Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why Employee Morale Matters for Vendor Cyber Risk | UpGuard

Most cyber incidents trace back to people, so a vendor’s employee engagement can say a lot about its security. Brian Mackerer of Craft.co explains why procurement teams are starting to look at cyber risk alongside other signals, like employee engagement and financial stability, instead of relying on a cyber score alone. Discover more at upguard.com.

Security Posture Monitoring and Board Reporting Tools

Every quarter, your board asks the same question, just phrased differently: Are we more secure than we were last time? A point-in-time assessment can't answer it, because it shows where you stood on the day someone ran it, not which way things are moving. Security posture monitoring is the correct response to give to the board. This guide answers the three questions behind every board pack: what goes in front of the board, where the number comes from, and how you show it moved.

Supabase Data Exposure | 16,000+ Open Databases and What Security Teams Can Do

We found more than 16,000 Supabase databases sitting wide open, and over half held personal data like names, phone numbers and passwords. The organizations behind them ranged from a valet service to a government consulate, and in many cases the owners never checked the settings AI wrote. What is the Supabase data exposure? Anyone visiting these sites could read the data in their databases. Many belong to vibe-coded apps, where AI coding tools often handle the database setup.