Making life easier for security teams.
Mountain View, CA
Joined November 2011
- Tweets7.6K
- Following445
- Followers8.7K
- Likes206K
PHP2Shell went from disclosure to mass exploitation attempts in a matter of hours.
Most security teams moved fast and patched the servers they know about.
Attackers are now looking for what you might've missed.
We're going live on Nov. 5 to share where things stand after the patch and how to close #PHP2Shell out across your attack surface and your vendors.
→ RSVP for this 30-minute session: sbrew.link/Arv1zhT2
📷: @deedydas
Guess who’s coming to dinner.
Not everyone at the table this hosting season got an invite. The next issue of The UpGuardian dropping Nov. 3 breaks down how they got a seat.
What’s inside:
▸ The AI impostor that showed up a day after launch
▸ Black Friday’s biggest cybersecurity incidents
▸ 16K+ exposed databases behind vibe-coded apps
Get on the list: upguard.com/subscribe
A vendor’s employee morale could be an early warning sign for cyber risk.
Most cyber incidents trace back to people, so a disengaged workforce can mean security habits start to slip.
Brian Mackerer from @Craftdotco explains why procurement teams are starting to read cyber risk alongside signals like this one.
Watch the full conversation on demand → upguard.com/webinars/unseen-…
Shadow AI is already in your organization.
Blocking AI tools for everyone is one way to handle it. @Felix_Software found a better solution.
The vendor procurement platform swapped company-wide AI blocks for user-by-user control with UpGuard User Risk.
Now the enforcement that keeps shadow AI in check also gives Felix team their audit evidence.
See how they did it: upguard.com/customers/felix-…
Coming soon to an inbox near you.
Our team’s OOO notice is ready to go for the first-ever @BlackHatEvents India.
Catch them at the UpGuard booth from October 27–30 to chat vendor risk, attack surface, and anything else on your mind.
And if your AI tools arrived faster than the security review, we're have two sessions on the 28th just for you.
See you in Bangalore!
If you’re at @InfoSec_World or @GovWare this week and wondering where to head next, consider this your sign.
The UpGuard booths are open, the swag is out, and our team is ready to talk about whatever’s on your security roadmap.
→ Infosec World | Booth 511
→ GovWare | Booth G35
See you there!
Most procurement teams can tell you a whole lot about their vendors…
Except what their cyber risk looks like right now.
On October 20 at 11am PT, we're teaming up with @Craftdotco to talk through how to check that box.
Save your spot → sbrew.link/ESLHCzOj
If your vendors are vibe-coding, your company's data could end up exposed.
Here's what you need to know about the 16,000+ exposed Supabase databases we found, plus three steps your security team can take in response.
Dive into the full research: upguard.com/blog/everything-…
The band is hitting the road again.
Catch us at:
→ InfoSec World | Orlando, FL | Oct 12–14 | Booth 511
→ GovWare | Singapore | Oct 13–15 | Booth G35
→ CyberCon | Melbourne | Oct 14–16 | Booth 108
Got tickets to the show? Make sure to swing by to talk all things third-party risk.
The barrier to entry for cybercrime is dropping fast, and AI has a whole lot to do with it.
Defenders are fighting back with AI of their own, catching threats earlier and shrinking the window attackers have to work with.
So who's getting more out of AI: attackers or defenders? Reply with a 🔴 or 🔵 and tell us your pick.
Something wicked this way comes.
In the next edition of The UpGuardian, we're unmasking the familiar threats that are harder to spot than they used to be.
What's inside:
▸ A drug-dealing platform built like a SaaS business
▸ 12 cybersecurity horror stories from 2026
▸ A free tool to see what's already leaked under your domain
It creeps into inboxes October 6.
Subscribe if you dare: upguard.com/subscribe
Around 16,000 databases hosted on Supabase are leaking people's personal data.
We found names, addresses, phone numbers and passwords exposed across projects that included a U.S. valet service and a government consulate in France.
Check out the research in @TechCrunch: sbrew.link/x1TXbknX
Choose your TPRM platform the same way you assess your vendors: with evidence.
Well, the evidence is in.
UpGuard has been named a Leader in IDC MarketScape: Worldwide Third-Party Risk Management Software 2026 Vendor Assessment.
Find out what the IDC MarketScape had to say about us: upguard.com/idc?utm_campaign…
65% of stolen credentials show up for sale on the dark web within 24 hours of a breach.
If yours were leaked today... would you even know?
Run a free scan of your domain and find out in minutes: sbrew.link/4hJVEqoy
We surveyed 400 security leaders, and 66% of the teams juggling five or more tools missed threats that others caught first.
The real drain is the time it takes to know whether an alert is even worth chasing in the first place.
Find out what the fastest teams are doing differently on Sept 29 (US) / Sept 30 (APAC).
Secure your spot → upguard.com/webinars/ai-vs-a…
If your AI governance plan is a policy doc and vibes, we need to talk.
Two of the biggest names in AI had real controls in place and still couldn't prove they worked when it counted.
Here’s what their AI governance programs were missing: upguard.com/blog/ai-governan…