Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Next Era of Cybersecurity Requires a New Approach...And a New Look

Cybersecurity teams have long faced an unfair fight against sophisticated digital threats with outdated TPRM, HRM, and ASM tools. It's time to change that. Our new logo and brand identity mark more than a refresh. They signal the next evolution of UpGuard. Every pixel reflects our vision for clarity in a complex world. And with the launch of the first cyber risk posture management platform, we're bringing that vision to life.

Fireside Chat | Adapting Security Leadership for the Age of AI

Erika Carrara, VP & Chief Information Security & Infrastructure Officer at The Greenbrier Companies, shares how she’s adapting her security strategy to meet the demands of the AI era by modernising her tech stack, implementing AI governance, and embedding security into business culture. Interested in finding out more about UpGuard?

9 Best GRC Platforms for 2025

If there's one thing 2025 has made clear, it's that Governance, Risk, and Compliance (GRC) is no longer just a regulatory checkbox. It's the nervous system that connects security, operations, and strategy. Whether it's adapting to new laws, keeping an eye on third-party risks, or managing cyber threats before they become headlines, the right GRC platform can make all the difference. The list below focuses on the GRC solutions that are making the biggest impact right now.

From issues to impact: Making sense of GRC gaps

Every audit turns up a few surprises. A missing patch here. A policy that was missing a few key processes. An employee training record that slipped through the cracks. Together all of these gaps tell a story: somewhere, a control isn’t doing what you expect. ‍ In GRC, we give those events names, issues, risks, and exceptions, and the way they connect is what separates a reactive program from a resilient one. ‍

The Business of Malware: Inside the MaaS Economy

In our 2025 State of the Underground report, we found that 384 unique varieties of malware were sold across the top three criminal forums in 2024, a 10% increase from 349 in 2023, signifying an expansion in the underground malware marketplace. These figures reflect malware explicitly offered for sale (not shared freely), and each distinct version or naming variation is counted independently.

AI Agents Complicate GRC

The challenge isn’t just that AI agents are new. It’s that they blur traditional boundaries of data control, creating hidden sub-processors and uncontrolled data flows. For CISOs, compliance officers, and security leaders, this presents a fundamental governance problem: if you don’t know which AI services are touching your data, you cannot prove compliance.

Black Hat 2025 - From Chaos to Control - How Bank Of Hope Achieved Zero Critical Vulnerabilities

At Black Hat 2025, Nucleus Security and Bank of Hope shared how a small but determined security team transformed its vulnerability management program into a risk-driven, automated operation.