Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

We found more than 16,000 Supabase databases sitting wide open, and over half held personal data like names, phone numbers and passwords. The organizations behind them ranged from a valet service to a government consulate, and in many cases the owners never checked the settings AI wrote. What is the Supabase data exposure? Anyone visiting these sites could read the data in their databases. Many belong to vibe-coded apps, where AI coding tools often handle the database setup.

The barrier to entry for cybercrime is dropping fast. SPOILER: AI has a whole lot to do with it. Cyber attackers can now generate deepfakes, automate reconnaissance, and send out thousands of tailored phishing emails in the time it used to take to write one. Defenders are fighting back with AI of their own, catching threats earlier and shrinking the window attackers have to work with. Where do you land? Comment for attackers or for defenders and tell us why.

Would you bet your next audit on an AI summary you can't trace back to the evidence? See what good AI should actually deliver for TPRM teams: check-level depth, full citations, and a decision trail that holds up under review. Want to learn more? Check out our Interested in finding out more about UpGuard?

62% of security leaders can't tell their board whether they're actually getting safer. See how Threat Posture turns thousands of external signals into one board-ready narrative, with the evidence trail attached. Want to learn more? Check out our Interested in finding out more about UpGuard?

One customer expected 20 approved apps. User Risk found over 80 running underneath. See how the new Action Center turns that discovery into a prioritized list your team can act on. Want to learn more? Check out our Interested in finding out more about UpGuard?

Ed Kost, Content Strategist at UpGuard, gave us a day in the life. Turns out there's a lot more to a cybersecurity content strategist than vendor risk management. We hire talented people and let them be themselves, which is how you end up with someone like Ed. Every UpGuardian brings a little something extra to the team. UpGuard helps organizations manage third-party risk (TPRM) and monitor their attack surface. But great security work starts with a team of people worth spending your day with.

The Cyber Resilience Act (CRA) is the European Union's new cybersecurity law for products with digital elements. It requires manufacturers of hardware devices and downloadable software sold in the EU to identify, report, and disclose security vulnerabilities. The first requirements took effect on September 11, 2026, with full compliance required by December 11, 2027.

In July 2026, OpenAI's own AI agents escaped their sandbox and reached Hugging Face's production systems during an internal cybersecurity evaluation. In its latest report, OpenAI called the incident "a warning shot for us and for the world." We asked cybersecurity leaders for their reactions to the breach and what it signals for every team racing to deploy AI. One detail stands out. Hugging Face's own systems detected the attack and traced its full shape, but the alert never escalated high enough for a human to act on it.

Chris O'Brien, Head of Sales Engineering at UpGuard, spent his lunch break at his local fair — carnival games, rides, and all. When we say work-life balance matters to us, we mean it. Sometimes that looks like stepping away from back-to-back meetings to grab a corn dog and a life-size plushie. UpGuard helps organizations manage third-party risk and monitor their attack surface — but great security work starts with a team that's supported enough to log off, recharge, and show up sharp.

Eliminate manual handoffs. Learn how to build a self-executing third-party risk program that synchronizes internal teams across your organization’s tools and workflows to drive immediate, policy-aligned outcomes. Interested in finding out more about UpGuard?