Following Orders: A Day in the Life of an Iranian Telegram Bot Farm | UpGuard
Inside 24 hours of an Iranian Telegram bot farm: how a misconfigured server exposed the operation selling fake followers to financial scammers.
7/31/2026
Read moreU
UpGuard Data Breach Research
Adult Supervision: How OnlyFans Takedowns Quietly Police Compromised Domains | UpGuard
Adult-content creators filing DMCA takedowns are inadvertently exposing thousands of compromised .gov and .edu sites used for parasite SEO scams.
7/29/2026
Read moreOpen House: How an Unauthenticated MCP Server Exposed India's Largest Real Estate Platform | UpGuard
An exposed DBHub instance leaked millions of records from India's largest real estate platform—the biggest MCP server breach to date.
7/21/2026
Read moreOwn Goal: Inside the Cyber Risks of the 2026 World Cup | UpGuard
Free World Cup streams and black-market betting sites are leaking fan data. UpGuard research reveals the hidden cyber risks of the 2026 tournament.
7/7/2026
Read moreBreaking Confinement: How a Corrections Vendor Exposed Inmate Communications | UpGuard
An exposed Azure storage bucket contained millions of documents sent through a jail messaging app, including driver's licenses used for identity verification.
6/2/2026
Read moreShared Context: How an MCP Server Exposed a Private Equity Firm | UpGuard
A misconfigured MCP server provided complete access to a private equity firm's data lake, illustrating the unique risks of AI adoption for specialized knowledge workers.
5/19/2026
Read moreRead Receipts: How Mail Server Logs Put Corporate Clients at Risk | UpGuard
A publicly accessible server with email logs reveals how much information such infrastructure holds–including evidence of attackers looking for it.
5/1/2026
Read moreShared Enemy: Inside a Chinese Dark Web Monitoring Database | UpGuard
An exposed database of dark web threat intel reveals how China responds to the common threat of the cyber-criminal underground.
4/2/2026
Read moreSocial Insecurity: Billions of Social Security Number and Passwords | UpGuard
UpGuard research found a trove of sensitive information in an exposed Elastic database. Getting to the bottom of what it meant led us down an interesting path.
2/20/2026
Read moreStreamlit: The Tip of The Shadow AI Iceberg | UpGuard
Tens of thousands of AI-enabled web applications using the Streamlit framework are publicly available, exposing PII and other confidential data.
12/10/2025
Read more