cyber Solidarity Act?
The EU Cyber Solidarity Act is a new initiative that follows the European Union’s latest efforts to build stronger cyber defenses against evolving cybersecurity threats. This legislation introduces a new strategy for enhanced cooperation between EU member states and focuses… Read More "What is the EU Cyber Solidarity Act?"
Cyber Resilience Act Preparedness: Who’s Ready, and Who Can’t Be Reached
Computers are not safe. Even the best hardware and software products have the potential to conceal as-yet unknown vulnerabilities. And they aren’t all made that well. Many are shuffled into the world without a plan to detect, remediate, and notify… Read More "Cyber Resilience Act Preparedness: Who’s Ready, and Who Can’t Be Reached"
What is the Critical Entities Resilience (CER) Directive?
The Critical Entities Resilience (CER) Directive is a new initiative in the EU that aims to ensure that critical entities providing essential services are effectively managing their network and information security. The CER Directive is part of the EU’s latest… Read More "What is the Critical Entities Resilience (CER) Directive?"