The next era of cybersecurity requires a new approach... And a new look.

Shadow AI is already in your organization. Blocking AI tools for everyone is one way to handle it. @Felix_Software found a better solution. The vendor procurement platform swapped company-wide AI blocks for user-by-user control with UpGuard User Risk. Now the enforcement that keeps shadow AI in check also gives Felix team their audit evidence. See how they did it: upguard.com/customers/felix-…

Coming soon to an inbox near you. Our team’s OOO notice is ready to go for the first-ever @BlackHatEvents India. Catch them at the UpGuard booth from October 27–30 to chat vendor risk, attack surface, and anything else on your mind. And if your AI tools arrived faster than the security review, we're have two sessions on the 28th just for you. See you in Bangalore!

We may be having a little too much fun at #CyberCon... 📍 Booth 108

Meet the #CyberCon crew. It’s day two at Booth 108, and our team is taking their titles very seriously. If you’re in Melbourne, come by to grab some swag, chat about cyber risk, and tell them if we got it right. What would your conference superlative be? ↓

If you’re at @InfoSec_World or @GovWare this week and wondering where to head next, consider this your sign. The UpGuard booths are open, the swag is out, and our team is ready to talk about whatever’s on your security roadmap. → Infosec World | Booth 511 → GovWare | Booth G35 See you there!

Most procurement teams can tell you a whole lot about their vendors… Except what their cyber risk looks like right now. On October 20 at 11am PT, we're teaming up with @Craftdotco to talk through how to check that box. Save your spot → sbrew.link/ESLHCzOj

If your vendors are vibe-coding, your company's data could end up exposed. Here's what you need to know about the 16,000+ exposed Supabase databases we found, plus three steps your security team can take in response. Dive into the full research: upguard.com/blog/everything-…

The band is hitting the road again. Catch us at: → InfoSec World | Orlando, FL | Oct 12–14 | Booth 511 → GovWare | Singapore | Oct 13–15 | Booth G35 → CyberCon | Melbourne | Oct 14–16 | Booth 108 Got tickets to the show? Make sure to swing by to talk all things third-party risk.

Ignorance is bliss. Happy #CyberSecurityAwareness Month.

The barrier to entry for cybercrime is dropping fast, and AI has a whole lot to do with it. Defenders are fighting back with AI of their own, catching threats earlier and shrinking the window attackers have to work with. So who's getting more out of AI: attackers or defenders? Reply with a 🔴 or 🔵 and tell us your pick.

Something wicked this way comes. In the next edition of The UpGuardian, we're unmasking the familiar threats that are harder to spot than they used to be. What's inside: ▸ A drug-dealing platform built like a SaaS business ▸ 12 cybersecurity horror stories from 2026 ▸ A free tool to see what's already leaked under your domain It creeps into inboxes October 6. Subscribe if you dare: upguard.com/subscribe

Around 16,000 databases hosted on Supabase are leaking people's personal data. We found names, addresses, phone numbers and passwords exposed across projects that included a U.S. valet service and a government consulate in France. Check out the research in @TechCrunch: sbrew.link/x1TXbknX

Choose your TPRM platform the same way you assess your vendors: with evidence. Well, the evidence is in. UpGuard has been named a Leader in IDC MarketScape: Worldwide Third-Party Risk Management Software 2026 Vendor Assessment. Find out what the IDC MarketScape had to say about us: upguard.com/idc?utm_campaign…

65% of stolen credentials show up for sale on the dark web within 24 hours of a breach. If yours were leaked today... would you even know? Run a free scan of your domain and find out in minutes: sbrew.link/4hJVEqoy

We surveyed 400 security leaders, and 66% of the teams juggling five or more tools missed threats that others caught first. The real drain is the time it takes to know whether an alert is even worth chasing in the first place. Find out what the fastest teams are doing differently on Sept 29 (US) / Sept 30 (APAC). Secure your spot → upguard.com/webinars/ai-vs-a…

If your AI governance plan is a policy doc and vibes, we need to talk. Two of the biggest names in AI had real controls in place and still couldn't prove they worked when it counted. Here’s what their AI governance programs were missing: upguard.com/blog/ai-governan…

Things to do before you submit an IT ticket: → Restart your computer → Make sure it's plugged in → Check for software updates → Use an incognito browser → Google it → Take a screenshot → Restart your computer, again Happy IT Professionals Day.

No computer is safe, and many of the companies making them can't even catch their own security flaws. We studied thousands of devices against the EU's new Cyber Resilience Act to see how the industry measures up. Hear from Greg Pollock, Director of Research and Insights, as he breaks it all down → upguard.com/blog/cyber-resil…

Fall came with a fresh set of hardware 🏆 Here's some highlights: ‣ Best Results, Enterprise ‣ Most Implementable, Enterprise ‣ Best Relationship, Enterprise It’s not just a new season, but a clear step forward in how our customers manage third-party risk and stay ahead of their attack surface. Download the @G2dotcom Fall 2026 report: upguard.com/g2

Spot the difference 🔎 We’ll give you a hint: one of these apps is an imposter. The new App Store Threat Detection scans the Apple App Store and Google Play to flag cloned apps before your customers (and your brand) take the hit. See it in action: sbrew.link/JIrfIAgm