Insights on software supply chain security, SBOM compliance, and DevSecOps https://safeguard.sh/resources/blog en-us Sun, 26 Apr 2026 13:27:58 GMT hi@safeguard.sh (Safeguard Team) hi@safeguard.sh (Safeguard Team) 60 https://safeguard.sh/icons/icon-192.png https://safeguard.sh/resources/blog https://safeguard.sh/resources/blog/building-eval-suite-security-llm-workflows https://safeguard.sh/resources/blog/building-eval-suite-security-llm-workflows Wed, 22 Apr 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/zero-day-discovery-llm-augmented-reachability https://safeguard.sh/resources/blog/zero-day-discovery-llm-augmented-reachability Sun, 19 Apr 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/2026-q1-cve-trend-analysis https://safeguard.sh/resources/blog/2026-q1-cve-trend-analysis Sat, 18 Apr 2026 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-supply-chain-attack-primer-2026 https://safeguard.sh/resources/blog/software-supply-chain-attack-primer-2026 Fri, 17 Apr 2026 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/frontier-llm-vendors-not-supply-chain-security https://safeguard.sh/resources/blog/frontier-llm-vendors-not-supply-chain-security Thu, 16 Apr 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-total-cost-of-ownership https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-total-cost-of-ownership Thu, 16 Apr 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-vs-vex-when-do-you-need-each https://safeguard.sh/resources/blog/sbom-vs-vex-when-do-you-need-each Wed, 15 Apr 2026 10:00:00 GMT SBOM hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/how-to-read-a-cyclonedx-sbom-walkthrough https://safeguard.sh/resources/blog/how-to-read-a-cyclonedx-sbom-walkthrough Mon, 13 Apr 2026 10:00:00 GMT SBOM hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/model-context-protocol-permissions-model https://safeguard.sh/resources/blog/model-context-protocol-permissions-model Sun, 12 Apr 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/why-llms-are-structurally-insecure https://safeguard.sh/resources/blog/why-llms-are-structurally-insecure Sun, 12 Apr 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/qilin-ransomware-supply-chain-tactics-2025 https://safeguard.sh/resources/blog/qilin-ransomware-supply-chain-tactics-2025 Sat, 11 Apr 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/anthropic-mythos-vulnerability-scanner-honest-review https://safeguard.sh/resources/blog/anthropic-mythos-vulnerability-scanner-honest-review Fri, 10 Apr 2026 18:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/single-model-vulnerability-scanning-limitations-mythos-analysis https://safeguard.sh/resources/blog/single-model-vulnerability-scanning-limitations-mythos-analysis Fri, 10 Apr 2026 15:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-api-surface-review https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-api-surface-review Fri, 10 Apr 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/why-llm-vulnerability-scanning-needs-more-than-a-model https://safeguard.sh/resources/blog/why-llm-vulnerability-scanning-needs-more-than-a-model Fri, 10 Apr 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/eu-cyber-resilience-act-explained-for-software-vendors https://safeguard.sh/resources/blog/eu-cyber-resilience-act-explained-for-software-vendors Fri, 10 Apr 2026 10:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-zero-day-discovery-taor-architecture https://safeguard.sh/resources/blog/safeguard-zero-day-discovery-taor-architecture Fri, 10 Apr 2026 09:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/eu-ai-act-enforcement-begins-2026 https://safeguard.sh/resources/blog/eu-ai-act-enforcement-begins-2026 Fri, 10 Apr 2026 00:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/open-source-vs-commercial-security-scanners-2026 https://safeguard.sh/resources/blog/open-source-vs-commercial-security-scanners-2026 Thu, 09 Apr 2026 00:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/llm-traces-and-evals-ai-supply-chain-signal https://safeguard.sh/resources/blog/llm-traces-and-evals-ai-supply-chain-signal Wed, 08 Apr 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/reachability-vs-sca-vulnerability-backlog https://safeguard.sh/resources/blog/reachability-vs-sca-vulnerability-backlog Wed, 08 Apr 2026 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/go-toolchain-supply-chain-risks-2025-research https://safeguard.sh/resources/blog/go-toolchain-supply-chain-risks-2025-research Mon, 06 Apr 2026 09:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cisa-kev-catalog-growth-analysis-2025-2026 https://safeguard.sh/resources/blog/cisa-kev-catalog-growth-analysis-2025-2026 Mon, 06 Apr 2026 00:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cyclonedx-1-7-new-features-review https://safeguard.sh/resources/blog/cyclonedx-1-7-new-features-review Sun, 05 Apr 2026 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/why-slsa-level-3-matters-level-4-usually-doesnt https://safeguard.sh/resources/blog/why-slsa-level-3-matters-level-4-usually-doesnt Sun, 05 Apr 2026 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/prompt-injection-rag-pipeline-indirect-attacks https://safeguard.sh/resources/blog/prompt-injection-rag-pipeline-indirect-attacks Sun, 05 Apr 2026 09:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-real-world-deployment https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-real-world-deployment Sat, 04 Apr 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/lazarus-financial-sector-campaigns-2024-2025 https://safeguard.sh/resources/blog/lazarus-financial-sector-campaigns-2024-2025 Sat, 04 Apr 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/buyer-guide-software-supply-chain-security-2026 https://safeguard.sh/resources/blog/buyer-guide-software-supply-chain-security-2026 Sat, 04 Apr 2026 00:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/mcp-server-telemetry-data-governance https://safeguard.sh/resources/blog/mcp-server-telemetry-data-governance Thu, 02 Apr 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/provenance-attestation-signing-practical-glossary https://safeguard.sh/resources/blog/provenance-attestation-signing-practical-glossary Thu, 02 Apr 2026 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/composer-php-supply-chain-threats-2025-report https://safeguard.sh/resources/blog/composer-php-supply-chain-threats-2025-report Thu, 02 Apr 2026 09:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/california-sb-327-iot-security-enforcement-update https://safeguard.sh/resources/blog/california-sb-327-iot-security-enforcement-update Thu, 02 Apr 2026 00:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-griffin-ai-eval-benchmarks-2026 https://safeguard.sh/resources/blog/safeguard-griffin-ai-eval-benchmarks-2026 Wed, 01 Apr 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/openai-api-key-leakage-on-github-at-scale https://safeguard.sh/resources/blog/openai-api-key-leakage-on-github-at-scale Wed, 01 Apr 2026 09:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/symbol-conflict-malicious-binary-planting-2025 https://safeguard.sh/resources/blog/symbol-conflict-malicious-binary-planting-2025 Wed, 01 Apr 2026 09:00:00 GMT Emerging Technology hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-changelog-q1-2026-recap https://safeguard.sh/resources/blog/safeguard-changelog-q1-2026-recap Tue, 31 Mar 2026 10:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/white-house-memo-m-22-18-sbom-attestation-update https://safeguard.sh/resources/blog/white-house-memo-m-22-18-sbom-attestation-update Tue, 31 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/best-secret-scanning-tools-2026-comparison https://safeguard.sh/resources/blog/best-secret-scanning-tools-2026-comparison Tue, 31 Mar 2026 00:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/slsa-v1-1-framework-update-review https://safeguard.sh/resources/blog/slsa-v1-1-framework-update-review Mon, 30 Mar 2026 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/container-image-supply-chain-dockerfile-to-production https://safeguard.sh/resources/blog/container-image-supply-chain-dockerfile-to-production Mon, 30 Mar 2026 10:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/chrome-extension-cyberhaven-supply-chain-2024 https://safeguard.sh/resources/blog/chrome-extension-cyberhaven-supply-chain-2024 Mon, 30 Mar 2026 09:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/reachability-analysis-reducing-cve-noise https://safeguard.sh/resources/blog/reachability-analysis-reducing-cve-noise Mon, 30 Mar 2026 09:00:00 GMT Technical hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/top-software-supply-chain-security-predictions-2026 https://safeguard.sh/resources/blog/top-software-supply-chain-security-predictions-2026 Mon, 30 Mar 2026 00:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-supply-chain-side-channel-attacks-2025 https://safeguard.sh/resources/blog/software-supply-chain-side-channel-attacks-2025 Sun, 29 Mar 2026 09:00:00 GMT Emerging Technology hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-multi-repo-scale https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-multi-repo-scale Sat, 28 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/mcp-server-lifecycle-management-patterns https://safeguard.sh/resources/blog/mcp-server-lifecycle-management-patterns Sat, 28 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/fine-tune-backdoor-insertion-academic-research https://safeguard.sh/resources/blog/fine-tune-backdoor-insertion-academic-research Sat, 28 Mar 2026 09:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/flax-typhoon-residential-proxy-supply-chain-2024 https://safeguard.sh/resources/blog/flax-typhoon-residential-proxy-supply-chain-2024 Sat, 28 Mar 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/incident-response-supply-chain-playbook-2026 https://safeguard.sh/resources/blog/incident-response-supply-chain-playbook-2026 Sat, 28 Mar 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/detect-dependency-confusion-before-it-ships https://safeguard.sh/resources/blog/detect-dependency-confusion-before-it-ships Fri, 27 Mar 2026 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/india-dpdp-act-software-security-implications-2026 https://safeguard.sh/resources/blog/india-dpdp-act-software-security-implications-2026 Thu, 26 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/reflection-based-dependency-confusion-techniques https://safeguard.sh/resources/blog/reflection-based-dependency-confusion-techniques Thu, 26 Mar 2026 09:00:00 GMT Emerging Technology hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/okta-cross-tenant-impersonation-incident-2024 https://safeguard.sh/resources/blog/okta-cross-tenant-impersonation-incident-2024 Thu, 26 Mar 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/state-of-open-source-funding-and-security-2026 https://safeguard.sh/resources/blog/state-of-open-source-funding-and-security-2026 Thu, 26 Mar 2026 00:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/mcp-server-sandbox-escapes-threat-model https://safeguard.sh/resources/blog/mcp-server-sandbox-escapes-threat-model Wed, 25 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/data-poisoning-training-pipeline-defenses https://safeguard.sh/resources/blog/data-poisoning-training-pipeline-defenses Wed, 25 Mar 2026 09:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-marketplace-launch https://safeguard.sh/resources/blog/safeguard-marketplace-launch Wed, 25 Mar 2026 09:00:00 GMT Product hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-tool-call-hijacking-defences https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-tool-call-hijacking-defences Tue, 24 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-sourcegraph-cody-security-use https://safeguard.sh/resources/blog/griffin-ai-vs-sourcegraph-cody-security-use Tue, 24 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/how-to-secure-ai-agents-mcp-protocol-2026 https://safeguard.sh/resources/blog/how-to-secure-ai-agents-mcp-protocol-2026 Tue, 24 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/zero-trust-cicd-pipelines-blueprint https://safeguard.sh/resources/blog/zero-trust-cicd-pipelines-blueprint Tue, 24 Mar 2026 10:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/uk-psti-act-consumer-iot-year-one-review https://safeguard.sh/resources/blog/uk-psti-act-consumer-iot-year-one-review Tue, 24 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/enterprise-ai-center-of-excellence-blueprint https://safeguard.sh/resources/blog/enterprise-ai-center-of-excellence-blueprint Mon, 23 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-roi-timeline https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-roi-timeline Mon, 23 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-open-weight-supply-chain-risks https://safeguard.sh/resources/blog/griffin-ai-vs-open-weight-supply-chain-risks Mon, 23 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/npm-garbage-collection-abuse-attack-research https://safeguard.sh/resources/blog/npm-garbage-collection-abuse-attack-research Mon, 23 Mar 2026 09:00:00 GMT Emerging Technology hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-scaffold-prompts-enterprise-governance https://safeguard.sh/resources/blog/ai-scaffold-prompts-enterprise-governance Sun, 22 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-regression-gate-design-patterns https://safeguard.sh/resources/blog/ai-security-regression-gate-design-patterns Sun, 22 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-claude-citations-for-advisory-work https://safeguard.sh/resources/blog/griffin-ai-vs-claude-citations-for-advisory-work Sun, 22 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/fda-premarket-cybersecurity-medical-devices-2026 https://safeguard.sh/resources/blog/fda-premarket-cybersecurity-medical-devices-2026 Sun, 22 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-tprm-module-release https://safeguard.sh/resources/blog/safeguard-tprm-module-release Sun, 22 Mar 2026 09:00:00 GMT Product hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/state-of-devsecops-2026-what-teams-ship https://safeguard.sh/resources/blog/state-of-devsecops-2026-what-teams-ship Sun, 22 Mar 2026 00:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-openai-pricing-for-security-workloads https://safeguard.sh/resources/blog/griffin-ai-vs-openai-pricing-for-security-workloads Sat, 21 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/small-language-model-security-usecase-fit https://safeguard.sh/resources/blog/small-language-model-security-usecase-fit Sat, 21 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/open-source-funding-crisis-dependency-tree-impact https://safeguard.sh/resources/blog/open-source-funding-crisis-dependency-tree-impact Sat, 21 Mar 2026 10:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/claude-mcp-tool-poisoning-threat-model-2026 https://safeguard.sh/resources/blog/claude-mcp-tool-poisoning-threat-model-2026 Sat, 21 Mar 2026 09:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dev-0270-developer-social-engineering-campaign https://safeguard.sh/resources/blog/dev-0270-developer-social-engineering-campaign Sat, 21 Mar 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/hugging-face-token-exposure-2024-analysis https://safeguard.sh/resources/blog/hugging-face-token-exposure-2024-analysis Sat, 21 Mar 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/aws-reinforce-2026-supply-chain-sessions https://safeguard.sh/resources/blog/aws-reinforce-2026-supply-chain-sessions Fri, 20 Mar 2026 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/frontier-model-limit-fine-tune-drift-on-evals https://safeguard.sh/resources/blog/frontier-model-limit-fine-tune-drift-on-evals Fri, 20 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-on-device-for-developer-tools https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-on-device-for-developer-tools Fri, 20 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-reasoning-grounded-vs-hallucinated https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-reasoning-grounded-vs-hallucinated Fri, 20 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/devsecops-platform-engineering-convergence https://safeguard.sh/resources/blog/devsecops-platform-engineering-convergence Fri, 20 Mar 2026 10:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/how-to-implement-slsa-level-3-practical-guide https://safeguard.sh/resources/blog/how-to-implement-slsa-level-3-practical-guide Fri, 20 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/loophole-dns-cache-poisoning-software-updates-2025 https://safeguard.sh/resources/blog/loophole-dns-cache-poisoning-software-updates-2025 Fri, 20 Mar 2026 09:00:00 GMT Emerging Technology hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-trend-guardrail-consolidation-market https://safeguard.sh/resources/blog/ai-security-trend-guardrail-consolidation-market Thu, 19 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-breaking-change-awareness https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-breaking-change-awareness Thu, 19 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/best-container-image-scanners-2026 https://safeguard.sh/resources/blog/best-container-image-scanners-2026 Thu, 19 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pypi-trusted-publishing-token-leak-campaign-2025 https://safeguard.sh/resources/blog/pypi-trusted-publishing-token-leak-campaign-2025 Thu, 19 Mar 2026 10:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/eu-ai-act-software-supply-chain-implications-2026 https://safeguard.sh/resources/blog/eu-ai-act-software-supply-chain-implications-2026 Thu, 19 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-audit-trail-quality https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-audit-trail-quality Wed, 18 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-sanitizer-detection https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-sanitizer-detection Wed, 18 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/genai-package-hallucination-2026-update https://safeguard.sh/resources/blog/genai-package-hallucination-2026-update Wed, 18 Mar 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-bill-of-materials-ml-bom-standards-2026 https://safeguard.sh/resources/blog/ai-bill-of-materials-ml-bom-standards-2026 Wed, 18 Mar 2026 09:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/continuous-compliance-monitoring-guide https://safeguard.sh/resources/blog/continuous-compliance-monitoring-guide Wed, 18 Mar 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/dora-financial-services-third-party-ict-risk-2026 https://safeguard.sh/resources/blog/dora-financial-services-third-party-ict-risk-2026 Wed, 18 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/state-of-cve-disclosure-and-kev-2026 https://safeguard.sh/resources/blog/state-of-cve-disclosure-and-kev-2026 Wed, 18 Mar 2026 00:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cross-vendor-sbom-normalization https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cross-vendor-sbom-normalization Tue, 17 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/how-to-scan-docker-images-vulnerabilities-guide https://safeguard.sh/resources/blog/how-to-scan-docker-images-vulnerabilities-guide Tue, 17 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/github-actions-cache-poisoning-attack-class-2025 https://safeguard.sh/resources/blog/github-actions-cache-poisoning-attack-class-2025 Tue, 17 Mar 2026 09:00:00 GMT Emerging Technology hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nist-sp-800-161-revision-2-third-party-2026 https://safeguard.sh/resources/blog/nist-sp-800-161-revision-2-third-party-2026 Tue, 17 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/docker-hub-exposed-secrets-at-scale-2024 https://safeguard.sh/resources/blog/docker-hub-exposed-secrets-at-scale-2024 Tue, 17 Mar 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-benchmark-reproducibility https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-benchmark-reproducibility Mon, 16 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-prompt-injection-defences https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-prompt-injection-defences Mon, 16 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-windsurf-cascade-security-review https://safeguard.sh/resources/blog/griffin-ai-vs-windsurf-cascade-security-review Mon, 16 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/supply-chain-security-aerospace-defense-dod-2026 https://safeguard.sh/resources/blog/supply-chain-security-aerospace-defense-dod-2026 Mon, 16 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/enterprise-ai-metric-design-for-executive-reporting https://safeguard.sh/resources/blog/enterprise-ai-metric-design-for-executive-reporting Sun, 15 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-llama-vs-self-hosting-costs https://safeguard.sh/resources/blog/griffin-ai-vs-llama-vs-self-hosting-costs Sun, 15 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-pricing-predictability https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-pricing-predictability Sun, 15 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/mcp-client-side-security-considerations https://safeguard.sh/resources/blog/mcp-client-side-security-considerations Sun, 15 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/best-sbom-management-platforms-2026-review https://safeguard.sh/resources/blog/best-sbom-management-platforms-2026-review Sun, 15 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/crowdstrike-falcon-outage-post-mortem-lessons https://safeguard.sh/resources/blog/crowdstrike-falcon-outage-post-mortem-lessons Sun, 15 Mar 2026 10:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fedramp-20x-continuous-compliance-software-vendors https://safeguard.sh/resources/blog/fedramp-20x-continuous-compliance-software-vendors Sun, 15 Mar 2026 10:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-bill-of-materials-healthcare https://safeguard.sh/resources/blog/software-bill-of-materials-healthcare Sun, 15 Mar 2026 10:00:00 GMT Healthcare hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/confused-deputy-attacks-ci-cd-service-accounts https://safeguard.sh/resources/blog/confused-deputy-attacks-ci-cd-service-accounts Sun, 15 Mar 2026 09:00:00 GMT Emerging Technology hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-compliance-guide-2026 https://safeguard.sh/resources/blog/sbom-compliance-guide-2026 Sun, 15 Mar 2026 00:00:00 GMT Compliance hi@safeguard.sh (Safeguard Team) https://safeguard.sh/resources/blog/ai-coding-assistant-data-leakage-paths https://safeguard.sh/resources/blog/ai-coding-assistant-data-leakage-paths Sat, 14 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-real-world-vs-synthetic-eval-gap https://safeguard.sh/resources/blog/ai-security-real-world-vs-synthetic-eval-gap Sat, 14 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-claude-computer-use-for-security https://safeguard.sh/resources/blog/griffin-ai-vs-claude-computer-use-for-security Sat, 14 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cryptography-misuse-detection https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cryptography-misuse-detection Sat, 14 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ai-agent-tool-confused-deputy-problem-2026 https://safeguard.sh/resources/blog/ai-agent-tool-confused-deputy-problem-2026 Sat, 14 Mar 2026 09:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/apt29-cloud-supply-chain-tradecraft-update-2025 https://safeguard.sh/resources/blog/apt29-cloud-supply-chain-tradecraft-update-2025 Sat, 14 Mar 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cmmc-level-3-software-supply-chain-checklist-2026 https://safeguard.sh/resources/blog/cmmc-level-3-software-supply-chain-checklist-2026 Sat, 14 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-4367-pdfjs-arbitrary-code-execution https://safeguard.sh/resources/blog/cve-2024-4367-pdfjs-arbitrary-code-execution Sat, 14 Mar 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/state-of-container-security-2026-survey-summary https://safeguard.sh/resources/blog/state-of-container-security-2026-survey-summary Sat, 14 Mar 2026 00:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ensemble-llm-for-high-precision-security-findings https://safeguard.sh/resources/blog/ensemble-llm-for-high-precision-security-findings Fri, 13 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-gpt-5-compliance-posture https://safeguard.sh/resources/blog/griffin-ai-vs-gpt-5-compliance-posture Fri, 13 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/how-to-prevent-dependency-confusion-npm-2026 https://safeguard.sh/resources/blog/how-to-prevent-dependency-confusion-npm-2026 Fri, 13 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-local-runner-release-agentic-security https://safeguard.sh/resources/blog/safeguard-local-runner-release-agentic-security Fri, 13 Mar 2026 09:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/unc5221-ivanti-exploitation-campaign-analysis https://safeguard.sh/resources/blog/unc5221-ivanti-exploitation-campaign-analysis Fri, 13 Mar 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/frontier-model-limit-hallucinated-security-findings https://safeguard.sh/resources/blog/frontier-model-limit-hallucinated-security-findings Thu, 12 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-compliance-fedramp https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-compliance-fedramp Thu, 12 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-false-positive-rates https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-false-positive-rates Thu, 12 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-support-model https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-support-model Thu, 12 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/best-sca-tools-enterprise-2026-comparison https://safeguard.sh/resources/blog/best-sca-tools-enterprise-2026-comparison Thu, 12 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-triage-is-broken-better-workflow https://safeguard.sh/resources/blog/cve-triage-is-broken-better-workflow Thu, 12 Mar 2026 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/tj-actions-compromise-one-year-retrospective https://safeguard.sh/resources/blog/tj-actions-compromise-one-year-retrospective Thu, 12 Mar 2026 10:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/supply-chain-security-energy-nerc-cip-2026 https://safeguard.sh/resources/blog/supply-chain-security-energy-nerc-cip-2026 Thu, 12 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/third-party-risk-assessment-automation https://safeguard.sh/resources/blog/third-party-risk-assessment-automation Thu, 12 Mar 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/cve-2025-24071-windows-explorer-ntlm-leak https://safeguard.sh/resources/blog/cve-2025-24071-windows-explorer-ntlm-leak Thu, 12 Mar 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-trend-fine-tune-backdoors https://safeguard.sh/resources/blog/ai-security-trend-fine-tune-backdoors Wed, 11 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-rollback-safety https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-rollback-safety Wed, 11 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/storm-0558-microsoft-cloud-identity-aftermath https://safeguard.sh/resources/blog/storm-0558-microsoft-cloud-identity-aftermath Wed, 11 Mar 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vscode-extension-marketplace-malware-campaigns-2025 https://safeguard.sh/resources/blog/vscode-extension-marketplace-malware-campaigns-2025 Wed, 11 Mar 2026 09:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cmmc-pass-through https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cmmc-pass-through Tue, 10 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-transitive-depth-comparison https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-transitive-depth-comparison Tue, 10 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/eo-14028-five-years-comprehensive-review https://safeguard.sh/resources/blog/eo-14028-five-years-comprehensive-review Tue, 10 Mar 2026 10:00:00 GMT Compliance hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/how-to-sign-container-images-cosign-production https://safeguard.sh/resources/blog/how-to-sign-container-images-cosign-production Tue, 10 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-changelog-march-2026 https://safeguard.sh/resources/blog/safeguard-changelog-march-2026 Tue, 10 Mar 2026 10:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ftc-mgm-breach-settlement-software-implications https://safeguard.sh/resources/blog/ftc-mgm-breach-settlement-software-implications Tue, 10 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/how-to-rotate-leaked-secrets-automation-2026 https://safeguard.sh/resources/blog/how-to-rotate-leaked-secrets-automation-2026 Tue, 10 Mar 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-29849-veeam-auth-bypass-analysis https://safeguard.sh/resources/blog/cve-2024-29849-veeam-auth-bypass-analysis Tue, 10 Mar 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/state-of-ai-security-in-enterprise-2026 https://safeguard.sh/resources/blog/state-of-ai-security-in-enterprise-2026 Tue, 10 Mar 2026 00:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-training-data-provenance https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-training-data-provenance Mon, 09 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/mitigate-npm-install-scripts-without-breaking-builds https://safeguard.sh/resources/blog/mitigate-npm-install-scripts-without-breaking-builds Mon, 09 Mar 2026 10:00:00 GMT Dependency Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-vs-wiz-supply-chain-focus-2026 https://safeguard.sh/resources/blog/safeguard-vs-wiz-supply-chain-focus-2026 Mon, 09 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-supply-chain-security-healthcare-hipaa-2026 https://safeguard.sh/resources/blog/software-supply-chain-security-healthcare-hipaa-2026 Mon, 09 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vendor-offboarding-supply-chain-data-destruction https://safeguard.sh/resources/blog/vendor-offboarding-supply-chain-data-destruction Mon, 09 Mar 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cost-per-finding https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cost-per-finding Sun, 08 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-dependency-confusion-scenarios https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-dependency-confusion-scenarios Sun, 08 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-poolside-for-enterprise-security https://safeguard.sh/resources/blog/griffin-ai-vs-poolside-for-enterprise-security Sun, 08 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/jsr-javascript-registry-security-model https://safeguard.sh/resources/blog/jsr-javascript-registry-security-model Sun, 08 Mar 2026 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/mcp-authentication-patterns-enterprise https://safeguard.sh/resources/blog/mcp-authentication-patterns-enterprise Sun, 08 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/snowflake-customer-breaches-2024-root-cause https://safeguard.sh/resources/blog/snowflake-customer-breaches-2024-root-cause Sun, 08 Mar 2026 10:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-signing-code-integrity-2026 https://safeguard.sh/resources/blog/software-signing-code-integrity-2026 Sun, 08 Mar 2026 09:00:00 GMT Industry Trends hi@safeguard.sh (James) https://safeguard.sh/resources/blog/enterprise-ai-red-team-program-design https://safeguard.sh/resources/blog/enterprise-ai-red-team-program-design Sat, 07 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-elastic-scale-behaviour https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-elastic-scale-behaviour Sat, 07 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-open-weight-eval-gap https://safeguard.sh/resources/blog/griffin-ai-vs-open-weight-eval-gap Sat, 07 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/akira-ransomware-vpn-appliance-exploitation https://safeguard.sh/resources/blog/akira-ransomware-vpn-appliance-exploitation Sat, 07 Mar 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/open-source-maintainer-account-takeover-trends-2025 https://safeguard.sh/resources/blog/open-source-maintainer-account-takeover-trends-2025 Sat, 07 Mar 2026 09:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2025-1974-ingress-nginx-controller-rce https://safeguard.sh/resources/blog/cve-2025-1974-ingress-nginx-controller-rce Sat, 07 Mar 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-reproducibility-crisis-mini https://safeguard.sh/resources/blog/ai-security-reproducibility-crisis-mini Fri, 06 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-claude-prompt-caching-for-security https://safeguard.sh/resources/blog/griffin-ai-vs-claude-prompt-caching-for-security Fri, 06 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-auth-bypass-discovery https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-auth-bypass-discovery Fri, 06 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/how-to-generate-sbom-github-actions-2026 https://safeguard.sh/resources/blog/how-to-generate-sbom-github-actions-2026 Fri, 06 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pypi-2fa-lessons-two-years-in https://safeguard.sh/resources/blog/pypi-2fa-lessons-two-years-in Fri, 06 Mar 2026 10:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/how-to-detect-malicious-npm-packages-workflow https://safeguard.sh/resources/blog/how-to-detect-malicious-npm-packages-workflow Fri, 06 Mar 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/procurement-security-questionnaires-that-work https://safeguard.sh/resources/blog/procurement-security-questionnaires-that-work Fri, 06 Mar 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-desktop-application-1-0-release https://safeguard.sh/resources/blog/safeguard-desktop-application-1-0-release Fri, 06 Mar 2026 09:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-32002-git-rce-on-clone-walkthrough https://safeguard.sh/resources/blog/cve-2024-32002-git-rce-on-clone-walkthrough Fri, 06 Mar 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-supply-chain-security-market-map-2026 https://safeguard.sh/resources/blog/software-supply-chain-security-market-map-2026 Fri, 06 Mar 2026 00:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/chain-of-thought-for-vulnerability-reasoning https://safeguard.sh/resources/blog/chain-of-thought-for-vulnerability-reasoning Thu, 05 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-context-window-limits https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-context-window-limits Thu, 05 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-openai-assistants-api-for-secops https://safeguard.sh/resources/blog/griffin-ai-vs-openai-assistants-api-for-secops Thu, 05 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/post-quantum-signing-artifact-migration-plan https://safeguard.sh/resources/blog/post-quantum-signing-artifact-migration-plan Thu, 05 Mar 2026 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/change-healthcare-ransomware-2024-deep-dive https://safeguard.sh/resources/blog/change-healthcare-ransomware-2024-deep-dive Thu, 05 Mar 2026 10:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-vs-aqua-security-platform-review https://safeguard.sh/resources/blog/safeguard-vs-aqua-security-platform-review Thu, 05 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/supply-chain-attack-kill-chain-framework https://safeguard.sh/resources/blog/supply-chain-attack-kill-chain-framework Thu, 05 Mar 2026 10:00:00 GMT Threat Intelligence hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/the-future-of-software-signing-is-keyless https://safeguard.sh/resources/blog/the-future-of-software-signing-is-keyless Thu, 05 Mar 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/composer-php-package-supply-chain-2026 https://safeguard.sh/resources/blog/composer-php-package-supply-chain-2026 Thu, 05 Mar 2026 09:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/supply-chain-security-financial-services-2026 https://safeguard.sh/resources/blog/supply-chain-security-financial-services-2026 Thu, 05 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/minimum-elements-sbom-cisa-2026-update https://safeguard.sh/resources/blog/minimum-elements-sbom-cisa-2026-update Wed, 04 Mar 2026 15:00:00 GMT SBOM hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/frontier-model-limit-model-substitution-risk https://safeguard.sh/resources/blog/frontier-model-limit-model-substitution-risk Wed, 04 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-pricing-for-security-scans https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-pricing-for-security-scans Wed, 04 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-onboarding-velocity https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-onboarding-velocity Wed, 04 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-generation-tools-syft-tern-comparison-2026 https://safeguard.sh/resources/blog/sbom-generation-tools-syft-tern-comparison-2026 Wed, 04 Mar 2026 12:00:00 GMT SBOM hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-for-mergers-acquisitions-due-diligence https://safeguard.sh/resources/blog/sbom-for-mergers-acquisitions-due-diligence Wed, 04 Mar 2026 09:00:00 GMT SBOM hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-trend-rag-poisoning-in-the-wild https://safeguard.sh/resources/blog/ai-security-trend-rag-poisoning-in-the-wild Tue, 03 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-transitive-fix-cascades https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-transitive-fix-cascades Tue, 03 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/how-to-comply-eu-cyber-resilience-act-checklist https://safeguard.sh/resources/blog/how-to-comply-eu-cyber-resilience-act-checklist Tue, 03 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/minimal-base-image-myth-attack-surface-reduction https://safeguard.sh/resources/blog/minimal-base-image-myth-attack-surface-reduction Tue, 03 Mar 2026 10:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/npm-protestware-patterns-2020-to-2026 https://safeguard.sh/resources/blog/npm-protestware-patterns-2020-to-2026 Tue, 03 Mar 2026 09:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/right-to-repair-software-supply-chain-security https://safeguard.sh/resources/blog/right-to-repair-software-supply-chain-security Tue, 03 Mar 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-eu-ai-act-alignment https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-eu-ai-act-alignment Mon, 02 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-version-aware-resolution https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-version-aware-resolution Mon, 02 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/nullcon-berlin-2026-software-supply-chain-highlights https://safeguard.sh/resources/blog/nullcon-berlin-2026-software-supply-chain-highlights Mon, 02 Mar 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-vs-github-advanced-security-2026 https://safeguard.sh/resources/blog/safeguard-vs-github-advanced-security-2026 Mon, 02 Mar 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/how-to-audit-open-source-licenses-compliance-guide https://safeguard.sh/resources/blog/how-to-audit-open-source-licenses-compliance-guide Mon, 02 Mar 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-open-source-manager-deep-dive https://safeguard.sh/resources/blog/safeguard-open-source-manager-deep-dive Mon, 02 Mar 2026 09:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-requirements-automotive-iso-21434-2026 https://safeguard.sh/resources/blog/sbom-requirements-automotive-iso-21434-2026 Mon, 02 Mar 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/volt-typhoon-critical-infrastructure-supply-chain https://safeguard.sh/resources/blog/volt-typhoon-critical-infrastructure-supply-chain Mon, 02 Mar 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-21413-outlook-moniker-link-analysis https://safeguard.sh/resources/blog/cve-2024-21413-outlook-moniker-link-analysis Mon, 02 Mar 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-55956-cleo-harmony-vltrader-rce https://safeguard.sh/resources/blog/cve-2024-55956-cleo-harmony-vltrader-rce Mon, 02 Mar 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-mcp-server-inventory https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-mcp-server-inventory Sun, 01 Mar 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/container-runtime-security-2026-guide https://safeguard.sh/resources/blog/container-runtime-security-2026-guide Sun, 01 Mar 2026 10:00:00 GMT Cloud Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/xz-utils-aftermath-one-year-retrospective https://safeguard.sh/resources/blog/xz-utils-aftermath-one-year-retrospective Sun, 01 Mar 2026 10:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cloudflare-workers-supply-chain-threat-model https://safeguard.sh/resources/blog/cloudflare-workers-supply-chain-threat-model Sun, 01 Mar 2026 09:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/container-security-reachability-analysis https://safeguard.sh/resources/blog/container-security-reachability-analysis Sun, 01 Mar 2026 00:00:00 GMT Security hi@safeguard.sh (Safeguard Team) https://safeguard.sh/resources/blog/genai-coding-agent-privilege-escalation https://safeguard.sh/resources/blog/genai-coding-agent-privilege-escalation Sat, 28 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-github-copilot-for-vulnerability-fixing https://safeguard.sh/resources/blog/griffin-ai-vs-github-copilot-for-vulnerability-fixing Sat, 28 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-continuous-eval-release-gating https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-continuous-eval-release-gating Sat, 28 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-race-condition-detection https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-race-condition-detection Sat, 28 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/post-quantum-cryptography-migration-supply-chains https://safeguard.sh/resources/blog/post-quantum-cryptography-migration-supply-chains Sat, 28 Feb 2026 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/how-safeguard-partners-with-mssp-programs https://safeguard.sh/resources/blog/how-safeguard-partners-with-mssp-programs Sat, 28 Feb 2026 09:00:00 GMT Company hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/insurance-cyber-policy-software-supply-chain-exclusions https://safeguard.sh/resources/blog/insurance-cyber-policy-software-supply-chain-exclusions Sat, 28 Feb 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/jsr-deno-package-ecosystem-supply-chain https://safeguard.sh/resources/blog/jsr-deno-package-ecosystem-supply-chain Sat, 28 Feb 2026 09:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/enterprise-ai-data-residency-requirements https://safeguard.sh/resources/blog/enterprise-ai-data-residency-requirements Fri, 27 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-false-positive-cost https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-false-positive-cost Fri, 27 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-injection-path-detection https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-injection-path-detection Fri, 27 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-open-weight-on-prem-tradeoffs https://safeguard.sh/resources/blog/griffin-ai-vs-open-weight-on-prem-tradeoffs Fri, 27 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/fine-tuning-poisoning-detection-supply-chain https://safeguard.sh/resources/blog/fine-tuning-poisoning-detection-supply-chain Fri, 27 Feb 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-vs-snyk-comparison-2026 https://safeguard.sh/resources/blog/safeguard-vs-snyk-comparison-2026 Fri, 27 Feb 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-mcp-server-public-release-2026 https://safeguard.sh/resources/blog/safeguard-mcp-server-public-release-2026 Fri, 27 Feb 2026 09:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-23897-jenkins-cli-file-read-deep-dive https://safeguard.sh/resources/blog/cve-2024-23897-jenkins-cli-file-read-deep-dive Fri, 27 Feb 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-llm-as-judge-pitfalls https://safeguard.sh/resources/blog/ai-security-llm-as-judge-pitfalls Thu, 26 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-claude-batch-api-for-scanning https://safeguard.sh/resources/blog/griffin-ai-vs-claude-batch-api-for-scanning Thu, 26 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/customer-story-automotive-oem-iso-21434-compliance https://safeguard.sh/resources/blog/customer-story-automotive-oem-iso-21434-compliance Thu, 26 Feb 2026 10:00:00 GMT Case Studies hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/why-developer-experience-matters-security-programs https://safeguard.sh/resources/blog/why-developer-experience-matters-security-programs Thu, 26 Feb 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dependency-update-triage-strategy-engineering-teams https://safeguard.sh/resources/blog/dependency-update-triage-strategy-engineering-teams Thu, 26 Feb 2026 09:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-research-sbom-quality-across-ecosystems-report https://safeguard.sh/resources/blog/safeguard-research-sbom-quality-across-ecosystems-report Thu, 26 Feb 2026 09:00:00 GMT Research hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-gpt-5-enterprise-controls https://safeguard.sh/resources/blog/griffin-ai-vs-gpt-5-enterprise-controls Wed, 25 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-engine-plus-llm-advantage https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-engine-plus-llm-advantage Wed, 25 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/task-routed-llm-architectures-for-security https://safeguard.sh/resources/blog/task-routed-llm-architectures-for-security Wed, 25 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/windsurf-cody-security-comparison https://safeguard.sh/resources/blog/windsurf-cody-security-comparison Wed, 25 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/microsoft-midnight-blizzard-source-code-theft-2024 https://safeguard.sh/resources/blog/microsoft-midnight-blizzard-source-code-theft-2024 Wed, 25 Feb 2026 10:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-for-firmware-iot-devices https://safeguard.sh/resources/blog/sbom-for-firmware-iot-devices Wed, 25 Feb 2026 10:00:00 GMT SBOM hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/apt-cozy-bear-midnight-blizzard-supply-chain https://safeguard.sh/resources/blog/apt-cozy-bear-midnight-blizzard-supply-chain Wed, 25 Feb 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dora-eu-software-supply-chain-for-financial-services https://safeguard.sh/resources/blog/dora-eu-software-supply-chain-for-financial-services Wed, 25 Feb 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-45519-zimbra-unauth-rce-breakdown https://safeguard.sh/resources/blog/cve-2024-45519-zimbra-unauth-rce-breakdown Wed, 25 Feb 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/frontier-model-limit-retrieval-context-poisoning https://safeguard.sh/resources/blog/frontier-model-limit-retrieval-context-poisoning Tue, 24 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-multimodal-for-security https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-multimodal-for-security Tue, 24 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-federal-compliance-readiness https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-federal-compliance-readiness Tue, 24 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/incident-response-playbook-compromised-dependency https://safeguard.sh/resources/blog/incident-response-playbook-compromised-dependency Tue, 24 Feb 2026 10:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/aws-eks-pod-identity-vs-irsa-supply-chain https://safeguard.sh/resources/blog/aws-eks-pod-identity-vs-irsa-supply-chain Tue, 24 Feb 2026 09:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/buy-vs-build-supply-chain-security-platform https://safeguard.sh/resources/blog/buy-vs-build-supply-chain-security-platform Tue, 24 Feb 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pnpm-yarn-modern-lockfile-security https://safeguard.sh/resources/blog/pnpm-yarn-modern-lockfile-security Tue, 24 Feb 2026 09:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-trend-eval-culture-shift https://safeguard.sh/resources/blog/ai-security-trend-eval-culture-shift Mon, 23 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-dependency-upgrade-recommendations https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-dependency-upgrade-recommendations Mon, 23 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/gartner-security-risk-management-summit-2025-recap https://safeguard.sh/resources/blog/gartner-security-risk-management-summit-2025-recap Mon, 23 Feb 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-4577-php-cgi-argument-injection-explained https://safeguard.sh/resources/blog/cve-2024-4577-php-cgi-argument-injection-explained Mon, 23 Feb 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-hipaa-supply-chain-controls https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-hipaa-supply-chain-controls Sun, 22 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-source-sink-classification https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-source-sink-classification Sun, 22 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/mcp-server-registry-security-governance https://safeguard.sh/resources/blog/mcp-server-registry-security-governance Sun, 22 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/agent-to-agent-security-multi-agent-systems https://safeguard.sh/resources/blog/agent-to-agent-security-multi-agent-systems Sun, 22 Feb 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/faq-when-do-you-need-a-dedicated-sbom-tool https://safeguard.sh/resources/blog/faq-when-do-you-need-a-dedicated-sbom-tool Sun, 22 Feb 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/federal-software-procurement-sbom-requirements https://safeguard.sh/resources/blog/federal-software-procurement-sbom-requirements Sun, 22 Feb 2026 10:00:00 GMT Compliance hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/multi-arch-image-builds-attestation-pitfalls https://safeguard.sh/resources/blog/multi-arch-image-builds-attestation-pitfalls Sun, 22 Feb 2026 09:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-model-inventory-tracking https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-model-inventory-tracking Sat, 21 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-cursor-tab-for-security-review https://safeguard.sh/resources/blog/griffin-ai-vs-cursor-tab-for-security-review Fri, 20 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-csrf-modern-forms https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-csrf-modern-forms Fri, 20 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-golden-dataset-design https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-golden-dataset-design Fri, 20 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/kev-epss-cvss-which-signal-drives-patching https://safeguard.sh/resources/blog/kev-epss-cvss-which-signal-drives-patching Fri, 20 Feb 2026 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/open-source-security-summit-2026-recap https://safeguard.sh/resources/blog/open-source-security-summit-2026-recap Fri, 20 Feb 2026 10:00:00 GMT Events hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cargo-audit-deny-advisories-workflow https://safeguard.sh/resources/blog/cargo-audit-deny-advisories-workflow Fri, 20 Feb 2026 09:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dependabot-vs-renovate-operational-experience https://safeguard.sh/resources/blog/dependabot-vs-renovate-operational-experience Fri, 20 Feb 2026 09:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/north-korea-it-worker-supply-chain-insider-threat https://safeguard.sh/resources/blog/north-korea-it-worker-supply-chain-insider-threat Fri, 20 Feb 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-partnership-strategy-2026 https://safeguard.sh/resources/blog/safeguard-partnership-strategy-2026 Fri, 20 Feb 2026 09:00:00 GMT Company hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-self-healing-containers-general-availability https://safeguard.sh/resources/blog/safeguard-self-healing-containers-general-availability Fri, 20 Feb 2026 09:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/total-cost-of-ownership-sca-platforms-2026 https://safeguard.sh/resources/blog/total-cost-of-ownership-sca-platforms-2026 Fri, 20 Feb 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/huggingface-model-hub-supply-chain-risks-2025 https://safeguard.sh/resources/blog/huggingface-model-hub-supply-chain-risks-2025 Fri, 20 Feb 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/enterprise-ai-procurement-due-diligence-checklist https://safeguard.sh/resources/blog/enterprise-ai-procurement-due-diligence-checklist Thu, 19 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-deserialization-chains https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-deserialization-chains Thu, 19 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-triage-backlog-reduction https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-triage-backlog-reduction Thu, 19 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-open-weight-fine-tuning-for-secops https://safeguard.sh/resources/blog/griffin-ai-vs-open-weight-fine-tuning-for-secops Thu, 19 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/buy-build-hybrid-supply-chain-security-2026 https://safeguard.sh/resources/blog/buy-build-hybrid-supply-chain-security-2026 Thu, 19 Feb 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/customer-story-defense-contractor-il7-deployment https://safeguard.sh/resources/blog/customer-story-defense-contractor-il7-deployment Thu, 19 Feb 2026 10:00:00 GMT Case Studies hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/getting-started-safeguard-kubernetes-admission https://safeguard.sh/resources/blog/getting-started-safeguard-kubernetes-admission Thu, 19 Feb 2026 10:00:00 GMT Tutorials hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/multi-cloud-software-supply-chain-abstractions https://safeguard.sh/resources/blog/multi-cloud-software-supply-chain-abstractions Thu, 19 Feb 2026 09:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-research-top-10-riskiest-transitive-deps-2026 https://safeguard.sh/resources/blog/safeguard-research-top-10-riskiest-transitive-deps-2026 Thu, 19 Feb 2026 09:00:00 GMT Research hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-benchmark-leakage-testing-methods https://safeguard.sh/resources/blog/ai-security-benchmark-leakage-testing-methods Wed, 18 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-claude-desktop-mcp-integration https://safeguard.sh/resources/blog/griffin-ai-vs-claude-desktop-mcp-integration Wed, 18 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-architecture-deep-dive https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-architecture-deep-dive Wed, 18 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/mcp-transport-layer-security-options https://safeguard.sh/resources/blog/mcp-transport-layer-security-options Wed, 18 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/multi-modal-ai-supply-chain-considerations https://safeguard.sh/resources/blog/multi-modal-ai-supply-chain-considerations Wed, 18 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ai-generated-dockerfile-vulnerability-patterns https://safeguard.sh/resources/blog/ai-generated-dockerfile-vulnerability-patterns Wed, 18 Feb 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cloud-supply-chain-security-aws-azure-gcp https://safeguard.sh/resources/blog/cloud-supply-chain-security-aws-azure-gcp Wed, 18 Feb 2026 10:00:00 GMT Cloud Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/npm-slopsquat-hallucinated-package-risk-2026 https://safeguard.sh/resources/blog/npm-slopsquat-hallucinated-package-risk-2026 Wed, 18 Feb 2026 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-changelog-february-2026 https://safeguard.sh/resources/blog/safeguard-changelog-february-2026 Wed, 18 Feb 2026 10:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/yaml-deserialization-attacks https://safeguard.sh/resources/blog/yaml-deserialization-attacks Wed, 18 Feb 2026 10:00:00 GMT Application Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/nist-ssdf-secure-software-development-framework-audit https://safeguard.sh/resources/blog/nist-ssdf-secure-software-development-framework-audit Wed, 18 Feb 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-openai-function-calling-scoping https://safeguard.sh/resources/blog/griffin-ai-vs-openai-function-calling-scoping Tue, 17 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/llm-selection-cost-quality-tradeoff-security https://safeguard.sh/resources/blog/llm-selection-cost-quality-tradeoff-security Tue, 17 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/blackbasta-ransomware-leak-lessons-learned https://safeguard.sh/resources/blog/blackbasta-ransomware-leak-lessons-learned Tue, 17 Feb 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nuget-package-signing-microsoft-2026 https://safeguard.sh/resources/blog/nuget-package-signing-microsoft-2026 Tue, 17 Feb 2026 09:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/frontier-model-limit-unbounded-output-space https://safeguard.sh/resources/blog/frontier-model-limit-unbounded-output-space Mon, 16 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-bring-your-own-model https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-bring-your-own-model Mon, 16 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-vertex-ai-safety-for-enterprise https://safeguard.sh/resources/blog/griffin-ai-vs-vertex-ai-safety-for-enterprise Mon, 16 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/faq-how-much-does-supply-chain-security-cost-2026 https://safeguard.sh/resources/blog/faq-how-much-does-supply-chain-security-cost-2026 Mon, 16 Feb 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/kubecon-na-2025-supply-chain-security-themes https://safeguard.sh/resources/blog/kubecon-na-2025-supply-chain-security-themes Mon, 16 Feb 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/board-level-supply-chain-security-reporting https://safeguard.sh/resources/blog/board-level-supply-chain-security-reporting Mon, 16 Feb 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/kubernetes-rbac-blast-radius-supply-chain https://safeguard.sh/resources/blog/kubernetes-rbac-blast-radius-supply-chain Mon, 16 Feb 2026 09:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-trend-eu-ai-act-enforcement-first-year https://safeguard.sh/resources/blog/ai-security-trend-eu-ai-act-enforcement-first-year Sun, 15 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-patch-minimality https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-patch-minimality Sun, 15 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/mcp-server-rate-limiting-patterns https://safeguard.sh/resources/blog/mcp-server-rate-limiting-patterns Sun, 15 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/securing-mcp-servers-enterprise-guide https://safeguard.sh/resources/blog/securing-mcp-servers-enterprise-guide Sun, 15 Feb 2026 10:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ai-supply-chain-security-risks https://safeguard.sh/resources/blog/ai-supply-chain-security-risks Sun, 15 Feb 2026 00:00:00 GMT AI Security hi@safeguard.sh (Safeguard Team) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-framework-routing-awareness https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-framework-routing-awareness Sat, 14 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-pci-dss-4-alignment https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-pci-dss-4-alignment Sat, 14 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/getting-started-safeguard-github-actions-gate https://safeguard.sh/resources/blog/getting-started-safeguard-github-actions-gate Sat, 14 Feb 2026 10:00:00 GMT Tutorials hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/gcp-artifact-analysis-api-vulnerability-triage https://safeguard.sh/resources/blog/gcp-artifact-analysis-api-vulnerability-triage Sat, 14 Feb 2026 09:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-multi-tenant-isolation-architecture-fedramp https://safeguard.sh/resources/blog/safeguard-multi-tenant-isolation-architecture-fedramp Sat, 14 Feb 2026 09:00:00 GMT Architecture hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/supply-chain-security-kpis-for-engineering-leaders https://safeguard.sh/resources/blog/supply-chain-security-kpis-for-engineering-leaders Sat, 14 Feb 2026 09:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-slsa-provenance-consumption https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-slsa-provenance-consumption Fri, 13 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/copilot-code-review-security-limitations https://safeguard.sh/resources/blog/copilot-code-review-security-limitations Fri, 13 Feb 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/lockbit-operational-takedown-aftermath https://safeguard.sh/resources/blog/lockbit-operational-takedown-aftermath Fri, 13 Feb 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-gold-registry-expansion-6000-artifacts https://safeguard.sh/resources/blog/safeguard-gold-registry-expansion-6000-artifacts Fri, 13 Feb 2026 09:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/debug-chalk-npm-compromise-sept-2025 https://safeguard.sh/resources/blog/debug-chalk-npm-compromise-sept-2025 Fri, 13 Feb 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cursor-ide-security-model-2026 https://safeguard.sh/resources/blog/cursor-ide-security-model-2026 Thu, 12 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-regression-gates https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-regression-gates Thu, 12 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-xss-variants https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-xss-variants Thu, 12 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-reka-multimodal-security-use https://safeguard.sh/resources/blog/griffin-ai-vs-reka-multimodal-security-use Thu, 12 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/customer-story-saas-vendor-cra-readiness-sprint https://safeguard.sh/resources/blog/customer-story-saas-vendor-cra-readiness-sprint Thu, 12 Feb 2026 10:00:00 GMT Case Studies hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/the-end-of-cvss-only-prioritization https://safeguard.sh/resources/blog/the-end-of-cvss-only-prioritization Thu, 12 Feb 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/maven-central-sigstore-migration-status https://safeguard.sh/resources/blog/maven-central-sigstore-migration-status Thu, 12 Feb 2026 09:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-research-ai-code-assistant-package-hallucination-study https://safeguard.sh/resources/blog/safeguard-research-ai-code-assistant-package-hallucination-study Thu, 12 Feb 2026 09:00:00 GMT Research hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-sify-technology-us-enterprise-reach https://safeguard.sh/resources/blog/safeguard-sify-technology-us-enterprise-reach Thu, 12 Feb 2026 09:00:00 GMT Company hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/enterprise-ai-incident-response-playbooks https://safeguard.sh/resources/blog/enterprise-ai-incident-response-playbooks Wed, 11 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-gemma-for-lightweight-scanning https://safeguard.sh/resources/blog/griffin-ai-vs-gemma-for-lightweight-scanning Wed, 11 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-engineer-hour-savings https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-engineer-hour-savings Wed, 11 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-novel-bug-class-detection https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-novel-bug-class-detection Wed, 11 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/container-breakout-class-vulnerabilities-2024-2025 https://safeguard.sh/resources/blog/container-breakout-class-vulnerabilities-2024-2025 Wed, 11 Feb 2026 09:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/eu-cyber-resilience-act-enforcement-timeline-2026 https://safeguard.sh/resources/blog/eu-cyber-resilience-act-enforcement-timeline-2026 Wed, 11 Feb 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vex-openvex-vs-cyclonedx-vex-which-to-pick https://safeguard.sh/resources/blog/vex-openvex-vs-cyclonedx-vex-which-to-pick Wed, 11 Feb 2026 09:00:00 GMT SBOM hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-37085-vmware-esxi-auth-bypass https://safeguard.sh/resources/blog/cve-2024-37085-vmware-esxi-auth-bypass Wed, 11 Feb 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-benchmark-contamination-concerns https://safeguard.sh/resources/blog/ai-security-benchmark-contamination-concerns Tue, 10 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-claude-agent-skills-for-security https://safeguard.sh/resources/blog/griffin-ai-vs-claude-agent-skills-for-security Tue, 10 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-security-platform-comparison https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-security-platform-comparison Tue, 10 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/faq-building-appsec-program-from-scratch-2026 https://safeguard.sh/resources/blog/faq-building-appsec-program-from-scratch-2026 Tue, 10 Feb 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/maven-central-malicious-publishing-trends-2025 https://safeguard.sh/resources/blog/maven-central-malicious-publishing-trends-2025 Tue, 10 Feb 2026 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/azure-acr-image-signing-notation-policy https://safeguard.sh/resources/blog/azure-acr-image-signing-notation-policy Tue, 10 Feb 2026 09:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fin7-supply-chain-social-engineering-2024 https://safeguard.sh/resources/blog/fin7-supply-chain-social-engineering-2024 Tue, 10 Feb 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/reproducible-builds-why-bother-in-2026 https://safeguard.sh/resources/blog/reproducible-builds-why-bother-in-2026 Tue, 10 Feb 2026 09:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-griffin-ai-v2-release https://safeguard.sh/resources/blog/safeguard-griffin-ai-v2-release Tue, 10 Feb 2026 09:00:00 GMT Product hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/griffin-ai-vs-gpt-5-context-grounding https://safeguard.sh/resources/blog/griffin-ai-vs-gpt-5-context-grounding Mon, 09 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/security-specific-reasoning-model-evaluation https://safeguard.sh/resources/blog/security-specific-reasoning-model-evaluation Mon, 09 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/getting-started-safeguard-mcp-with-chatgpt https://safeguard.sh/resources/blog/getting-started-safeguard-mcp-with-chatgpt Mon, 09 Feb 2026 10:00:00 GMT Tutorials hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/rsa-conference-2026-supply-chain-themes https://safeguard.sh/resources/blog/rsa-conference-2026-supply-chain-themes Mon, 09 Feb 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/hiring-software-supply-chain-security-engineers https://safeguard.sh/resources/blog/hiring-software-supply-chain-security-engineers Mon, 09 Feb 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/xrpl-js-npm-backdoor-april-2025 https://safeguard.sh/resources/blog/xrpl-js-npm-backdoor-april-2025 Mon, 09 Feb 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/frontier-model-limit-tool-call-privilege-escalation https://safeguard.sh/resources/blog/frontier-model-limit-tool-call-privilege-escalation Sun, 08 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-function-calling-for-security https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-function-calling-for-security Sun, 08 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-rbac-and-scoping https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-rbac-and-scoping Sun, 08 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/mcp-server-multi-tenant-isolation https://safeguard.sh/resources/blog/mcp-server-multi-tenant-isolation Sun, 08 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-model-weights-signing-attestation https://safeguard.sh/resources/blog/ai-model-weights-signing-attestation Sun, 08 Feb 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/gitlab-oidc-token-theft-workflow-research https://safeguard.sh/resources/blog/gitlab-oidc-token-theft-workflow-research Sun, 08 Feb 2026 10:00:00 GMT Emerging Technology hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-enrichment-vulnerability-correlation https://safeguard.sh/resources/blog/sbom-enrichment-vulnerability-correlation Sun, 08 Feb 2026 10:00:00 GMT SBOM hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/safeguard-policy-evaluation-engine-architecture https://safeguard.sh/resources/blog/safeguard-policy-evaluation-engine-architecture Sun, 08 Feb 2026 09:00:00 GMT Architecture hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-trend-ai-bom-adoption-2026 https://safeguard.sh/resources/blog/ai-security-trend-ai-bom-adoption-2026 Sat, 07 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-fix-explanation-quality https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-fix-explanation-quality Sat, 07 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/go-module-checksum-database-in-depth https://safeguard.sh/resources/blog/go-module-checksum-database-in-depth Sat, 07 Feb 2026 09:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-dynamic-dispatch-handling https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-dynamic-dispatch-handling Fri, 06 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fargate-ecs-container-supply-chain-pitfalls https://safeguard.sh/resources/blog/fargate-ecs-container-supply-chain-pitfalls Fri, 06 Feb 2026 09:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/gamaredon-ukraine-targeting-supply-chain-2025 https://safeguard.sh/resources/blog/gamaredon-ukraine-targeting-supply-chain-2025 Fri, 06 Feb 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/lazarus-group-3cx-and-software-builds https://safeguard.sh/resources/blog/lazarus-group-3cx-and-software-builds Fri, 06 Feb 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/secure-defaults-for-internal-developer-platforms https://safeguard.sh/resources/blog/secure-defaults-for-internal-developer-platforms Fri, 06 Feb 2026 09:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-47176-cups-network-rce https://safeguard.sh/resources/blog/cve-2024-47176-cups-network-rce Fri, 06 Feb 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-iso-27001-mapping https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-iso-27001-mapping Thu, 05 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-vex-integration https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-vex-integration Thu, 05 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/llm-output-filtering-as-security-control https://safeguard.sh/resources/blog/llm-output-filtering-as-security-control Thu, 05 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/customer-story-federal-agency-fedramp-evidence-pack https://safeguard.sh/resources/blog/customer-story-federal-agency-fedramp-evidence-pack Thu, 05 Feb 2026 10:00:00 GMT Case Studies hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/llm-jailbreak-as-supply-chain-risk-2026 https://safeguard.sh/resources/blog/llm-jailbreak-as-supply-chain-risk-2026 Thu, 05 Feb 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-as-a-product-not-a-checkbox-2026 https://safeguard.sh/resources/blog/sbom-as-a-product-not-a-checkbox-2026 Thu, 05 Feb 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vulnerability-management-automation-2026 https://safeguard.sh/resources/blog/vulnerability-management-automation-2026 Thu, 05 Feb 2026 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/aws-ecr-signing-policies-notation https://safeguard.sh/resources/blog/aws-ecr-signing-policies-notation Thu, 05 Feb 2026 09:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-research-abandoned-dependency-risk-study https://safeguard.sh/resources/blog/safeguard-research-abandoned-dependency-risk-study Thu, 05 Feb 2026 09:00:00 GMT Research hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/solana-web3-js-npm-backdoor-2024 https://safeguard.sh/resources/blog/solana-web3-js-npm-backdoor-2024 Thu, 05 Feb 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-inflection-pi-for-security-assistance https://safeguard.sh/resources/blog/griffin-ai-vs-inflection-pi-for-security-assistance Wed, 04 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-path-traversal-cases https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-path-traversal-cases Wed, 04 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-refusal-rate-analysis https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-refusal-rate-analysis Wed, 04 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/faq-sbom-format-choice-cyclonedx-vs-spdx https://safeguard.sh/resources/blog/faq-sbom-format-choice-cyclonedx-vs-spdx Wed, 04 Feb 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/getting-started-safeguard-mcp-with-claude-desktop https://safeguard.sh/resources/blog/getting-started-safeguard-mcp-with-claude-desktop Wed, 04 Feb 2026 10:00:00 GMT Tutorials hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/leaky-vessels-runc-container-escape-class-2024 https://safeguard.sh/resources/blog/leaky-vessels-runc-container-escape-class-2024 Wed, 04 Feb 2026 10:00:00 GMT Emerging Technology hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-lino-2-0-release-compliance-model https://safeguard.sh/resources/blog/safeguard-lino-2-0-release-compliance-model Wed, 04 Feb 2026 09:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-ingestion-at-scale-architecture https://safeguard.sh/resources/blog/sbom-ingestion-at-scale-architecture Wed, 04 Feb 2026 09:00:00 GMT SBOM hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sec-cybersecurity-incident-disclosure-rule-year-two https://safeguard.sh/resources/blog/sec-cybersecurity-incident-disclosure-rule-year-two Wed, 04 Feb 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/state-of-vulnerability-management-2026-report https://safeguard.sh/resources/blog/state-of-vulnerability-management-2026-report Wed, 04 Feb 2026 00:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/enterprise-llm-budget-management-patterns https://safeguard.sh/resources/blog/enterprise-llm-budget-management-patterns Tue, 03 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-deepseek-coder-for-security-review https://safeguard.sh/resources/blog/griffin-ai-vs-deepseek-coder-for-security-review Tue, 03 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-exploit-path-synthesis https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-exploit-path-synthesis Tue, 03 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-throughput-at-scale https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-throughput-at-scale Tue, 03 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/rag-pipeline-supply-chain-attacks https://safeguard.sh/resources/blog/rag-pipeline-supply-chain-attacks Tue, 03 Feb 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/zero-day-discovery-automated-approaches https://safeguard.sh/resources/blog/zero-day-discovery-automated-approaches Tue, 03 Feb 2026 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/ocid-cncf-image-supply-chain-2026 https://safeguard.sh/resources/blog/ocid-cncf-image-supply-chain-2026 Tue, 03 Feb 2026 09:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-benchmark-sevenllm-design https://safeguard.sh/resources/blog/ai-security-benchmark-sevenllm-design Mon, 02 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-claude-haiku-for-bulk-scanning https://safeguard.sh/resources/blog/griffin-ai-vs-claude-haiku-for-bulk-scanning Mon, 02 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/defcon-33-recap-software-supply-chain-sessions https://safeguard.sh/resources/blog/defcon-33-recap-software-supply-chain-sessions Mon, 02 Feb 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pypi-mexalz-malware-campaign-deep-dive https://safeguard.sh/resources/blog/pypi-mexalz-malware-campaign-deep-dive Mon, 02 Feb 2026 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dev-container-security-posture-dotfiles https://safeguard.sh/resources/blog/dev-container-security-posture-dotfiles Mon, 02 Feb 2026 09:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/measuring-appsec-program-effectiveness-2026 https://safeguard.sh/resources/blog/measuring-appsec-program-effectiveness-2026 Mon, 02 Feb 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ransomhub-ransomware-edr-bypass-2024 https://safeguard.sh/resources/blog/ransomhub-ransomware-edr-bypass-2024 Mon, 02 Feb 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/rust-crates-io-supply-chain-controls-2026 https://safeguard.sh/resources/blog/rust-crates-io-supply-chain-controls-2026 Mon, 02 Feb 2026 09:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-exploring-partnership-sify-technology-usa https://safeguard.sh/resources/blog/safeguard-exploring-partnership-sify-technology-usa Mon, 02 Feb 2026 09:00:00 GMT Company hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-griffin-agent-loop-design https://safeguard.sh/resources/blog/safeguard-griffin-agent-loop-design Mon, 02 Feb 2026 09:00:00 GMT Architecture hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/salt-typhoon-telecom-supply-chain-campaign-2024 https://safeguard.sh/resources/blog/salt-typhoon-telecom-supply-chain-campaign-2024 Mon, 02 Feb 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2025-23006-sonicwall-sma-1000-rce https://safeguard.sh/resources/blog/cve-2025-23006-sonicwall-sma-1000-rce Mon, 02 Feb 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-audit-log-completeness https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-audit-log-completeness Sun, 01 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-openai-o1-reasoning https://safeguard.sh/resources/blog/griffin-ai-vs-openai-o1-reasoning Sun, 01 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/small-model-distillation-for-security-workflows https://safeguard.sh/resources/blog/small-model-distillation-for-security-workflows Sun, 01 Feb 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/software-transparency-act-2026-analysis https://safeguard.sh/resources/blog/software-transparency-act-2026-analysis Sun, 01 Feb 2026 10:00:00 GMT Compliance hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/gcp-cloud-build-workload-identity-federation https://safeguard.sh/resources/blog/gcp-cloud-build-workload-identity-federation Sun, 01 Feb 2026 09:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ledger-connect-kit-supply-chain-attack-2023 https://safeguard.sh/resources/blog/ledger-connect-kit-supply-chain-attack-2023 Sun, 01 Feb 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/frontier-model-limit-training-data-opacity https://safeguard.sh/resources/blog/frontier-model-limit-training-data-opacity Sat, 31 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-long-context-for-codebases https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-long-context-for-codebases Sat, 31 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-human-review-burden https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-human-review-burden Sat, 31 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ai-security-trend-agent-security-enterprise-adoption https://safeguard.sh/resources/blog/ai-security-trend-agent-security-enterprise-adoption Fri, 30 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/claude-code-coding-agent-security-posture https://safeguard.sh/resources/blog/claude-code-coding-agent-security-posture Fri, 30 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cross-package-analysis https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cross-package-analysis Fri, 30 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/faq-software-supply-chain-security-for-cisos-2026 https://safeguard.sh/resources/blog/faq-software-supply-chain-security-for-cisos-2026 Fri, 30 Jan 2026 10:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/getting-started-safeguard-cli-first-scan https://safeguard.sh/resources/blog/getting-started-safeguard-cli-first-scan Fri, 30 Jan 2026 10:00:00 GMT Tutorials hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/kubernetes-supply-chain-sigstore-policy-controller https://safeguard.sh/resources/blog/kubernetes-supply-chain-sigstore-policy-controller Fri, 30 Jan 2026 09:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/scattered-spider-identity-supply-chain-2024-2025 https://safeguard.sh/resources/blog/scattered-spider-identity-supply-chain-2024-2025 Fri, 30 Jan 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/state-of-sbom-adoption-across-industries-2026 https://safeguard.sh/resources/blog/state-of-sbom-adoption-across-industries-2026 Fri, 30 Jan 2026 00:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-ai-bom-awareness https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-ai-bom-awareness Thu, 29 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-soc2-type2-evidence https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-soc2-type2-evidence Thu, 29 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ai-model-weight-tampering-detection-techniques https://safeguard.sh/resources/blog/ai-model-weight-tampering-detection-techniques Thu, 29 Jan 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/customer-story-fintech-80-percent-cve-noise-cut https://safeguard.sh/resources/blog/customer-story-fintech-80-percent-cve-noise-cut Thu, 29 Jan 2026 10:00:00 GMT Case Studies hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/llm-agent-code-execution-sandboxing https://safeguard.sh/resources/blog/llm-agent-code-execution-sandboxing Thu, 29 Jan 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/the-case-for-autonomous-remediation-now https://safeguard.sh/resources/blog/the-case-for-autonomous-remediation-now Thu, 29 Jan 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-research-reachability-noise-reduction-findings https://safeguard.sh/resources/blog/safeguard-research-reachability-noise-reduction-findings Thu, 29 Jan 2026 09:00:00 GMT Research hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-57727-screenconnect-path-traversal https://safeguard.sh/resources/blog/cve-2024-57727-screenconnect-path-traversal Thu, 29 Jan 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-citation-accuracy https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-citation-accuracy Wed, 28 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-ssrf-detection https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-ssrf-detection Wed, 28 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/mcp-server-capability-declaration-audit https://safeguard.sh/resources/blog/mcp-server-capability-declaration-audit Wed, 28 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/black-hat-usa-2025-supply-chain-security-recap https://safeguard.sh/resources/blog/black-hat-usa-2025-supply-chain-security-recap Wed, 28 Jan 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-changelog-january-2026 https://safeguard.sh/resources/blog/safeguard-changelog-january-2026 Wed, 28 Jan 2026 10:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cisa-secure-by-design-pledge-signatories-2026 https://safeguard.sh/resources/blog/cisa-secure-by-design-pledge-signatories-2026 Wed, 28 Jan 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fda-premarket-cybersecurity-sbom-2026 https://safeguard.sh/resources/blog/fda-premarket-cybersecurity-sbom-2026 Wed, 28 Jan 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pypi-trusted-publishing-common-pitfalls https://safeguard.sh/resources/blog/pypi-trusted-publishing-common-pitfalls Wed, 28 Jan 2026 09:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-gold-build-pipeline-how-it-works https://safeguard.sh/resources/blog/safeguard-gold-build-pipeline-how-it-works Wed, 28 Jan 2026 09:00:00 GMT Architecture hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-in-pull-request-workflows-practical https://safeguard.sh/resources/blog/sbom-in-pull-request-workflows-practical Wed, 28 Jan 2026 09:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/rspack-npm-account-takeover-2024 https://safeguard.sh/resources/blog/rspack-npm-account-takeover-2024 Wed, 28 Jan 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-ai21-jurassic-security-workflows https://safeguard.sh/resources/blog/griffin-ai-vs-ai21-jurassic-security-workflows Tue, 27 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cache-hit-optimisation https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cache-hit-optimisation Tue, 27 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/azure-devops-supply-chain-hardening-guide https://safeguard.sh/resources/blog/azure-devops-supply-chain-hardening-guide Tue, 27 Jan 2026 09:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/enterprise-rag-security-rollout-antipatterns https://safeguard.sh/resources/blog/enterprise-rag-security-rollout-antipatterns Mon, 26 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cwe-classification-accuracy https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cwe-classification-accuracy Mon, 26 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-qwen-for-code-security https://safeguard.sh/resources/blog/griffin-ai-vs-qwen-for-code-security Mon, 26 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cilium-tetragon-runtime-security-ebpf https://safeguard.sh/resources/blog/cilium-tetragon-runtime-security-ebpf Mon, 26 Jan 2026 09:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/how-to-build-a-software-supply-chain-program-90-days https://safeguard.sh/resources/blog/how-to-build-a-software-supply-chain-program-90-days Mon, 26 Jan 2026 09:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-benchmark-secbench-methodology https://safeguard.sh/resources/blog/ai-security-benchmark-secbench-methodology Sun, 25 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-claude-sonnet-for-remediation https://safeguard.sh/resources/blog/griffin-ai-vs-claude-sonnet-for-remediation Sun, 25 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-data-residency-controls https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-data-residency-controls Sun, 25 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cisa-sbom-mandate-enforcement-begins https://safeguard.sh/resources/blog/cisa-sbom-mandate-enforcement-begins Sun, 25 Jan 2026 10:00:00 GMT Compliance hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/getting-started-safeguard-ide-extension-vscode https://safeguard.sh/resources/blog/getting-started-safeguard-ide-extension-vscode Sun, 25 Jan 2026 10:00:00 GMT Tutorials hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-49113-windows-ldap-lsass-rce https://safeguard.sh/resources/blog/cve-2024-49113-windows-ldap-lsass-rce Sun, 25 Jan 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/state-of-software-supply-chain-security-2026 https://safeguard.sh/resources/blog/state-of-software-supply-chain-security-2026 Sun, 25 Jan 2026 00:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/domain-adapted-llm-vulnerability-detection-2026 https://safeguard.sh/resources/blog/domain-adapted-llm-vulnerability-detection-2026 Sat, 24 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-gpt-4o-security-limits https://safeguard.sh/resources/blog/griffin-ai-vs-gpt-4o-security-limits Sat, 24 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-regression-testing-on-fixes https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-regression-testing-on-fixes Sat, 24 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/prompt-injection-supply-chain-risk-2026 https://safeguard.sh/resources/blog/prompt-injection-supply-chain-risk-2026 Sat, 24 Jan 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/github-actions-pinning-sha-vs-tag https://safeguard.sh/resources/blog/github-actions-pinning-sha-vs-tag Sat, 24 Jan 2026 09:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-eagle-3-0-release-malware-classifier https://safeguard.sh/resources/blog/safeguard-eagle-3-0-release-malware-classifier Sat, 24 Jan 2026 09:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/frontier-model-limit-instruction-data-conflation https://safeguard.sh/resources/blog/frontier-model-limit-instruction-data-conflation Fri, 23 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-code-assist-for-security https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-code-assist-for-security Fri, 23 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-spdx-coverage https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-spdx-coverage Fri, 23 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/clop-cl0p-supply-chain-exploitation-patterns https://safeguard.sh/resources/blog/clop-cl0p-supply-chain-exploitation-patterns Fri, 23 Jan 2026 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-knowledge-graph-architecture-deep-dive https://safeguard.sh/resources/blog/safeguard-knowledge-graph-architecture-deep-dive Fri, 23 Jan 2026 09:00:00 GMT Architecture hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/polyfill-io-cdn-supply-chain-attack-june-2024 https://safeguard.sh/resources/blog/polyfill-io-cdn-supply-chain-attack-june-2024 Fri, 23 Jan 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-trend-mcp-ecosystem-maturation https://safeguard.sh/resources/blog/ai-security-trend-mcp-ecosystem-maturation Thu, 22 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-fedramp-high-posture https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-fedramp-high-posture Thu, 22 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-taint-propagation https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-taint-propagation Thu, 22 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/mcp-server-discovery-protocol-security https://safeguard.sh/resources/blog/mcp-server-discovery-protocol-security Thu, 22 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/customer-story-healthcare-system-self-healing-containers https://safeguard.sh/resources/blog/customer-story-healthcare-system-self-healing-containers Thu, 22 Jan 2026 10:00:00 GMT Case Studies hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/huggingface-pickle-backdoor-research-2025 https://safeguard.sh/resources/blog/huggingface-pickle-backdoor-research-2025 Thu, 22 Jan 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-composition-analysis-next-generation https://safeguard.sh/resources/blog/software-composition-analysis-next-generation Thu, 22 Jan 2026 10:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/why-scanning-alone-does-not-work-anymore-2026 https://safeguard.sh/resources/blog/why-scanning-alone-does-not-work-anymore-2026 Thu, 22 Jan 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/aws-codebuild-codepipeline-hardening-2026 https://safeguard.sh/resources/blog/aws-codebuild-codepipeline-hardening-2026 Thu, 22 Jan 2026 09:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/container-image-signing-with-cosign-production https://safeguard.sh/resources/blog/container-image-signing-with-cosign-production Thu, 22 Jan 2026 09:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/npm-provenance-statements-practical-2026 https://safeguard.sh/resources/blog/npm-provenance-statements-practical-2026 Thu, 22 Jan 2026 09:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-research-oss-malware-trends-q1-2026 https://safeguard.sh/resources/blog/safeguard-research-oss-malware-trends-q1-2026 Thu, 22 Jan 2026 09:00:00 GMT Research hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-tech-d-cybersecurity-joint-opportunity https://safeguard.sh/resources/blog/safeguard-tech-d-cybersecurity-joint-opportunity Thu, 22 Jan 2026 09:00:00 GMT Company hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-adversarial-resistance https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-adversarial-resistance Wed, 21 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cisa-secure-by-design-pledge-practical-impact https://safeguard.sh/resources/blog/cisa-secure-by-design-pledge-practical-impact Wed, 21 Jan 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-40711-veeam-backup-rce https://safeguard.sh/resources/blog/cve-2024-40711-veeam-backup-rce Wed, 21 Jan 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-deserialization-vulns https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-deserialization-vulns Tue, 20 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ai-agent-security-risks-2026 https://safeguard.sh/resources/blog/ai-agent-security-risks-2026 Tue, 20 Jan 2026 10:00:00 GMT AI Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/npm-everything-package-attack-2024-analysis https://safeguard.sh/resources/blog/npm-everything-package-attack-2024-analysis Tue, 20 Jan 2026 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pre-commit-hooks-security-gotchas https://safeguard.sh/resources/blog/pre-commit-hooks-security-gotchas Tue, 20 Jan 2026 09:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/devops-devsecops-shift-left https://safeguard.sh/resources/blog/devops-devsecops-shift-left Tue, 20 Jan 2026 00:00:00 GMT DevSecOps hi@safeguard.sh (Safeguard Team) https://safeguard.sh/resources/blog/griffin-ai-vs-cohere-command-for-secops https://safeguard.sh/resources/blog/griffin-ai-vs-cohere-command-for-secops Mon, 19 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-disproof-step https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-disproof-step Mon, 19 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-model-tiering-strategy https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-model-tiering-strategy Mon, 19 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/distroless-vs-chainguard-vs-wolfi-base-images https://safeguard.sh/resources/blog/distroless-vs-chainguard-vs-wolfi-base-images Mon, 19 Jan 2026 09:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/lottie-player-npm-supply-chain-attack https://safeguard.sh/resources/blog/lottie-player-npm-supply-chain-attack Mon, 19 Jan 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-safety-eval-datasets-supply-chain https://safeguard.sh/resources/blog/ai-safety-eval-datasets-supply-chain Sun, 18 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/enterprise-ai-agent-deployment-lessons-2026 https://safeguard.sh/resources/blog/enterprise-ai-agent-deployment-lessons-2026 Sun, 18 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mistral-large-for-remediation https://safeguard.sh/resources/blog/griffin-ai-vs-mistral-large-for-remediation Sun, 18 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-enterprise-sso-scim https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-enterprise-sso-scim Sun, 18 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/model-context-protocol-threat-model-2026 https://safeguard.sh/resources/blog/model-context-protocol-threat-model-2026 Sun, 18 Jan 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/inside-safeguard-reachability-engine-architecture https://safeguard.sh/resources/blog/inside-safeguard-reachability-engine-architecture Sun, 18 Jan 2026 09:00:00 GMT Architecture hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-benchmark-swe-bench-security-extensions https://safeguard.sh/resources/blog/ai-security-benchmark-swe-bench-security-extensions Sat, 17 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-claude-opus-for-triage https://safeguard.sh/resources/blog/griffin-ai-vs-claude-opus-for-triage Sat, 17 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-auto-fix-compile-rates https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-auto-fix-compile-rates Sat, 17 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cve-2025-0411-winrar-mark-of-the-web-bypass https://safeguard.sh/resources/blog/cve-2025-0411-winrar-mark-of-the-web-bypass Sat, 17 Jan 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fine-tuning-security-llm-vs-grounding-approach https://safeguard.sh/resources/blog/fine-tuning-security-llm-vs-grounding-approach Fri, 16 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-eu-cra-readiness https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-eu-cra-readiness Fri, 16 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-openai-codex-security https://safeguard.sh/resources/blog/griffin-ai-vs-openai-codex-security Fri, 16 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/secrets-management-in-ci-pipelines-2026 https://safeguard.sh/resources/blog/secrets-management-in-ci-pipelines-2026 Fri, 16 Jan 2026 09:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/anthropic-mcp-security-model-deep-dive https://safeguard.sh/resources/blog/anthropic-mcp-security-model-deep-dive Thu, 15 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/frontier-model-limit-context-window-security https://safeguard.sh/resources/blog/frontier-model-limit-context-window-security Thu, 15 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-ultra-reasoning https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-ultra-reasoning Thu, 15 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cyclonedx-support https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-cyclonedx-support Thu, 15 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/customer-story-fortune-500-bank-sbom-program-2026 https://safeguard.sh/resources/blog/customer-story-fortune-500-bank-sbom-program-2026 Thu, 15 Jan 2026 10:00:00 GMT Case Studies hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/supply-chain-security-trends-2026 https://safeguard.sh/resources/blog/supply-chain-security-trends-2026 Thu, 15 Jan 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-trend-training-data-provenance-regulation https://safeguard.sh/resources/blog/ai-security-trend-training-data-provenance-regulation Wed, 14 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-call-graph-depth https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-call-graph-depth Wed, 14 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/eo-14028-two-years-in-what-shipped https://safeguard.sh/resources/blog/eo-14028-two-years-in-what-shipped Wed, 14 Jan 2026 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/tj-actions-changed-files-compromise-march-2025 https://safeguard.sh/resources/blog/tj-actions-changed-files-compromise-march-2025 Wed, 14 Jan 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-eval-methodology https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-eval-methodology Tue, 13 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-sql-injection-chains https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-sql-injection-chains Tue, 13 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/kubernetes-admission-controller-supply-chain-policy https://safeguard.sh/resources/blog/kubernetes-admission-controller-supply-chain-policy Tue, 13 Jan 2026 09:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-38856-apache-ofbiz-pre-auth-rce https://safeguard.sh/resources/blog/cve-2024-38856-apache-ofbiz-pre-auth-rce Tue, 13 Jan 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-hypothesis-quality https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-hypothesis-quality Mon, 12 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/zero-knowledge-proofs-supply-chain-attestation https://safeguard.sh/resources/blog/zero-knowledge-proofs-supply-chain-attestation Mon, 12 Jan 2026 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-model-vulnerability-scanning https://safeguard.sh/resources/blog/ai-model-vulnerability-scanning Mon, 12 Jan 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-changelog-q4-2025-recap https://safeguard.sh/resources/blog/safeguard-changelog-q4-2025-recap Mon, 12 Jan 2026 10:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/securing-claude-code-mcp-server-deployments https://safeguard.sh/resources/blog/securing-claude-code-mcp-server-deployments Mon, 12 Jan 2026 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/xml-parsing-security-xxe-billion-laughs https://safeguard.sh/resources/blog/xml-parsing-security-xxe-billion-laughs Mon, 12 Jan 2026 10:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/safeguard-exploring-partnership-tech-d-cybersecurity https://safeguard.sh/resources/blog/safeguard-exploring-partnership-tech-d-cybersecurity Mon, 12 Jan 2026 09:00:00 GMT Company hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-air-gapped-environments https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-air-gapped-environments Sun, 11 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-per-scan-token-cost https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-per-scan-token-cost Sun, 11 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-xai-grok-for-security https://safeguard.sh/resources/blog/griffin-ai-vs-xai-grok-for-security Sun, 11 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/enterprise-ai-security-rollout-governance-gap https://safeguard.sh/resources/blog/enterprise-ai-security-rollout-governance-gap Sat, 10 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-llama-3-for-security https://safeguard.sh/resources/blog/griffin-ai-vs-llama-3-for-security Sat, 10 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-remediation-pr-quality https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-remediation-pr-quality Sat, 10 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/state-of-sbom-adoption-2026 https://safeguard.sh/resources/blog/state-of-sbom-adoption-2026 Sat, 10 Jan 2026 10:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/safeguard-griffin-3-0-ga-release-announcement https://safeguard.sh/resources/blog/safeguard-griffin-3-0-ga-release-announcement Sat, 10 Jan 2026 09:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-benchmark-cybersecevval-review https://safeguard.sh/resources/blog/ai-security-benchmark-cybersecevval-review Fri, 09 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-ssdf-attestation https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-ssdf-attestation Fri, 09 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-raw-claude-security-workflow https://safeguard.sh/resources/blog/griffin-ai-vs-raw-claude-security-workflow Fri, 09 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-2024-43573-windows-mshtml-spoofing https://safeguard.sh/resources/blog/cve-2024-43573-windows-mshtml-spoofing Fri, 09 Jan 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ultralytics-pypi-compromise-december-2024 https://safeguard.sh/resources/blog/ultralytics-pypi-compromise-december-2024 Fri, 09 Jan 2026 00:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-agent-tool-scope-enforcement-patterns https://safeguard.sh/resources/blog/ai-agent-tool-scope-enforcement-patterns Thu, 08 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-gpt-5-security-workflow https://safeguard.sh/resources/blog/griffin-ai-vs-gpt-5-security-workflow Thu, 08 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-reachability-analysis https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-reachability-analysis Thu, 08 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/specialised-security-llm-vs-frontier-model-choice https://safeguard.sh/resources/blog/specialised-security-llm-vs-frontier-model-choice Thu, 08 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/frontier-model-limit-non-determinism https://safeguard.sh/resources/blog/frontier-model-limit-non-determinism Wed, 07 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-pro-security-workflow https://safeguard.sh/resources/blog/griffin-ai-vs-gemini-pro-security-workflow Wed, 07 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-sbom-ingestion https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-sbom-ingestion Wed, 07 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-security-trend-prompt-injection-at-scale-2026 https://safeguard.sh/resources/blog/ai-security-trend-prompt-injection-at-scale-2026 Tue, 06 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-published-benchmarks https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-published-benchmarks Tue, 06 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-code-generation-audit-trail-patterns https://safeguard.sh/resources/blog/ai-code-generation-audit-trail-patterns Mon, 05 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-zero-day-pipeline https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-zero-day-pipeline Mon, 05 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-changelog-q3-2025-recap https://safeguard.sh/resources/blog/safeguard-changelog-q3-2025-recap Mon, 05 Jan 2026 10:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-v5-one-year-anniversary https://safeguard.sh/resources/blog/safeguard-v5-one-year-anniversary Mon, 05 Jan 2026 09:00:00 GMT Product hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/cve-2024-53677-apache-struts-rce-deep-dive https://safeguard.sh/resources/blog/cve-2024-53677-apache-struts-rce-deep-dive Mon, 05 Jan 2026 00:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/open-source-risk-management https://safeguard.sh/resources/blog/open-source-risk-management Mon, 05 Jan 2026 00:00:00 GMT Open Source hi@safeguard.sh (Safeguard Team) https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-on-premises-deployment https://safeguard.sh/resources/blog/griffin-ai-vs-mythos-on-premises-deployment Sun, 04 Jan 2026 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/homomorphic-encryption-software-supply-chain-use https://safeguard.sh/resources/blog/homomorphic-encryption-software-supply-chain-use Mon, 22 Dec 2025 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/predictions-software-security-2026 https://safeguard.sh/resources/blog/predictions-software-security-2026 Mon, 22 Dec 2025 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-compliance-global-mandate-tracker https://safeguard.sh/resources/blog/sbom-compliance-global-mandate-tracker Sat, 20 Dec 2025 10:00:00 GMT Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ai-tool-confused-deputy-deep-dive https://safeguard.sh/resources/blog/ai-tool-confused-deputy-deep-dive Mon, 15 Dec 2025 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/annual-sscs-report-summary-2025 https://safeguard.sh/resources/blog/annual-sscs-report-summary-2025 Mon, 15 Dec 2025 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-supply-chain-security-2025-year-review https://safeguard.sh/resources/blog/software-supply-chain-security-2025-year-review Mon, 15 Dec 2025 10:00:00 GMT Industry Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/secure-software-development-lifecycle-2025 https://safeguard.sh/resources/blog/secure-software-development-lifecycle-2025 Mon, 08 Dec 2025 09:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/prompt-injection-detection-retrieval-systems https://safeguard.sh/resources/blog/prompt-injection-detection-retrieval-systems Tue, 02 Dec 2025 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vulnerability-remediation-automation-roi https://safeguard.sh/resources/blog/vulnerability-remediation-automation-roi Mon, 01 Dec 2025 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/kubernetes-operator-security-checklist https://safeguard.sh/resources/blog/kubernetes-operator-security-checklist Fri, 28 Nov 2025 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-model-watermarking-provenance-techniques https://safeguard.sh/resources/blog/ai-model-watermarking-provenance-techniques Tue, 25 Nov 2025 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-cli-v5-release https://safeguard.sh/resources/blog/safeguard-cli-v5-release Tue, 25 Nov 2025 09:00:00 GMT Product Launch hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/supply-chain-security-for-regulated-industries https://safeguard.sh/resources/blog/supply-chain-security-for-regulated-industries Thu, 20 Nov 2025 10:00:00 GMT Compliance hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/training-data-provenance-enterprise-fine-tuning https://safeguard.sh/resources/blog/training-data-provenance-enterprise-fine-tuning Tue, 18 Nov 2025 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/npm-provenance-adoption-tracking-late-2025 https://safeguard.sh/resources/blog/npm-provenance-adoption-tracking-late-2025 Wed, 12 Nov 2025 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ai-generated-sboms-accuracy-assessment https://safeguard.sh/resources/blog/ai-generated-sboms-accuracy-assessment Wed, 12 Nov 2025 10:00:00 GMT SBOM hi@safeguard.sh (James) https://safeguard.sh/resources/blog/open-source-license-compliance-automation https://safeguard.sh/resources/blog/open-source-license-compliance-automation Sat, 08 Nov 2025 10:00:00 GMT Compliance hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/webassembly-wasi-security-model-2025 https://safeguard.sh/resources/blog/webassembly-wasi-security-model-2025 Wed, 05 Nov 2025 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/software-provenance-end-to-end-guide https://safeguard.sh/resources/blog/software-provenance-end-to-end-guide Wed, 05 Nov 2025 10:00:00 GMT Build Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dependency-lifecycle-management-guide https://safeguard.sh/resources/blog/dependency-lifecycle-management-guide Thu, 30 Oct 2025 10:00:00 GMT Best Practices hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/dhs-software-assurance-guidance-2025 https://safeguard.sh/resources/blog/dhs-software-assurance-guidance-2025 Tue, 28 Oct 2025 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/open-source-vulnerability-database-comparison https://safeguard.sh/resources/blog/open-source-vulnerability-database-comparison Wed, 22 Oct 2025 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/retrieval-augmented-generation-poisoning-defenses https://safeguard.sh/resources/blog/retrieval-augmented-generation-poisoning-defenses Mon, 20 Oct 2025 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/embedding-model-supply-chain-risks https://safeguard.sh/resources/blog/embedding-model-supply-chain-risks Sat, 18 Oct 2025 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/iso-27001-2022-transition-deadline-approach https://safeguard.sh/resources/blog/iso-27001-2022-transition-deadline-approach Wed, 15 Oct 2025 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/safeguard-guardrails-feature-release https://safeguard.sh/resources/blog/safeguard-guardrails-feature-release Wed, 15 Oct 2025 09:00:00 GMT Product Launch hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/cvss-4-0-scoring-adoption-review https://safeguard.sh/resources/blog/cvss-4-0-scoring-adoption-review Fri, 10 Oct 2025 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cisa-software-identification-ecosystem https://safeguard.sh/resources/blog/cisa-software-identification-ecosystem Fri, 10 Oct 2025 10:00:00 GMT Compliance hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/prisma-cloud-vs-wiz-supply-chain-features https://safeguard.sh/resources/blog/prisma-cloud-vs-wiz-supply-chain-features Thu, 02 Oct 2025 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/container-sbom-generation-best-practices https://safeguard.sh/resources/blog/container-sbom-generation-best-practices Wed, 01 Oct 2025 10:00:00 GMT SBOM hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/supply-chain-attack-trends-q3-2025 https://safeguard.sh/resources/blog/supply-chain-attack-trends-q3-2025 Thu, 25 Sep 2025 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-attestation-framework-comparison https://safeguard.sh/resources/blog/software-attestation-framework-comparison Thu, 25 Sep 2025 10:00:00 GMT Build Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/tls-library-comparison-openssl-libressl-boringssl https://safeguard.sh/resources/blog/tls-library-comparison-openssl-libressl-boringssl Sat, 20 Sep 2025 10:00:00 GMT Secure Development hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/vex-adoption-enterprise-case-studies https://safeguard.sh/resources/blog/vex-adoption-enterprise-case-studies Thu, 18 Sep 2025 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-agent-memory-security-risks https://safeguard.sh/resources/blog/ai-agent-memory-security-risks Mon, 15 Sep 2025 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/hipaa-security-rule-update-supply-chain https://safeguard.sh/resources/blog/hipaa-security-rule-update-supply-chain Mon, 15 Sep 2025 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/vector-db-security-considerations-2025 https://safeguard.sh/resources/blog/vector-db-security-considerations-2025 Wed, 10 Sep 2025 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sbom-interoperability-cyclonedx-spdx-bridge https://safeguard.sh/resources/blog/sbom-interoperability-cyclonedx-spdx-bridge Wed, 10 Sep 2025 10:00:00 GMT SBOM hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/cloud-native-application-protection-platforms https://safeguard.sh/resources/blog/cloud-native-application-protection-platforms Fri, 05 Sep 2025 10:00:00 GMT Cloud Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/genai-code-review-tools-field-test-2025 https://safeguard.sh/resources/blog/genai-code-review-tools-field-test-2025 Tue, 02 Sep 2025 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/supply-chain-attacks-targeting-ai-ml-pipelines https://safeguard.sh/resources/blog/supply-chain-attacks-targeting-ai-ml-pipelines Mon, 01 Sep 2025 10:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/open-weight-model-sandboxing-patterns https://safeguard.sh/resources/blog/open-weight-model-sandboxing-patterns Thu, 28 Aug 2025 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/safeguard-desktop-app-release https://safeguard.sh/resources/blog/safeguard-desktop-app-release Mon, 25 Aug 2025 09:00:00 GMT Product Launch hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/how-to-add-reachability-analysis-to-pr-checks https://safeguard.sh/resources/blog/how-to-add-reachability-analysis-to-pr-checks Wed, 20 Aug 2025 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/runtime-threat-detection-cloud-native https://safeguard.sh/resources/blog/runtime-threat-detection-cloud-native Mon, 18 Aug 2025 10:00:00 GMT Cloud Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/eu-nis2-directive-enforcement-first-year https://safeguard.sh/resources/blog/eu-nis2-directive-enforcement-first-year Fri, 15 Aug 2025 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/local-llm-deployment-enterprise-risks https://safeguard.sh/resources/blog/local-llm-deployment-enterprise-risks Tue, 12 Aug 2025 12:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/open-source-maintainer-succession-planning https://safeguard.sh/resources/blog/open-source-maintainer-succession-planning Sun, 10 Aug 2025 10:00:00 GMT Open Source hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/binary-sbom-analysis-reverse-engineering https://safeguard.sh/resources/blog/binary-sbom-analysis-reverse-engineering Fri, 08 Aug 2025 10:00:00 GMT SBOM hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/security-budget-justification-supply-chain-program https://safeguard.sh/resources/blog/security-budget-justification-supply-chain-program Tue, 05 Aug 2025 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sbom-quality-metrics-beyond-completeness https://safeguard.sh/resources/blog/sbom-quality-metrics-beyond-completeness Fri, 01 Aug 2025 10:00:00 GMT SBOM hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/rust-memory-safety-cve-trend-analysis https://safeguard.sh/resources/blog/rust-memory-safety-cve-trend-analysis Wed, 30 Jul 2025 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/reachability-analysis-state-of-the-art-2025 https://safeguard.sh/resources/blog/reachability-analysis-state-of-the-art-2025 Mon, 28 Jul 2025 10:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/citrix-bleed-2-analysis https://safeguard.sh/resources/blog/citrix-bleed-2-analysis Fri, 25 Jul 2025 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/securing-ai-agents-mcp-protocol-risks https://safeguard.sh/resources/blog/securing-ai-agents-mcp-protocol-risks Tue, 22 Jul 2025 10:00:00 GMT AI Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/artifactory-vs-nexus-enterprise-2025 https://safeguard.sh/resources/blog/artifactory-vs-nexus-enterprise-2025 Wed, 16 Jul 2025 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cve-program-funding-crisis-and-resolution https://safeguard.sh/resources/blog/cve-program-funding-crisis-and-resolution Tue, 15 Jul 2025 10:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/mgm-ransomware-one-year-later-retrospective https://safeguard.sh/resources/blog/mgm-ransomware-one-year-later-retrospective Fri, 11 Jul 2025 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-supply-chain-attacks-h1-2025-report https://safeguard.sh/resources/blog/software-supply-chain-attacks-h1-2025-report Thu, 10 Jul 2025 10:00:00 GMT Threat Intelligence hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/safeguard-compliance-reporting-guide https://safeguard.sh/resources/blog/safeguard-compliance-reporting-guide Tue, 08 Jul 2025 09:00:00 GMT Compliance hi@safeguard.sh (James) https://safeguard.sh/resources/blog/safeguard-mcp-server-release https://safeguard.sh/resources/blog/safeguard-mcp-server-release Tue, 01 Jul 2025 09:00:00 GMT Product Launch hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/japan-amed-software-supply-chain-guidance https://safeguard.sh/resources/blog/japan-amed-software-supply-chain-guidance Wed, 25 Jun 2025 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/open-source-risk-intelligence-platform https://safeguard.sh/resources/blog/open-source-risk-intelligence-platform Wed, 25 Jun 2025 10:00:00 GMT Open Source Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/kubernetes-1-33-security-deep-dive https://safeguard.sh/resources/blog/kubernetes-1-33-security-deep-dive Fri, 20 Jun 2025 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/safeguard-griffin-ai-autonomous-remediation https://safeguard.sh/resources/blog/safeguard-griffin-ai-autonomous-remediation Sun, 15 Jun 2025 10:00:00 GMT Product hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/runbooks-for-dependency-disclosure-events https://safeguard.sh/resources/blog/runbooks-for-dependency-disclosure-events Fri, 13 Jun 2025 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ai-sbom-model-cards-transparency-2025 https://safeguard.sh/resources/blog/ai-sbom-model-cards-transparency-2025 Tue, 10 Jun 2025 10:00:00 GMT AI Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/safeguard-auto-fix-how-it-works https://safeguard.sh/resources/blog/safeguard-auto-fix-how-it-works Thu, 05 Jun 2025 09:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/owasp-asvs-5-0-adoption-guide https://safeguard.sh/resources/blog/owasp-asvs-5-0-adoption-guide Tue, 03 Jun 2025 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-supply-chain-maturity-assessment https://safeguard.sh/resources/blog/software-supply-chain-maturity-assessment Sun, 01 Jun 2025 10:00:00 GMT Frameworks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/service-mesh-supply-chain-policy-enforcement https://safeguard.sh/resources/blog/service-mesh-supply-chain-policy-enforcement Sat, 24 May 2025 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-ide-extension-v5-deep-dive https://safeguard.sh/resources/blog/safeguard-ide-extension-v5-deep-dive Tue, 20 May 2025 10:00:00 GMT Product hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/enterprise-ruby-on-rails-security-audit-2025 https://safeguard.sh/resources/blog/enterprise-ruby-on-rails-security-audit-2025 Fri, 16 May 2025 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/coinbase-social-engineering-insider-threat https://safeguard.sh/resources/blog/coinbase-social-engineering-insider-threat Thu, 15 May 2025 10:00:00 GMT Breach Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/vulnerability-prioritization-epss-vex-2025 https://safeguard.sh/resources/blog/vulnerability-prioritization-epss-vex-2025 Thu, 15 May 2025 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/dior-customer-data-breach-2025 https://safeguard.sh/resources/blog/dior-customer-data-breach-2025 Mon, 12 May 2025 10:00:00 GMT Breach Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/choosing-a-private-package-registry-2025 https://safeguard.sh/resources/blog/choosing-a-private-package-registry-2025 Thu, 08 May 2025 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-esscm-enterprise-guide https://safeguard.sh/resources/blog/safeguard-esscm-enterprise-guide Thu, 08 May 2025 09:00:00 GMT Product hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/container-hardening-guide-2025 https://safeguard.sh/resources/blog/container-hardening-guide-2025 Mon, 05 May 2025 09:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/harrods-cyber-attack-retail-sector https://safeguard.sh/resources/blog/harrods-cyber-attack-retail-sector Thu, 01 May 2025 10:00:00 GMT Breach Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/commvault-cve-2025-34028-ssrf-rce https://safeguard.sh/resources/blog/commvault-cve-2025-34028-ssrf-rce Thu, 01 May 2025 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/aws-service-linked-role-abuse-techniques https://safeguard.sh/resources/blog/aws-service-linked-role-abuse-techniques Mon, 28 Apr 2025 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/audio-processing-library-vulnerabilities https://safeguard.sh/resources/blog/audio-processing-library-vulnerabilities Mon, 28 Apr 2025 10:00:00 GMT Vulnerability Research hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/nova-scotia-power-cyber-incident https://safeguard.sh/resources/blog/nova-scotia-power-cyber-incident Mon, 28 Apr 2025 10:00:00 GMT Breach Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sap-netweaver-cve-2025-31324-zero-day https://safeguard.sh/resources/blog/sap-netweaver-cve-2025-31324-zero-day Thu, 24 Apr 2025 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/marks-spencer-dragonforce-ransomware https://safeguard.sh/resources/blog/marks-spencer-dragonforce-ransomware Tue, 22 Apr 2025 10:00:00 GMT Breach Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/devsecops-tools-comparison-2025 https://safeguard.sh/resources/blog/devsecops-tools-comparison-2025 Sun, 20 Apr 2025 10:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/safeguard-portal-deep-dive https://safeguard.sh/resources/blog/safeguard-portal-deep-dive Sun, 20 Apr 2025 09:00:00 GMT Product hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/erlang-otp-ssh-cve-2025-32433-rce https://safeguard.sh/resources/blog/erlang-otp-ssh-cve-2025-32433-rce Wed, 16 Apr 2025 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/rust-supply-chain-cargo-vet-expansion-2025 https://safeguard.sh/resources/blog/rust-supply-chain-cargo-vet-expansion-2025 Tue, 15 Apr 2025 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/windows-ntlm-hash-disclosure-cve-2025-24054 https://safeguard.sh/resources/blog/windows-ntlm-hash-disclosure-cve-2025-24054 Tue, 15 Apr 2025 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/how-to-test-your-signing-pipeline-end-to-end https://safeguard.sh/resources/blog/how-to-test-your-signing-pipeline-end-to-end Thu, 10 Apr 2025 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-transparency-global-regulations-2025 https://safeguard.sh/resources/blog/software-transparency-global-regulations-2025 Thu, 10 Apr 2025 09:00:00 GMT Compliance hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/bounty-program-scoping-for-dependencies https://safeguard.sh/resources/blog/bounty-program-scoping-for-dependencies Tue, 08 Apr 2025 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/crushftp-cve-2025-31161-authentication-bypass https://safeguard.sh/resources/blog/crushftp-cve-2025-31161-authentication-bypass Mon, 07 Apr 2025 08:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/mcp-server-authentication-authorization https://safeguard.sh/resources/blog/mcp-server-authentication-authorization Sat, 05 Apr 2025 10:00:00 GMT AI Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/ivanti-connect-secure-cve-2025-22457 https://safeguard.sh/resources/blog/ivanti-connect-secure-cve-2025-22457 Thu, 03 Apr 2025 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/supply-chain-attacks-npm-2025-q1 https://safeguard.sh/resources/blog/supply-chain-attacks-npm-2025-q1 Tue, 01 Apr 2025 10:00:00 GMT Supply Chain Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/supply-chain-security-metrics-executive-reporting https://safeguard.sh/resources/blog/supply-chain-security-metrics-executive-reporting Fri, 28 Mar 2025 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/pypi-malicious-packages-2025-report https://safeguard.sh/resources/blog/pypi-malicious-packages-2025-report Fri, 28 Mar 2025 10:00:00 GMT Supply Chain Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/oracle-ccb-regulatory-impact-analysis https://safeguard.sh/resources/blog/oracle-ccb-regulatory-impact-analysis Tue, 25 Mar 2025 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/chrome-zero-day-cve-2025-2783-kaspersky https://safeguard.sh/resources/blog/chrome-zero-day-cve-2025-2783-kaspersky Tue, 25 Mar 2025 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/next-js-middleware-cve-2025-29927 https://safeguard.sh/resources/blog/next-js-middleware-cve-2025-29927 Fri, 21 Mar 2025 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/scattered-spider-2025-evolution https://safeguard.sh/resources/blog/scattered-spider-2025-evolution Thu, 20 Mar 2025 10:00:00 GMT Threat Intelligence hi@safeguard.sh (James) https://safeguard.sh/resources/blog/confidential-computing-supply-chain-integration https://safeguard.sh/resources/blog/confidential-computing-supply-chain-integration Tue, 18 Mar 2025 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cisa-known-exploited-vulnerabilities-2025-update https://safeguard.sh/resources/blog/cisa-known-exploited-vulnerabilities-2025-update Tue, 18 Mar 2025 10:00:00 GMT Threat Intelligence hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/github-actions-supply-chain-attack-tj-actions https://safeguard.sh/resources/blog/github-actions-supply-chain-attack-tj-actions Sat, 15 Mar 2025 08:00:00 GMT Supply Chain Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/fedramp-continuous-monitoring-automation-2025 https://safeguard.sh/resources/blog/fedramp-continuous-monitoring-automation-2025 Wed, 12 Mar 2025 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/apple-webkit-zero-day-cve-2025-24201 https://safeguard.sh/resources/blog/apple-webkit-zero-day-cve-2025-24201 Wed, 12 Mar 2025 10:00:00 GMT Zero-Day Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pypi-attestation-requirements-roadmap https://safeguard.sh/resources/blog/pypi-attestation-requirements-roadmap Mon, 10 Mar 2025 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-agent-tool-calling-security https://safeguard.sh/resources/blog/ai-agent-tool-calling-security Mon, 10 Mar 2025 10:00:00 GMT AI Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/open-source-security-census-2025 https://safeguard.sh/resources/blog/open-source-security-census-2025 Sat, 08 Mar 2025 10:00:00 GMT Industry Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/video-codec-supply-chain-risks https://safeguard.sh/resources/blog/video-codec-supply-chain-risks Wed, 05 Mar 2025 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/ai-agent-frameworks-security-assessment https://safeguard.sh/resources/blog/ai-agent-frameworks-security-assessment Wed, 05 Mar 2025 09:00:00 GMT AI Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/how-to-monitor-go-module-substitution-attacks https://safeguard.sh/resources/blog/how-to-monitor-go-module-substitution-attacks Tue, 04 Mar 2025 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/broadcom-vmware-zero-days-march-2025 https://safeguard.sh/resources/blog/broadcom-vmware-zero-days-march-2025 Tue, 04 Mar 2025 10:00:00 GMT Zero-Day Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/paragon-partition-manager-cve-2025-0289 https://safeguard.sh/resources/blog/paragon-partition-manager-cve-2025-0289 Sat, 01 Mar 2025 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/llm-augmented-bug-discovery-methodology https://safeguard.sh/resources/blog/llm-augmented-bug-discovery-methodology Tue, 25 Feb 2025 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/supply-chain-security-executive-guide-2025 https://safeguard.sh/resources/blog/supply-chain-security-executive-guide-2025 Tue, 25 Feb 2025 09:00:00 GMT Industry Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/gitlab-cicd-security-hardening-2025 https://safeguard.sh/resources/blog/gitlab-cicd-security-hardening-2025 Thu, 20 Feb 2025 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/juniper-router-cve-2025-21589-auth-bypass https://safeguard.sh/resources/blog/juniper-router-cve-2025-21589-auth-bypass Thu, 20 Feb 2025 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/mcp-protocol-security-implications https://safeguard.sh/resources/blog/mcp-protocol-security-implications Thu, 20 Feb 2025 10:00:00 GMT AI Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/qilin-ransomware-group-analysis https://safeguard.sh/resources/blog/qilin-ransomware-group-analysis Thu, 20 Feb 2025 00:00:00 GMT Threat Intelligence hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/microsoft-power-pages-cve-2025-24989 https://safeguard.sh/resources/blog/microsoft-power-pages-cve-2025-24989 Wed, 19 Feb 2025 11:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/canadian-cyber-center-supply-chain-guidance https://safeguard.sh/resources/blog/canadian-cyber-center-supply-chain-guidance Tue, 18 Feb 2025 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/python-cython-extensions-supply-chain https://safeguard.sh/resources/blog/python-cython-extensions-supply-chain Fri, 14 Feb 2025 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/palo-alto-pan-os-cve-2025-0108-auth-bypass https://safeguard.sh/resources/blog/palo-alto-pan-os-cve-2025-0108-auth-bypass Wed, 12 Feb 2025 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/ai-deepfake-phishing-campaigns-2025 https://safeguard.sh/resources/blog/ai-deepfake-phishing-campaigns-2025 Mon, 10 Feb 2025 10:00:00 GMT Threat Intelligence hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/ai-code-assistants-security-implications-2025 https://safeguard.sh/resources/blog/ai-code-assistants-security-implications-2025 Sat, 08 Feb 2025 10:00:00 GMT Industry Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/cve-2025-bug-bounty-program-reform https://safeguard.sh/resources/blog/cve-2025-bug-bounty-program-reform Tue, 04 Feb 2025 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/zyxel-router-cve-2024-40891-exploitation https://safeguard.sh/resources/blog/zyxel-router-cve-2024-40891-exploitation Tue, 04 Feb 2025 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/how-to-run-grype-in-offline-airgap-environments https://safeguard.sh/resources/blog/how-to-run-grype-in-offline-airgap-environments Tue, 28 Jan 2025 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sonicwall-sma-cve-2025-23006-zero-day https://safeguard.sh/resources/blog/sonicwall-sma-cve-2025-23006-zero-day Wed, 22 Jan 2025 08:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/exploit-chaining-supply-chain-perspective https://safeguard.sh/resources/blog/exploit-chaining-supply-chain-perspective Mon, 20 Jan 2025 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pypi-organization-accounts-security-model https://safeguard.sh/resources/blog/pypi-organization-accounts-security-model Mon, 20 Jan 2025 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/prompt-injection-supply-chain-risks https://safeguard.sh/resources/blog/prompt-injection-supply-chain-risks Mon, 20 Jan 2025 10:00:00 GMT AI Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/citrix-netscaler-cve-2025-vulnerabilities https://safeguard.sh/resources/blog/citrix-netscaler-cve-2025-vulnerabilities Sat, 18 Jan 2025 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sbom-compliance-landscape-2025 https://safeguard.sh/resources/blog/sbom-compliance-landscape-2025 Sat, 18 Jan 2025 10:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dora-operational-resilience-software-implications https://safeguard.sh/resources/blog/dora-operational-resilience-software-implications Fri, 17 Jan 2025 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/medusa-ransomware-supply-chain-tactics https://safeguard.sh/resources/blog/medusa-ransomware-supply-chain-tactics Wed, 15 Jan 2025 00:00:00 GMT Threat Intelligence hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/salt-typhoon-telco-intrusion-analysis https://safeguard.sh/resources/blog/salt-typhoon-telco-intrusion-analysis Tue, 14 Jan 2025 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fog-ransomware-education-sector-attacks https://safeguard.sh/resources/blog/fog-ransomware-education-sector-attacks Tue, 14 Jan 2025 10:00:00 GMT Ransomware hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/fortinet-fortigate-auth-bypass-cve-2024-55591 https://safeguard.sh/resources/blog/fortinet-fortigate-auth-bypass-cve-2024-55591 Tue, 14 Jan 2025 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/ivanti-connect-secure-cve-2025-0282-zero-day https://safeguard.sh/resources/blog/ivanti-connect-secure-cve-2025-0282-zero-day Wed, 08 Jan 2025 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/safeguard-v5-release-announcement https://safeguard.sh/resources/blog/safeguard-v5-release-announcement Sun, 05 Jan 2025 08:00:00 GMT Product Update hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/space-industry-software-supply-chain-emerging https://safeguard.sh/resources/blog/space-industry-software-supply-chain-emerging Sat, 28 Dec 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/zoom-incidents-software-supply-chain-dimensions https://safeguard.sh/resources/blog/zoom-incidents-software-supply-chain-dimensions Sat, 28 Dec 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/end-of-year-security-planning-guide https://safeguard.sh/resources/blog/end-of-year-security-planning-guide Sat, 28 Dec 2024 09:00:00 GMT Security Strategy hi@safeguard.sh (James) https://safeguard.sh/resources/blog/data-pipeline-platform-migration-security https://safeguard.sh/resources/blog/data-pipeline-platform-migration-security Sun, 22 Dec 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/digital-health-hipaa-supply-chain-intersection https://safeguard.sh/resources/blog/digital-health-hipaa-supply-chain-intersection Sun, 22 Dec 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fulcio-certificate-lifecycle-enterprise https://safeguard.sh/resources/blog/fulcio-certificate-lifecycle-enterprise Sun, 22 Dec 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/software-supply-chain-security-2024-year-review https://safeguard.sh/resources/blog/software-supply-chain-security-2024-year-review Sun, 22 Dec 2024 10:00:00 GMT Industry Trends hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ebpf-security-controls-production-experience https://safeguard.sh/resources/blog/ebpf-security-controls-production-experience Fri, 20 Dec 2024 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/post-incident-vendor-coordination https://safeguard.sh/resources/blog/post-incident-vendor-coordination Fri, 20 Dec 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/reproducible-builds-debian-long-view https://safeguard.sh/resources/blog/reproducible-builds-debian-long-view Fri, 20 Dec 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/supply-chain-security-predictions-2025 https://safeguard.sh/resources/blog/supply-chain-security-predictions-2025 Fri, 20 Dec 2024 10:00:00 GMT Industry Trends hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/end-of-year-vulnerability-disclosure-report-2024 https://safeguard.sh/resources/blog/end-of-year-vulnerability-disclosure-report-2024 Wed, 18 Dec 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/mitre-attack-meets-ssdf-mapping https://safeguard.sh/resources/blog/mitre-attack-meets-ssdf-mapping Wed, 18 Dec 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/opentelemetry-for-supply-chain-traces https://safeguard.sh/resources/blog/opentelemetry-for-supply-chain-traces Wed, 18 Dec 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/rubygems-reserved-namespace-claims https://safeguard.sh/resources/blog/rubygems-reserved-namespace-claims Wed, 18 Dec 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/rust-embedded-supply-chain-guide https://safeguard.sh/resources/blog/rust-embedded-supply-chain-guide Wed, 18 Dec 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/azure-sentinel-supply-chain-detection https://safeguard.sh/resources/blog/azure-sentinel-supply-chain-detection Sun, 15 Dec 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/blacktech-firmware-supply-chain-operations https://safeguard.sh/resources/blog/blacktech-firmware-supply-chain-operations Sun, 15 Dec 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/pypi-download-statistics-as-security-signal https://safeguard.sh/resources/blog/pypi-download-statistics-as-security-signal Sun, 15 Dec 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/vulnerability-exploitation-trends-2024 https://safeguard.sh/resources/blog/vulnerability-exploitation-trends-2024 Sun, 15 Dec 2024 12:00:00 GMT Threat Intelligence hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/coordinated-disclosure-zero-day-playbook https://safeguard.sh/resources/blog/coordinated-disclosure-zero-day-playbook Thu, 12 Dec 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/oss-community-code-of-conduct-security-impact https://safeguard.sh/resources/blog/oss-community-code-of-conduct-security-impact Thu, 12 Dec 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/dev-machine-secrets-exfiltration-risks https://safeguard.sh/resources/blog/dev-machine-secrets-exfiltration-risks Tue, 10 Dec 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/open-source-security-funding-report-2024 https://safeguard.sh/resources/blog/open-source-security-funding-report-2024 Tue, 10 Dec 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/turborepo-monorepo-supply-chain-security https://safeguard.sh/resources/blog/turborepo-monorepo-supply-chain-security Tue, 10 Dec 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gcp-security-command-center-integration https://safeguard.sh/resources/blog/gcp-security-command-center-integration Sun, 08 Dec 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/devsecops-automation-maturity-2024 https://safeguard.sh/resources/blog/devsecops-automation-maturity-2024 Thu, 05 Dec 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/hardening-gitlab-vs-github-default-settings https://safeguard.sh/resources/blog/hardening-gitlab-vs-github-default-settings Thu, 05 Dec 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/java-supply-chain-sbom-generation-tools https://safeguard.sh/resources/blog/java-supply-chain-sbom-generation-tools Thu, 05 Dec 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/woodpecker-ci-security-review https://safeguard.sh/resources/blog/woodpecker-ci-security-review Mon, 02 Dec 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/container-security-best-practices-2025 https://safeguard.sh/resources/blog/container-security-best-practices-2025 Sun, 01 Dec 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/crypto-exchange-supply-chain-hardening https://safeguard.sh/resources/blog/crypto-exchange-supply-chain-hardening Thu, 28 Nov 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/go-build-cache-poisoning-risks https://safeguard.sh/resources/blog/go-build-cache-poisoning-risks Thu, 28 Nov 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/npm-incident-response-playbook https://safeguard.sh/resources/blog/npm-incident-response-playbook Thu, 28 Nov 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/mailchimp-2022-2023-incidents-timeline https://safeguard.sh/resources/blog/mailchimp-2022-2023-incidents-timeline Mon, 25 Nov 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nydfs-500-meets-sbom-requirements https://safeguard.sh/resources/blog/nydfs-500-meets-sbom-requirements Mon, 25 Nov 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/zero-trust-software-supply-chain-2024 https://safeguard.sh/resources/blog/zero-trust-software-supply-chain-2024 Mon, 25 Nov 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/azure-monitor-supply-chain-observability https://safeguard.sh/resources/blog/azure-monitor-supply-chain-observability Fri, 22 Nov 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/nist-csf-2-0-rollout-observations https://safeguard.sh/resources/blog/nist-csf-2-0-rollout-observations Fri, 22 Nov 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nuget-signed-packages-verification https://safeguard.sh/resources/blog/nuget-signed-packages-verification Fri, 22 Nov 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/secrets-rotation-across-microservices https://safeguard.sh/resources/blog/secrets-rotation-across-microservices Fri, 22 Nov 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/fin7-financial-sector-supply-chain-tradecraft https://safeguard.sh/resources/blog/fin7-financial-sector-supply-chain-tradecraft Wed, 20 Nov 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/provenance-attestation-consumer-workflow https://safeguard.sh/resources/blog/provenance-attestation-consumer-workflow Wed, 20 Nov 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-composition-analysis-market-2024 https://safeguard.sh/resources/blog/software-composition-analysis-market-2024 Wed, 20 Nov 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/automotive-iso-21434-supply-chain-implications https://safeguard.sh/resources/blog/automotive-iso-21434-supply-chain-implications Mon, 18 Nov 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/dataflow-analysis-modern-codebases https://safeguard.sh/resources/blog/dataflow-analysis-modern-codebases Mon, 18 Nov 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gcp-terraform-provider-security-review https://safeguard.sh/resources/blog/gcp-terraform-provider-security-review Mon, 18 Nov 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/migrating-vpn-to-zero-trust-supply-chain https://safeguard.sh/resources/blog/migrating-vpn-to-zero-trust-supply-chain Mon, 18 Nov 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/rust-unsafe-code-audit-at-scale https://safeguard.sh/resources/blog/rust-unsafe-code-audit-at-scale Mon, 18 Nov 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/security-team-topology-supply-chain-program https://safeguard.sh/resources/blog/security-team-topology-supply-chain-program Mon, 18 Nov 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/java-modules-supply-chain-security https://safeguard.sh/resources/blog/java-modules-supply-chain-security Fri, 15 Nov 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/openssf-siren-mailing-list-launch https://safeguard.sh/resources/blog/openssf-siren-mailing-list-launch Fri, 15 Nov 2024 12:00:00 GMT Industry News hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/play-ransomware-supply-chain-exploitation https://safeguard.sh/resources/blog/play-ransomware-supply-chain-exploitation Fri, 15 Nov 2024 10:00:00 GMT Ransomware hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/how-to-build-a-vulnerability-sla-dashboard https://safeguard.sh/resources/blog/how-to-build-a-vulnerability-sla-dashboard Thu, 14 Nov 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/kata-containers-security-model-review https://safeguard.sh/resources/blog/kata-containers-security-model-review Thu, 14 Nov 2024 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/grafana-loki-build-pipeline-logs https://safeguard.sh/resources/blog/grafana-loki-build-pipeline-logs Tue, 12 Nov 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/python-wheel-signing-production-guide https://safeguard.sh/resources/blog/python-wheel-signing-production-guide Tue, 12 Nov 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/code-signing-infrastructure-breach-response https://safeguard.sh/resources/blog/code-signing-infrastructure-breach-response Sun, 10 Nov 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cryptographic-bill-of-materials-cbom https://safeguard.sh/resources/blog/cryptographic-bill-of-materials-cbom Sun, 10 Nov 2024 11:00:00 GMT Standards hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/concourse-ci-supply-chain-hardening https://safeguard.sh/resources/blog/concourse-ci-supply-chain-hardening Fri, 08 Nov 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/earthly-containerized-builds-supply-chain https://safeguard.sh/resources/blog/earthly-containerized-builds-supply-chain Fri, 08 Nov 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sbom-quality-benchmarking-2024 https://safeguard.sh/resources/blog/sbom-quality-benchmarking-2024 Fri, 08 Nov 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/palo-alto-expedition-cve-2024-9463 https://safeguard.sh/resources/blog/palo-alto-expedition-cve-2024-9463 Thu, 07 Nov 2024 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/aws-iam-roles-anywhere-supply-chain https://safeguard.sh/resources/blog/aws-iam-roles-anywhere-supply-chain Tue, 05 Nov 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/jruby-supply-chain-considerations https://safeguard.sh/resources/blog/jruby-supply-chain-considerations Tue, 05 Nov 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/medusa-ransomware-supply-chain-infiltration https://safeguard.sh/resources/blog/medusa-ransomware-supply-chain-infiltration Tue, 05 Nov 2024 10:00:00 GMT Ransomware hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fog-ransomware-education-sector-targeting https://safeguard.sh/resources/blog/fog-ransomware-education-sector-targeting Tue, 05 Nov 2024 00:00:00 GMT Threat Intelligence hi@safeguard.sh (James) https://safeguard.sh/resources/blog/security-tool-consolidation-strategy https://safeguard.sh/resources/blog/security-tool-consolidation-strategy Tue, 05 Nov 2024 00:00:00 GMT Security Operations hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/forking-strategy-for-enterprise-oss https://safeguard.sh/resources/blog/forking-strategy-for-enterprise-oss Sat, 02 Nov 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/font-file-vulnerability-history https://safeguard.sh/resources/blog/font-file-vulnerability-history Sat, 02 Nov 2024 10:00:00 GMT Vulnerability Research hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nist-nvd-recovery-new-consortium https://safeguard.sh/resources/blog/nist-nvd-recovery-new-consortium Fri, 01 Nov 2024 12:00:00 GMT Industry News hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/safeguard-reachability-analysis-launch https://safeguard.sh/resources/blog/safeguard-reachability-analysis-launch Fri, 01 Nov 2024 10:00:00 GMT Product hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/vulnerability-bounty-program-scoping-for-supply-chain https://safeguard.sh/resources/blog/vulnerability-bounty-program-scoping-for-supply-chain Wed, 30 Oct 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/age-sops-git-native-secrets-workflow https://safeguard.sh/resources/blog/age-sops-git-native-secrets-workflow Mon, 28 Oct 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ehr-system-dependency-governance https://safeguard.sh/resources/blog/ehr-system-dependency-governance Mon, 28 Oct 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/rust-procedural-macro-security-risks https://safeguard.sh/resources/blog/rust-procedural-macro-security-risks Mon, 28 Oct 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/buildkite-supply-chain-hardening https://safeguard.sh/resources/blog/buildkite-supply-chain-hardening Fri, 25 Oct 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/differential-testing-supply-chain-vulnerabilities https://safeguard.sh/resources/blog/differential-testing-supply-chain-vulnerabilities Fri, 25 Oct 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/foundation-neutral-governance-evaluation https://safeguard.sh/resources/blog/foundation-neutral-governance-evaluation Fri, 25 Oct 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/openssf-scorecard-adoption-metrics-2024 https://safeguard.sh/resources/blog/openssf-scorecard-adoption-metrics-2024 Thu, 24 Oct 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cisco-asa-ftd-cve-2024-20481 https://safeguard.sh/resources/blog/cisco-asa-ftd-cve-2024-20481 Thu, 24 Oct 2024 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/fortinet-fortimanager-cve-2024-47575 https://safeguard.sh/resources/blog/fortinet-fortimanager-cve-2024-47575 Wed, 23 Oct 2024 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/buck2-meta-build-security-considerations https://safeguard.sh/resources/blog/buck2-meta-build-security-considerations Tue, 22 Oct 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/maven-release-plugin-hardening https://safeguard.sh/resources/blog/maven-release-plugin-hardening Tue, 22 Oct 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/on-prem-to-cloud-supply-chain-continuity https://safeguard.sh/resources/blog/on-prem-to-cloud-supply-chain-continuity Tue, 22 Oct 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/react-native-supply-chain-risks-2024 https://safeguard.sh/resources/blog/react-native-supply-chain-risks-2024 Tue, 22 Oct 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/slack-2022-2023-incidents-operational-retrospective https://safeguard.sh/resources/blog/slack-2022-2023-incidents-operational-retrospective Sun, 20 Oct 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/typosquatting-ai-generated-package-names https://safeguard.sh/resources/blog/typosquatting-ai-generated-package-names Sun, 20 Oct 2024 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/aws-ssm-parameter-store-security https://safeguard.sh/resources/blog/aws-ssm-parameter-store-security Fri, 18 Oct 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/fedramp-meets-stig-mapping-practical https://safeguard.sh/resources/blog/fedramp-meets-stig-mapping-practical Fri, 18 Oct 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/package-registry-forensic-log-analysis https://safeguard.sh/resources/blog/package-registry-forensic-log-analysis Fri, 18 Oct 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/panther-siem-supply-chain-rules https://safeguard.sh/resources/blog/panther-siem-supply-chain-rules Fri, 18 Oct 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cisa-sbom-sharing-lifecycle-2024 https://safeguard.sh/resources/blog/cisa-sbom-sharing-lifecycle-2024 Tue, 15 Oct 2024 12:00:00 GMT Compliance & Frameworks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/go-generate-supply-chain-risks https://safeguard.sh/resources/blog/go-generate-supply-chain-risks Tue, 15 Oct 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/slsa-build-provenance-for-python-publish https://safeguard.sh/resources/blog/slsa-build-provenance-for-python-publish Tue, 15 Oct 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/state-local-government-sbom-mandates https://safeguard.sh/resources/blog/state-local-government-sbom-mandates Tue, 15 Oct 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/llm-application-security-testing https://safeguard.sh/resources/blog/llm-application-security-testing Tue, 15 Oct 2024 10:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-cyclonedx-spdx-dual-support https://safeguard.sh/resources/blog/safeguard-cyclonedx-spdx-dual-support Tue, 15 Oct 2024 10:00:00 GMT Engineering hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/dotnet-restore-reproducibility-concerns https://safeguard.sh/resources/blog/dotnet-restore-reproducibility-concerns Sat, 12 Oct 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/azure-app-service-deployment-security https://safeguard.sh/resources/blog/azure-app-service-deployment-security Thu, 10 Oct 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/kimsuky-developer-targeting-analysis https://safeguard.sh/resources/blog/kimsuky-developer-targeting-analysis Thu, 10 Oct 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/eu-cyber-resilience-act-final-text-analysis https://safeguard.sh/resources/blog/eu-cyber-resilience-act-final-text-analysis Thu, 10 Oct 2024 10:00:00 GMT Compliance hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/how-to-rotate-build-signing-keys-safely https://safeguard.sh/resources/blog/how-to-rotate-build-signing-keys-safely Tue, 08 Oct 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ruby-native-extensions-supply-chain https://safeguard.sh/resources/blog/ruby-native-extensions-supply-chain Tue, 08 Oct 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/docker-hub-rate-limit-policy-changes-2024 https://safeguard.sh/resources/blog/docker-hub-rate-limit-policy-changes-2024 Thu, 03 Oct 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gcp-pub-sub-security-configuration https://safeguard.sh/resources/blog/gcp-pub-sub-security-configuration Wed, 02 Oct 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-v3-release-compliance-features https://safeguard.sh/resources/blog/safeguard-v3-release-compliance-features Tue, 01 Oct 2024 10:00:00 GMT Release hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/sbom-adoption-rates-enterprise-survey-2024 https://safeguard.sh/resources/blog/sbom-adoption-rates-enterprise-survey-2024 Tue, 01 Oct 2024 09:00:00 GMT SBOM hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/graphql-supply-chain-security-considerations https://safeguard.sh/resources/blog/graphql-supply-chain-security-considerations Mon, 30 Sep 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/volt-typhoon-living-off-the-land-supply-chain https://safeguard.sh/resources/blog/volt-typhoon-living-off-the-land-supply-chain Mon, 30 Sep 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gcp-binary-authorization-policy-patterns https://safeguard.sh/resources/blog/gcp-binary-authorization-policy-patterns Sat, 28 Sep 2024 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cups-linux-rce-vulnerability-chain https://safeguard.sh/resources/blog/cups-linux-rce-vulnerability-chain Thu, 26 Sep 2024 12:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/aws-cdk-construct-library-security https://safeguard.sh/resources/blog/aws-cdk-construct-library-security Wed, 25 Sep 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/doppler-enterprise-secrets-platform-review https://safeguard.sh/resources/blog/doppler-enterprise-secrets-platform-review Sun, 22 Sep 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/open-source-foundation-governance-models https://safeguard.sh/resources/blog/open-source-foundation-governance-models Sun, 22 Sep 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/witness-attestation-collection-workflow https://safeguard.sh/resources/blog/witness-attestation-collection-workflow Sun, 22 Sep 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ransomware-as-a-service-ecosystem-2024 https://safeguard.sh/resources/blog/ransomware-as-a-service-ecosystem-2024 Sun, 22 Sep 2024 10:00:00 GMT Ransomware hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/fastify-security-posture-2024 https://safeguard.sh/resources/blog/fastify-security-posture-2024 Fri, 20 Sep 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/kubernetes-1-30-and-1-31-security-rundown https://safeguard.sh/resources/blog/kubernetes-1-30-and-1-31-security-rundown Fri, 20 Sep 2024 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/rubygems-org-sigstore-integration-progress https://safeguard.sh/resources/blog/rubygems-org-sigstore-integration-progress Fri, 20 Sep 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cloud-workload-protection-platforms-2024 https://safeguard.sh/resources/blog/cloud-workload-protection-platforms-2024 Fri, 20 Sep 2024 10:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/qilin-ransomware-credential-harvesting-techniques https://safeguard.sh/resources/blog/qilin-ransomware-credential-harvesting-techniques Fri, 20 Sep 2024 10:00:00 GMT Ransomware hi@safeguard.sh (James) https://safeguard.sh/resources/blog/dagger-io-supply-chain-pipelines https://safeguard.sh/resources/blog/dagger-io-supply-chain-pipelines Wed, 18 Sep 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/database-platform-migration-supply-chain https://safeguard.sh/resources/blog/database-platform-migration-supply-chain Wed, 18 Sep 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gitguardian-vs-trufflehog-secret-detection https://safeguard.sh/resources/blog/gitguardian-vs-trufflehog-secret-detection Wed, 18 Sep 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/public-sector-software-procurement-requirements https://safeguard.sh/resources/blog/public-sector-software-procurement-requirements Wed, 18 Sep 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pypi-typosquatting-detection-at-scale https://safeguard.sh/resources/blog/pypi-typosquatting-detection-at-scale Wed, 18 Sep 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/kubernetes-service-mesh-policy-depth https://safeguard.sh/resources/blog/kubernetes-service-mesh-policy-depth Sun, 15 Sep 2024 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/lastpass-2022-2023-retrospective-depth https://safeguard.sh/resources/blog/lastpass-2022-2023-retrospective-depth Sun, 15 Sep 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vulnerability-intelligence-platform-comparison https://safeguard.sh/resources/blog/vulnerability-intelligence-platform-comparison Sun, 15 Sep 2024 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/inc-ransom-group-healthcare-attacks https://safeguard.sh/resources/blog/inc-ransom-group-healthcare-attacks Sun, 15 Sep 2024 00:00:00 GMT Threat Intelligence hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/how-to-validate-slsa-provenance-in-ci https://safeguard.sh/resources/blog/how-to-validate-slsa-provenance-in-ci Sat, 14 Sep 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/pci-dss-meets-sbom-requirements https://safeguard.sh/resources/blog/pci-dss-meets-sbom-requirements Sat, 14 Sep 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/supply-chain-indicator-of-compromise-catalog https://safeguard.sh/resources/blog/supply-chain-indicator-of-compromise-catalog Sat, 14 Sep 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ivanti-csa-cve-2024-8963-exploitation https://safeguard.sh/resources/blog/ivanti-csa-cve-2024-8963-exploitation Fri, 13 Sep 2024 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/healthtech-fda-software-supply-chain-guidance https://safeguard.sh/resources/blog/healthtech-fda-software-supply-chain-guidance Thu, 12 Sep 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/rust-feature-flags-supply-chain-implications https://safeguard.sh/resources/blog/rust-feature-flags-supply-chain-implications Thu, 12 Sep 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gitlab-pipeline-execution-cve-2024-6678 https://safeguard.sh/resources/blog/gitlab-pipeline-execution-cve-2024-6678 Thu, 12 Sep 2024 11:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/fluxcd-security-model-production https://safeguard.sh/resources/blog/fluxcd-security-model-production Tue, 10 Sep 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/jenkins-maven-integration-security https://safeguard.sh/resources/blog/jenkins-maven-integration-security Sun, 08 Sep 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/office-document-macro-security https://safeguard.sh/resources/blog/office-document-macro-security Sun, 08 Sep 2024 10:00:00 GMT Threat Intelligence hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/python-package-typosquatting-2024-report https://safeguard.sh/resources/blog/python-package-typosquatting-2024-report Sun, 08 Sep 2024 10:00:00 GMT Supply Chain Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/datadog-security-supply-chain-monitoring https://safeguard.sh/resources/blog/datadog-security-supply-chain-monitoring Sun, 08 Sep 2024 00:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cisco-asa-firepower-zero-day-trends-2024 https://safeguard.sh/resources/blog/cisco-asa-firepower-zero-day-trends-2024 Thu, 05 Sep 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/dotnet-source-generator-security-risks https://safeguard.sh/resources/blog/dotnet-source-generator-security-risks Thu, 05 Sep 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/npm-granular-access-tokens-migration https://safeguard.sh/resources/blog/npm-granular-access-tokens-migration Thu, 05 Sep 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cross-platform-app-supply-chain-risks https://safeguard.sh/resources/blog/cross-platform-app-supply-chain-risks Thu, 05 Sep 2024 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/npm-malicious-packages-north-korea-2024 https://safeguard.sh/resources/blog/npm-malicious-packages-north-korea-2024 Sun, 01 Sep 2024 08:00:00 GMT Threat Intelligence hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/pypi-trusted-publishing-adoption-guide https://safeguard.sh/resources/blog/pypi-trusted-publishing-adoption-guide Fri, 30 Aug 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/build-server-compromise-investigation https://safeguard.sh/resources/blog/build-server-compromise-investigation Wed, 28 Aug 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ccpa-meets-software-supply-chain https://safeguard.sh/resources/blog/ccpa-meets-software-supply-chain Wed, 28 Aug 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/labyrinth-chollima-open-source-targeting https://safeguard.sh/resources/blog/labyrinth-chollima-open-source-targeting Wed, 28 Aug 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/legacy-cobol-supply-chain-modernization https://safeguard.sh/resources/blog/legacy-cobol-supply-chain-modernization Wed, 28 Aug 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/please-build-system-security-review https://safeguard.sh/resources/blog/please-build-system-security-review Wed, 28 Aug 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/slsa-builder-requirements-production https://safeguard.sh/resources/blog/slsa-builder-requirements-production Wed, 28 Aug 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/security-patch-prioritization-framework https://safeguard.sh/resources/blog/security-patch-prioritization-framework Wed, 28 Aug 2024 09:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/uk-ncsc-software-supply-chain-guidance-update https://safeguard.sh/resources/blog/uk-ncsc-software-supply-chain-guidance-update Mon, 26 Aug 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/azure-bicep-vs-arm-security-comparison https://safeguard.sh/resources/blog/azure-bicep-vs-arm-security-comparison Sun, 25 Aug 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/conjur-secrets-management-enterprise https://safeguard.sh/resources/blog/conjur-secrets-management-enterprise Sun, 25 Aug 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/rubygems-typosquatting-incidents-2024 https://safeguard.sh/resources/blog/rubygems-typosquatting-incidents-2024 Sun, 25 Aug 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cri-o-vs-containerd-security-comparison https://safeguard.sh/resources/blog/cri-o-vs-containerd-security-comparison Thu, 22 Aug 2024 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/rust-tokio-dependency-security-review https://safeguard.sh/resources/blog/rust-tokio-dependency-security-review Thu, 22 Aug 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/static-analysis-false-positive-reduction-techniques https://safeguard.sh/resources/blog/static-analysis-false-positive-reduction-techniques Thu, 22 Aug 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sonicwall-sslvpn-cve-2024-40766 https://safeguard.sh/resources/blog/sonicwall-sslvpn-cve-2024-40766 Thu, 22 Aug 2024 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/zig-language-memory-safety-security https://safeguard.sh/resources/blog/zig-language-memory-safety-security Thu, 22 Aug 2024 00:00:00 GMT Language Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/telemedicine-supply-chain-privacy-security https://safeguard.sh/resources/blog/telemedicine-supply-chain-privacy-security Tue, 20 Aug 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/incident-response-playbook-supply-chain-compromise https://safeguard.sh/resources/blog/incident-response-playbook-supply-chain-compromise Mon, 19 Aug 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/gradle-version-catalogs-security https://safeguard.sh/resources/blog/gradle-version-catalogs-security Sun, 18 Aug 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/spinnaker-deployment-security-patterns https://safeguard.sh/resources/blog/spinnaker-deployment-security-patterns Sun, 18 Aug 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/github-dependabot-token-incident-retrospective https://safeguard.sh/resources/blog/github-dependabot-token-incident-retrospective Thu, 15 Aug 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/new-relic-security-supply-chain-view https://safeguard.sh/resources/blog/new-relic-security-supply-chain-view Thu, 15 Aug 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/nuget-package-vulnerabilities-dashboard https://safeguard.sh/resources/blog/nuget-package-vulnerabilities-dashboard Thu, 15 Aug 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/kubernetes-1-31-security-improvements https://safeguard.sh/resources/blog/kubernetes-1-31-security-improvements Thu, 15 Aug 2024 11:00:00 GMT Cloud Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/safeguard-container-scanning-launch https://safeguard.sh/resources/blog/safeguard-container-scanning-launch Thu, 15 Aug 2024 10:00:00 GMT Product hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/security-data-lake-architecture https://safeguard.sh/resources/blog/security-data-lake-architecture Thu, 15 Aug 2024 10:00:00 GMT DevSecOps hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/go-toolchain-distribution-security https://safeguard.sh/resources/blog/go-toolchain-distribution-security Wed, 14 Aug 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/solarwinds-post-incident-governance-changes https://safeguard.sh/resources/blog/solarwinds-post-incident-governance-changes Wed, 14 Aug 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/svelte-kit-supply-chain-considerations https://safeguard.sh/resources/blog/svelte-kit-supply-chain-considerations Wed, 14 Aug 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/github-actions-artifact-poisoning https://safeguard.sh/resources/blog/github-actions-artifact-poisoning Mon, 12 Aug 2024 11:00:00 GMT Supply Chain Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/aws-stepfunctions-workflow-security https://safeguard.sh/resources/blog/aws-stepfunctions-workflow-security Sat, 10 Aug 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/oss-trademark-policies-security-considerations https://safeguard.sh/resources/blog/oss-trademark-policies-security-considerations Sat, 10 Aug 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/compliance-automation-tools-comparison-2024 https://safeguard.sh/resources/blog/compliance-automation-tools-comparison-2024 Sat, 10 Aug 2024 00:00:00 GMT Compliance hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/aviation-rtca-do-326a-supply-chain https://safeguard.sh/resources/blog/aviation-rtca-do-326a-supply-chain Thu, 08 Aug 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/rhysida-ransomware-government-targeting https://safeguard.sh/resources/blog/rhysida-ransomware-government-targeting Mon, 05 Aug 2024 10:00:00 GMT Ransomware hi@safeguard.sh (James) https://safeguard.sh/resources/blog/ai-supply-chain-attacks-emerging-threats https://safeguard.sh/resources/blog/ai-supply-chain-attacks-emerging-threats Mon, 05 Aug 2024 09:00:00 GMT Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-v2-release-announcement https://safeguard.sh/resources/blog/safeguard-v2-release-announcement Thu, 01 Aug 2024 10:00:00 GMT Release hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/cosign-verification-policies-production https://safeguard.sh/resources/blog/cosign-verification-policies-production Tue, 30 Jul 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nuget-private-feed-security-hardening https://safeguard.sh/resources/blog/nuget-private-feed-security-hardening Tue, 30 Jul 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/rancher-cluster-security-hardening https://safeguard.sh/resources/blog/rancher-cluster-security-hardening Tue, 30 Jul 2024 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vmware-esxi-ransomware-campaigns-2024 https://safeguard.sh/resources/blog/vmware-esxi-ransomware-campaigns-2024 Tue, 30 Jul 2024 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/azure-container-registry-trust-model https://safeguard.sh/resources/blog/azure-container-registry-trust-model Sun, 28 Jul 2024 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/dependency-compromise-timeline-reconstruction https://safeguard.sh/resources/blog/dependency-compromise-timeline-reconstruction Sun, 28 Jul 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/monolith-to-microservices-supply-chain-changes https://safeguard.sh/resources/blog/monolith-to-microservices-supply-chain-changes Sun, 28 Jul 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/crowdstrike-falcon-global-outage-deep-dive-2024 https://safeguard.sh/resources/blog/crowdstrike-falcon-global-outage-deep-dive-2024 Thu, 25 Jul 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pydantic-v2-security-implications https://safeguard.sh/resources/blog/pydantic-v2-security-implications Thu, 25 Jul 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/us-dod-zero-trust-software-dimensions https://safeguard.sh/resources/blog/us-dod-zero-trust-software-dimensions Thu, 25 Jul 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/aws-ecr-image-signing-production https://safeguard.sh/resources/blog/aws-ecr-image-signing-production Mon, 22 Jul 2024 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gdpr-meets-cra-software-overlap https://safeguard.sh/resources/blog/gdpr-meets-cra-software-overlap Mon, 22 Jul 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/how-to-build-a-vex-document-for-consumers https://safeguard.sh/resources/blog/how-to-build-a-vex-document-for-consumers Mon, 22 Jul 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/scattered-spider-developer-targeting-patterns https://safeguard.sh/resources/blog/scattered-spider-developer-targeting-patterns Mon, 22 Jul 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sentinel-one-supply-chain-detection-logic https://safeguard.sh/resources/blog/sentinel-one-supply-chain-detection-logic Mon, 22 Jul 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/crowdstrike-outage-lessons-software-updates https://safeguard.sh/resources/blog/crowdstrike-outage-lessons-software-updates Mon, 22 Jul 2024 10:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/graalvm-native-image-supply-chain https://safeguard.sh/resources/blog/graalvm-native-image-supply-chain Sat, 20 Jul 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/crowdstrike-falcon-global-outage-july-2024 https://safeguard.sh/resources/blog/crowdstrike-falcon-global-outage-july-2024 Fri, 19 Jul 2024 14:00:00 GMT Incident Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/dropbox-incident-2022-supply-chain-angle https://safeguard.sh/resources/blog/dropbox-incident-2022-supply-chain-angle Thu, 18 Jul 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/external-secrets-operator-kubernetes-guide https://safeguard.sh/resources/blog/external-secrets-operator-kubernetes-guide Thu, 18 Jul 2024 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/npm-token-rotation-enterprise-strategy https://safeguard.sh/resources/blog/npm-token-rotation-enterprise-strategy Thu, 18 Jul 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/open-banking-api-supply-chain-security https://safeguard.sh/resources/blog/open-banking-api-supply-chain-security Thu, 18 Jul 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/drone-ci-security-considerations https://safeguard.sh/resources/blog/drone-ci-security-considerations Mon, 15 Jul 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fuzzing-open-source-for-supply-chain-findings https://safeguard.sh/resources/blog/fuzzing-open-source-for-supply-chain-findings Mon, 15 Jul 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/safeguard-auto-fix-automated-remediation https://safeguard.sh/resources/blog/safeguard-auto-fix-automated-remediation Mon, 15 Jul 2024 10:00:00 GMT Product hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/rust-crates-io-security-model-review https://safeguard.sh/resources/blog/rust-crates-io-security-model-review Sun, 14 Jul 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gcp-workload-identity-federation-supply-chain https://safeguard.sh/resources/blog/gcp-workload-identity-federation-supply-chain Fri, 12 Jul 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nix-reproducible-builds-supply-chain-case https://safeguard.sh/resources/blog/nix-reproducible-builds-supply-chain-case Fri, 12 Jul 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/mean-time-to-remediation-benchmarks https://safeguard.sh/resources/blog/mean-time-to-remediation-benchmarks Fri, 12 Jul 2024 00:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/servicenow-cve-2024-4879-rce-exploitation https://safeguard.sh/resources/blog/servicenow-cve-2024-4879-rce-exploitation Wed, 10 Jul 2024 12:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/ml-model-serving-infrastructure-security https://safeguard.sh/resources/blog/ml-model-serving-infrastructure-security Wed, 10 Jul 2024 09:00:00 GMT Cloud Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/maintainer-burnout-security-implications https://safeguard.sh/resources/blog/maintainer-burnout-security-implications Mon, 08 Jul 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/semgrep-vs-codeql-sast-comparison-2024 https://safeguard.sh/resources/blog/semgrep-vs-codeql-sast-comparison-2024 Mon, 08 Jul 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/code-repository-security-hardening https://safeguard.sh/resources/blog/code-repository-security-hardening Mon, 08 Jul 2024 00:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fastapi-supply-chain-security-guide https://safeguard.sh/resources/blog/fastapi-supply-chain-security-guide Fri, 05 Jul 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/go-checksum-verification-patterns https://safeguard.sh/resources/blog/go-checksum-verification-patterns Fri, 05 Jul 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/bundler-audit-production-setup https://safeguard.sh/resources/blog/bundler-audit-production-setup Tue, 02 Jul 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/safeguard-sca-vulnerability-scanning https://safeguard.sh/resources/blog/safeguard-sca-vulnerability-scanning Mon, 01 Jul 2024 10:00:00 GMT Product hi@safeguard.sh (James) https://safeguard.sh/resources/blog/regresshion-openssh-cve-2024-6387 https://safeguard.sh/resources/blog/regresshion-openssh-cve-2024-6387 Mon, 01 Jul 2024 08:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/azure-policy-supply-chain-enforcement https://safeguard.sh/resources/blog/azure-policy-supply-chain-enforcement Sun, 30 Jun 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/retail-pos-supply-chain-security https://safeguard.sh/resources/blog/retail-pos-supply-chain-security Sun, 30 Jun 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/aws-secrets-manager-vs-parameter-store-comparison https://safeguard.sh/resources/blog/aws-secrets-manager-vs-parameter-store-comparison Fri, 28 Jun 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/firecracker-micro-vm-security-model https://safeguard.sh/resources/blog/firecracker-micro-vm-security-model Fri, 28 Jun 2024 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/in-toto-attestation-formats-review https://safeguard.sh/resources/blog/in-toto-attestation-formats-review Fri, 28 Jun 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/argocd-gitops-security-depth https://safeguard.sh/resources/blog/argocd-gitops-security-depth Tue, 25 Jun 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/commercial-open-source-license-shift-analysis https://safeguard.sh/resources/blog/commercial-open-source-license-shift-analysis Tue, 25 Jun 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/iso-27001-meets-nist-csf-integration https://safeguard.sh/resources/blog/iso-27001-meets-nist-csf-integration Tue, 25 Jun 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/microsoft-midnight-blizzard-detailed-timeline https://safeguard.sh/resources/blog/microsoft-midnight-blizzard-detailed-timeline Tue, 25 Jun 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/polyfill-io-supply-chain-attack https://safeguard.sh/resources/blog/polyfill-io-supply-chain-attack Tue, 25 Jun 2024 09:00:00 GMT Supply Chain Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/gn-meson-build-system-security-comparison https://safeguard.sh/resources/blog/gn-meson-build-system-security-comparison Sat, 22 Jun 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/nuget-central-package-management-security https://safeguard.sh/resources/blog/nuget-central-package-management-security Sat, 22 Jun 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pypi-api-token-scopes-audit https://safeguard.sh/resources/blog/pypi-api-token-scopes-audit Sat, 22 Jun 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/malicious-package-quarantine-procedures https://safeguard.sh/resources/blog/malicious-package-quarantine-procedures Thu, 20 Jun 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/migrating-off-ansible-to-gitops https://safeguard.sh/resources/blog/migrating-off-ansible-to-gitops Thu, 20 Jun 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/npm-package-takeover-summer-2024-wave https://safeguard.sh/resources/blog/npm-package-takeover-summer-2024-wave Thu, 20 Jun 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vulnerability-management-at-scale-enterprise https://safeguard.sh/resources/blog/vulnerability-management-at-scale-enterprise Thu, 20 Jun 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/middle-east-cybersecurity-landscape-2024 https://safeguard.sh/resources/blog/middle-east-cybersecurity-landscape-2024 Thu, 20 Jun 2024 00:00:00 GMT Regional Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/go-module-hijacking-detection https://safeguard.sh/resources/blog/go-module-hijacking-detection Tue, 18 Jun 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/payment-processor-dependency-risks https://safeguard.sh/resources/blog/payment-processor-dependency-risks Tue, 18 Jun 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/aws-codepipeline-hardening-patterns https://safeguard.sh/resources/blog/aws-codepipeline-hardening-patterns Sat, 15 Jun 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/clop-supply-chain-exploitation-tradecraft https://safeguard.sh/resources/blog/clop-supply-chain-exploitation-tradecraft Sat, 15 Jun 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/devex-meets-devsecops-developer-experience https://safeguard.sh/resources/blog/devex-meets-devsecops-developer-experience Sat, 15 Jun 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/safeguard-ide-extension-launch https://safeguard.sh/resources/blog/safeguard-ide-extension-launch Sat, 15 Jun 2024 10:00:00 GMT Product hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/elastic-security-supply-chain-signals https://safeguard.sh/resources/blog/elastic-security-supply-chain-signals Sat, 15 Jun 2024 00:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/bundler-lockfile-security-practices https://safeguard.sh/resources/blog/bundler-lockfile-security-practices Fri, 14 Jun 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/npm-workspaces-security-considerations https://safeguard.sh/resources/blog/npm-workspaces-security-considerations Wed, 12 Jun 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gramm-leach-bliley-software-security-update-2024 https://safeguard.sh/resources/blog/gramm-leach-bliley-software-security-update-2024 Tue, 11 Jun 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gradle-build-cache-security-hardening https://safeguard.sh/resources/blog/gradle-build-cache-security-hardening Mon, 10 Jun 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/how-to-sign-container-images-with-cosign-guide https://safeguard.sh/resources/blog/how-to-sign-container-images-with-cosign-guide Mon, 10 Jun 2024 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/snowflake-customer-data-breaches https://safeguard.sh/resources/blog/snowflake-customer-data-breaches Mon, 10 Jun 2024 09:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gcp-secret-manager-rotation-strategy https://safeguard.sh/resources/blog/gcp-secret-manager-rotation-strategy Sat, 08 Jun 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/rust-edition-migration-security-notes https://safeguard.sh/resources/blog/rust-edition-migration-security-notes Sat, 08 Jun 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/security-team-scaling-strategies https://safeguard.sh/resources/blog/security-team-scaling-strategies Sat, 08 Jun 2024 10:00:00 GMT Security Strategy hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/tauri-desktop-app-security-model https://safeguard.sh/resources/blog/tauri-desktop-app-security-model Wed, 05 Jun 2024 10:00:00 GMT Application Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/openai-internal-breach-2024 https://safeguard.sh/resources/blog/openai-internal-breach-2024 Wed, 05 Jun 2024 09:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nextjs-supply-chain-security-hardening-2024 https://safeguard.sh/resources/blog/nextjs-supply-chain-security-hardening-2024 Tue, 04 Jun 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-cli-tool-developer-workflow https://safeguard.sh/resources/blog/safeguard-cli-tool-developer-workflow Sat, 01 Jun 2024 10:00:00 GMT Product hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/infisical-open-source-secrets-platform https://safeguard.sh/resources/blog/infisical-open-source-secrets-platform Thu, 30 May 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/insurance-industry-software-supply-chain https://safeguard.sh/resources/blog/insurance-industry-software-supply-chain Thu, 30 May 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/vite-build-tool-security-considerations https://safeguard.sh/resources/blog/vite-build-tool-security-considerations Thu, 30 May 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/harness-io-supply-chain-security-review https://safeguard.sh/resources/blog/harness-io-supply-chain-security-review Tue, 28 May 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/maven-central-changes-2024-security-impact https://safeguard.sh/resources/blog/maven-central-changes-2024-security-impact Tue, 28 May 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/rails-application-template-security https://safeguard.sh/resources/blog/rails-application-template-security Tue, 28 May 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/symbolic-execution-for-dependency-analysis https://safeguard.sh/resources/blog/symbolic-execution-for-dependency-analysis Tue, 28 May 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/check-point-vpn-cve-2024-24919-zero-day https://safeguard.sh/resources/blog/check-point-vpn-cve-2024-24919-zero-day Tue, 28 May 2024 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/cisco-duo-incident-supply-chain-depth https://safeguard.sh/resources/blog/cisco-duo-incident-supply-chain-depth Sat, 25 May 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/gcp-cloud-build-hardening-production https://safeguard.sh/resources/blog/gcp-cloud-build-hardening-production Sat, 25 May 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/oss-contributor-license-agreements-review https://safeguard.sh/resources/blog/oss-contributor-license-agreements-review Sat, 25 May 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/message-queue-security-kafka-rabbitmq https://safeguard.sh/resources/blog/message-queue-security-kafka-rabbitmq Sat, 25 May 2024 00:00:00 GMT Infrastructure Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/go-workspaces-supply-chain-risks https://safeguard.sh/resources/blog/go-workspaces-supply-chain-risks Wed, 22 May 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/pypi-package-yanking-policies-analysis https://safeguard.sh/resources/blog/pypi-package-yanking-policies-analysis Wed, 22 May 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sumo-logic-supply-chain-observability https://safeguard.sh/resources/blog/sumo-logic-supply-chain-observability Wed, 22 May 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fastapi-security-best-practices https://safeguard.sh/resources/blog/fastapi-security-best-practices Wed, 22 May 2024 10:00:00 GMT Application Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/how-to-measure-dependency-freshness-in-ci https://safeguard.sh/resources/blog/how-to-measure-dependency-freshness-in-ci Mon, 20 May 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sox-it-controls-meets-software-controls https://safeguard.sh/resources/blog/sox-it-controls-meets-software-controls Mon, 20 May 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/utilities-sector-nerc-cip-software-supply-chain https://safeguard.sh/resources/blog/utilities-sector-nerc-cip-software-supply-chain Mon, 20 May 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/deepfake-social-engineering-supply-chain https://safeguard.sh/resources/blog/deepfake-social-engineering-supply-chain Mon, 20 May 2024 11:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sbom-visualization-tools-comparison https://safeguard.sh/resources/blog/sbom-visualization-tools-comparison Mon, 20 May 2024 10:00:00 GMT SBOM and Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/github-enterprise-server-cve-2024-4985 https://safeguard.sh/resources/blog/github-enterprise-server-cve-2024-4985 Mon, 20 May 2024 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/azure-key-vault-rotation-patterns https://safeguard.sh/resources/blog/azure-key-vault-rotation-patterns Sat, 18 May 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/dotnet-supply-chain-audit-patterns https://safeguard.sh/resources/blog/dotnet-supply-chain-audit-patterns Sat, 18 May 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/migrating-sbom-tooling-provider-migration https://safeguard.sh/resources/blog/migrating-sbom-tooling-provider-migration Sat, 18 May 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/pants-build-tool-security-posture https://safeguard.sh/resources/blog/pants-build-tool-security-posture Sat, 18 May 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/python-package-namespace-conflicts-management https://safeguard.sh/resources/blog/python-package-namespace-conflicts-management Sat, 18 May 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/rust-no-std-supply-chain-considerations https://safeguard.sh/resources/blog/rust-no-std-supply-chain-considerations Wed, 15 May 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/slsa-for-go-releases-practical-guide https://safeguard.sh/resources/blog/slsa-for-go-releases-practical-guide Wed, 15 May 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-griffin-ai-autonomous-security https://safeguard.sh/resources/blog/safeguard-griffin-ai-autonomous-security Wed, 15 May 2024 10:00:00 GMT Product hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/sbom-for-edtech-platforms https://safeguard.sh/resources/blog/sbom-for-edtech-platforms Wed, 15 May 2024 00:00:00 GMT SBOM hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/oss-pledge-adoption-tracking-2024 https://safeguard.sh/resources/blog/oss-pledge-adoption-tracking-2024 Tue, 14 May 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/containerd-security-configuration-guide https://safeguard.sh/resources/blog/containerd-security-configuration-guide Sun, 12 May 2024 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/kotlin-multiplatform-supply-chain-risks https://safeguard.sh/resources/blog/kotlin-multiplatform-supply-chain-risks Sun, 12 May 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/disaster-recovery-supply-chain-incidents https://safeguard.sh/resources/blog/disaster-recovery-supply-chain-incidents Sun, 12 May 2024 10:00:00 GMT Security Operations hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/false-positive-rates-container-scanning https://safeguard.sh/resources/blog/false-positive-rates-container-scanning Sun, 12 May 2024 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/eo-14028-three-years-later-progress-report https://safeguard.sh/resources/blog/eo-14028-three-years-later-progress-report Sun, 12 May 2024 09:00:00 GMT Policy & Compliance hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/cncf-project-security-audits https://safeguard.sh/resources/blog/cncf-project-security-audits Sun, 12 May 2024 00:00:00 GMT Open Source Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/dell-49-million-customer-records https://safeguard.sh/resources/blog/dell-49-million-customer-records Fri, 10 May 2024 14:00:00 GMT Incident Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/apt29-cozy-bear-supply-chain-tradecraft https://safeguard.sh/resources/blog/apt29-cozy-bear-supply-chain-tradecraft Fri, 10 May 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/aws-codebuild-supply-chain-hardening-guide https://safeguard.sh/resources/blog/aws-codebuild-supply-chain-hardening-guide Fri, 10 May 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/digital-supply-chain-risk-quantification https://safeguard.sh/resources/blog/digital-supply-chain-risk-quantification Wed, 08 May 2024 11:00:00 GMT Risk Management hi@safeguard.sh (James) https://safeguard.sh/resources/blog/homebrew-cask-security-verification https://safeguard.sh/resources/blog/homebrew-cask-security-verification Wed, 08 May 2024 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/maven-plugin-verification-guide https://safeguard.sh/resources/blog/maven-plugin-verification-guide Wed, 08 May 2024 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/nextjs-security-hardening-guide https://safeguard.sh/resources/blog/nextjs-security-hardening-guide Wed, 08 May 2024 10:00:00 GMT Application Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/third-party-risk-management-software-vendors-program https://safeguard.sh/resources/blog/third-party-risk-management-software-vendors-program Tue, 07 May 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/developer-workstation-forensics-supply-chain https://safeguard.sh/resources/blog/developer-workstation-forensics-supply-chain Sun, 05 May 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/open-source-ai-model-security-landscape https://safeguard.sh/resources/blog/open-source-ai-model-security-landscape Sun, 05 May 2024 12:00:00 GMT Emerging Threats hi@safeguard.sh (James) https://safeguard.sh/resources/blog/graphql-injection-prevention https://safeguard.sh/resources/blog/graphql-injection-prevention Sun, 05 May 2024 10:00:00 GMT Application Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/sast-tool-accuracy-benchmarks-2024 https://safeguard.sh/resources/blog/sast-tool-accuracy-benchmarks-2024 Sun, 05 May 2024 10:00:00 GMT Application Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/safeguard-open-source-manager-launch https://safeguard.sh/resources/blog/safeguard-open-source-manager-launch Wed, 01 May 2024 10:00:00 GMT Product hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/aws-appconfig-dynamic-config-security https://safeguard.sh/resources/blog/aws-appconfig-dynamic-config-security Tue, 30 Apr 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/spring-dependency-management-supply-chain https://safeguard.sh/resources/blog/spring-dependency-management-supply-chain Tue, 30 Apr 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/chronicle-security-supply-chain-queries https://safeguard.sh/resources/blog/chronicle-security-supply-chain-queries Tue, 30 Apr 2024 00:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/critical-infrastructure-software-supply-chain https://safeguard.sh/resources/blog/critical-infrastructure-software-supply-chain Sun, 28 Apr 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/twilio-2022-incidents-supply-chain-lessons https://safeguard.sh/resources/blog/twilio-2022-incidents-supply-chain-lessons Sun, 28 Apr 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/coordinated-vulnerability-disclosure-guide https://safeguard.sh/resources/blog/coordinated-vulnerability-disclosure-guide Sun, 28 Apr 2024 09:00:00 GMT Vulnerability Management hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/eu-nis2-directive-software-supply-chain https://safeguard.sh/resources/blog/eu-nis2-directive-software-supply-chain Thu, 25 Apr 2024 12:00:00 GMT Compliance & Frameworks hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/medical-device-sbom-requirements-practical https://safeguard.sh/resources/blog/medical-device-sbom-requirements-practical Thu, 25 Apr 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/npm-registry-authentication-deep-dive https://safeguard.sh/resources/blog/npm-registry-authentication-deep-dive Thu, 25 Apr 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/corporate-oss-contribution-policies https://safeguard.sh/resources/blog/corporate-oss-contribution-policies Mon, 22 Apr 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/one-password-secrets-automation-ci https://safeguard.sh/resources/blog/one-password-secrets-automation-ci Mon, 22 Apr 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/pypi-supply-chain-attacks-q1-2024 https://safeguard.sh/resources/blog/pypi-supply-chain-attacks-q1-2024 Mon, 22 Apr 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/taint-analysis-for-zero-day-discovery-primer https://safeguard.sh/resources/blog/taint-analysis-for-zero-day-discovery-primer Mon, 22 Apr 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/azure-devops-yaml-pipeline-hardening https://safeguard.sh/resources/blog/azure-devops-yaml-pipeline-hardening Sat, 20 Apr 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/container-security-scanning-benchmarks-2024 https://safeguard.sh/resources/blog/container-security-scanning-benchmarks-2024 Sat, 20 Apr 2024 09:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/conti-ransomware-supply-chain-patterns https://safeguard.sh/resources/blog/conti-ransomware-supply-chain-patterns Thu, 18 Apr 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/palo-alto-globalprotect-zero-day-response-2024 https://safeguard.sh/resources/blog/palo-alto-globalprotect-zero-day-response-2024 Thu, 18 Apr 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pypi-package-namespace-governance https://safeguard.sh/resources/blog/pypi-package-namespace-governance Thu, 18 Apr 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/rubygems-2fa-enforcement-analysis https://safeguard.sh/resources/blog/rubygems-2fa-enforcement-analysis Thu, 18 Apr 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sigstore-rekor-transparency-log-operations https://safeguard.sh/resources/blog/sigstore-rekor-transparency-log-operations Thu, 18 Apr 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/black-basta-ransomware-techniques-2024 https://safeguard.sh/resources/blog/black-basta-ransomware-techniques-2024 Thu, 18 Apr 2024 10:00:00 GMT Ransomware hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/insurance-industry-software-risk-assessment https://safeguard.sh/resources/blog/insurance-industry-software-risk-assessment Thu, 18 Apr 2024 08:00:00 GMT Industry Guides hi@safeguard.sh (James) https://safeguard.sh/resources/blog/uk-product-security-telecommunications-act https://safeguard.sh/resources/blog/uk-product-security-telecommunications-act Thu, 18 Apr 2024 08:00:00 GMT Compliance hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/penetration-testing-ci-cd-pipelines https://safeguard.sh/resources/blog/penetration-testing-ci-cd-pipelines Thu, 18 Apr 2024 00:00:00 GMT Offensive Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/gcp-cloud-functions-supply-chain-risks https://safeguard.sh/resources/blog/gcp-cloud-functions-supply-chain-risks Mon, 15 Apr 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/migrating-from-jenkins-to-github-actions-security https://safeguard.sh/resources/blog/migrating-from-jenkins-to-github-actions-security Mon, 15 Apr 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/supply-chain-incident-forensics-playbook https://safeguard.sh/resources/blog/supply-chain-incident-forensics-playbook Mon, 15 Apr 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/aws-lambda-supply-chain-risks https://safeguard.sh/resources/blog/aws-lambda-supply-chain-risks Mon, 15 Apr 2024 10:00:00 GMT Cloud Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/safeguard-tprm-third-party-risk https://safeguard.sh/resources/blog/safeguard-tprm-third-party-risk Mon, 15 Apr 2024 10:00:00 GMT Product hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/sisense-breach-cisa-advisory https://safeguard.sh/resources/blog/sisense-breach-cisa-advisory Mon, 15 Apr 2024 09:00:00 GMT Incident Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/spdx-3-0-specification-what-changed https://safeguard.sh/resources/blog/spdx-3-0-specification-what-changed Mon, 15 Apr 2024 09:00:00 GMT SBOM Standards hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/privacy-engineering-supply-chains https://safeguard.sh/resources/blog/privacy-engineering-supply-chains Mon, 15 Apr 2024 00:00:00 GMT Privacy hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/australia-essential-eight-supply-chain https://safeguard.sh/resources/blog/australia-essential-eight-supply-chain Sun, 14 Apr 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/roku-576000-accounts-credential-stuffing https://safeguard.sh/resources/blog/roku-576000-accounts-credential-stuffing Fri, 12 Apr 2024 14:00:00 GMT Incident Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/go-dependency-visualization-for-security https://safeguard.sh/resources/blog/go-dependency-visualization-for-security Fri, 12 Apr 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/buildkit-cache-security-considerations https://safeguard.sh/resources/blog/buildkit-cache-security-considerations Fri, 12 Apr 2024 10:00:00 GMT Container Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/envoy-proxy-security-hardening https://safeguard.sh/resources/blog/envoy-proxy-security-hardening Fri, 12 Apr 2024 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/iot-firmware-sbom-requirements https://safeguard.sh/resources/blog/iot-firmware-sbom-requirements Fri, 12 Apr 2024 09:00:00 GMT Compliance hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/palo-alto-pan-os-cve-2024-3400-zero-day https://safeguard.sh/resources/blog/palo-alto-pan-os-cve-2024-3400-zero-day Fri, 12 Apr 2024 08:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/open-source-contribution-security-guide https://safeguard.sh/resources/blog/open-source-contribution-security-guide Fri, 12 Apr 2024 00:00:00 GMT Organizational Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/django-security-best-practices-2024-edition https://safeguard.sh/resources/blog/django-security-best-practices-2024-edition Wed, 10 Apr 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/compliance-dashboard-design-patterns https://safeguard.sh/resources/blog/compliance-dashboard-design-patterns Wed, 10 Apr 2024 10:00:00 GMT SBOM and Compliance hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/cisa-secure-by-design-pledge https://safeguard.sh/resources/blog/cisa-secure-by-design-pledge Wed, 10 Apr 2024 09:00:00 GMT Policy & Compliance hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/bazel-hermetic-builds-supply-chain-benefits https://safeguard.sh/resources/blog/bazel-hermetic-builds-supply-chain-benefits Mon, 08 Apr 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/hipaa-meets-hitrust-supply-chain-depth https://safeguard.sh/resources/blog/hipaa-meets-hitrust-supply-chain-depth Mon, 08 Apr 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/kubernetes-network-policies-supply-chain-angle https://safeguard.sh/resources/blog/kubernetes-network-policies-supply-chain-angle Mon, 08 Apr 2024 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/powershell-module-supply-chain-security https://safeguard.sh/resources/blog/powershell-module-supply-chain-security Mon, 08 Apr 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vulnerability-scanning-frequency-guide https://safeguard.sh/resources/blog/vulnerability-scanning-frequency-guide Mon, 08 Apr 2024 10:00:00 GMT Best Practices hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/websocket-security-modern-applications https://safeguard.sh/resources/blog/websocket-security-modern-applications Mon, 08 Apr 2024 10:00:00 GMT Application Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/ai-model-poisoning-detection-techniques https://safeguard.sh/resources/blog/ai-model-poisoning-detection-techniques Mon, 08 Apr 2024 09:00:00 GMT AI Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/kubernetes-secrets-management-comparison https://safeguard.sh/resources/blog/kubernetes-secrets-management-comparison Mon, 08 Apr 2024 00:00:00 GMT Kubernetes Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/latin-america-cybersecurity-regulations https://safeguard.sh/resources/blog/latin-america-cybersecurity-regulations Mon, 08 Apr 2024 00:00:00 GMT Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cargo-audit-vs-cargo-deny-comparison https://safeguard.sh/resources/blog/cargo-audit-vs-cargo-deny-comparison Fri, 05 Apr 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/xz-utils-backdoor-technical-breakdown https://safeguard.sh/resources/blog/xz-utils-backdoor-technical-breakdown Fri, 05 Apr 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/prototype-pollution-javascript-prevention https://safeguard.sh/resources/blog/prototype-pollution-javascript-prevention Fri, 05 Apr 2024 10:00:00 GMT Application Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/threat-intelligence-feeds-supply-chain https://safeguard.sh/resources/blog/threat-intelligence-feeds-supply-chain Fri, 05 Apr 2024 10:00:00 GMT Threat Intelligence hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/xz-utils-lessons-for-open-source-trust https://safeguard.sh/resources/blog/xz-utils-lessons-for-open-source-trust Fri, 05 Apr 2024 09:00:00 GMT Supply Chain Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/enterprise-sca-tool-evaluation-framework https://safeguard.sh/resources/blog/enterprise-sca-tool-evaluation-framework Fri, 05 Apr 2024 08:00:00 GMT Industry Guides hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/mend-vs-black-duck-functional-comparison-2024 https://safeguard.sh/resources/blog/mend-vs-black-duck-functional-comparison-2024 Wed, 03 Apr 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/jenkins-pipeline-supply-chain-security https://safeguard.sh/resources/blog/jenkins-pipeline-supply-chain-security Tue, 02 Apr 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/forking-security-when-projects-diverge https://safeguard.sh/resources/blog/forking-security-when-projects-diverge Tue, 02 Apr 2024 00:00:00 GMT Open Source Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/safeguard-portal-customer-transparency https://safeguard.sh/resources/blog/safeguard-portal-customer-transparency Mon, 01 Apr 2024 10:00:00 GMT Product hi@safeguard.sh (James) https://safeguard.sh/resources/blog/xz-utils-backdoor-how-it-was-discovered https://safeguard.sh/resources/blog/xz-utils-backdoor-how-it-was-discovered Mon, 01 Apr 2024 09:00:00 GMT Supply Chain Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/pci-dss-4-0-software-security-requirements https://safeguard.sh/resources/blog/pci-dss-4-0-software-security-requirements Sun, 31 Mar 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/att-73-million-records-dark-web https://safeguard.sh/resources/blog/att-73-million-records-dark-web Sat, 30 Mar 2024 14:00:00 GMT Incident Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/xz-utils-backdoor-cve-2024-3094-analysis https://safeguard.sh/resources/blog/xz-utils-backdoor-cve-2024-3094-analysis Fri, 29 Mar 2024 08:00:00 GMT Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/go-proxy-private-module-security https://safeguard.sh/resources/blog/go-proxy-private-module-security Thu, 28 Mar 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ninja-build-supply-chain-considerations https://safeguard.sh/resources/blog/ninja-build-supply-chain-considerations Thu, 28 Mar 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/splunk-supply-chain-detection-content-pack https://safeguard.sh/resources/blog/splunk-supply-chain-detection-content-pack Thu, 28 Mar 2024 00:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/gcp-cloud-run-supply-chain-security https://safeguard.sh/resources/blog/gcp-cloud-run-supply-chain-security Mon, 25 Mar 2024 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/github-advanced-security-vs-alternatives-2024 https://safeguard.sh/resources/blog/github-advanced-security-vs-alternatives-2024 Mon, 25 Mar 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/maven-enforcer-plugin-security-rules https://safeguard.sh/resources/blog/maven-enforcer-plugin-security-rules Mon, 25 Mar 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/slsa-build-l1-to-l3-migration-playbook https://safeguard.sh/resources/blog/slsa-build-l1-to-l3-migration-playbook Mon, 25 Mar 2024 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dependency-firewall-concept-implementation https://safeguard.sh/resources/blog/dependency-firewall-concept-implementation Mon, 25 Mar 2024 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/defense-industrial-base-supply-chain-cmmc https://safeguard.sh/resources/blog/defense-industrial-base-supply-chain-cmmc Fri, 22 Mar 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nest-js-enterprise-security-guide https://safeguard.sh/resources/blog/nest-js-enterprise-security-guide Fri, 22 Mar 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/post-quantum-cryptography-transition-guide https://safeguard.sh/resources/blog/post-quantum-cryptography-transition-guide Fri, 22 Mar 2024 10:00:00 GMT Emerging Technology hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/wolfi-os-container-base-image-security https://safeguard.sh/resources/blog/wolfi-os-container-base-image-security Fri, 22 Mar 2024 00:00:00 GMT Container Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/npm-lifecycle-scripts-security-risks https://safeguard.sh/resources/blog/npm-lifecycle-scripts-security-risks Wed, 20 Mar 2024 12:00:00 GMT Supply Chain Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/rust-supply-chain-build-scripts-risk https://safeguard.sh/resources/blog/rust-supply-chain-build-scripts-risk Wed, 20 Mar 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/prisma-cloud-container-security-review https://safeguard.sh/resources/blog/prisma-cloud-container-security-review Wed, 20 Mar 2024 00:00:00 GMT Tool Reviews hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/aws-lambda-layers-supply-chain-risks https://safeguard.sh/resources/blog/aws-lambda-layers-supply-chain-risks Mon, 18 Mar 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/okta-2022-2023-incidents-supply-chain-lessons https://safeguard.sh/resources/blog/okta-2022-2023-incidents-supply-chain-lessons Mon, 18 Mar 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/open-source-single-maintainer-bus-factor-risk https://safeguard.sh/resources/blog/open-source-single-maintainer-bus-factor-risk Mon, 18 Mar 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/soc2-meets-ssdf-mapping-practical https://safeguard.sh/resources/blog/soc2-meets-ssdf-mapping-practical Mon, 18 Mar 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cloud-security-posture-management-guide https://safeguard.sh/resources/blog/cloud-security-posture-management-guide Mon, 18 Mar 2024 10:00:00 GMT Cloud Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/nodejs-permission-model https://safeguard.sh/resources/blog/nodejs-permission-model Mon, 18 Mar 2024 10:00:00 GMT Secure Development hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/github-supply-chain-security-features https://safeguard.sh/resources/blog/github-supply-chain-security-features Mon, 18 Mar 2024 00:00:00 GMT Case Studies hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/technical-debt-security-debt-intersection https://safeguard.sh/resources/blog/technical-debt-security-debt-intersection Mon, 18 Mar 2024 00:00:00 GMT Risk Management hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/hashicorp-vault-supply-chain-integration-patterns https://safeguard.sh/resources/blog/hashicorp-vault-supply-chain-integration-patterns Fri, 15 Mar 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ruby-gem-reserved-names-policy https://safeguard.sh/resources/blog/ruby-gem-reserved-names-policy Fri, 15 Mar 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/safeguard-esscm-enterprise-sbom-management https://safeguard.sh/resources/blog/safeguard-esscm-enterprise-sbom-management Fri, 15 Mar 2024 10:00:00 GMT Product hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/nist-nvd-slowdown-vulnerability-enrichment https://safeguard.sh/resources/blog/nist-nvd-slowdown-vulnerability-enrichment Fri, 15 Mar 2024 09:00:00 GMT Industry Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/security-testing-data-pipelines https://safeguard.sh/resources/blog/security-testing-data-pipelines Fri, 15 Mar 2024 09:00:00 GMT AppSec hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/pypi-account-recovery-security-model https://safeguard.sh/resources/blog/pypi-account-recovery-security-model Thu, 14 Mar 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/azure-functions-supply-chain-security https://safeguard.sh/resources/blog/azure-functions-supply-chain-security Tue, 12 Mar 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/chocolatey-package-security-windows https://safeguard.sh/resources/blog/chocolatey-package-security-windows Tue, 12 Mar 2024 10:00:00 GMT Supply Chain Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/dotnet-trimming-security-implications https://safeguard.sh/resources/blog/dotnet-trimming-security-implications Tue, 12 Mar 2024 10:00:00 GMT Application Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/security-architecture-review-process https://safeguard.sh/resources/blog/security-architecture-review-process Tue, 12 Mar 2024 10:00:00 GMT Security Operations hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/energy-sector-software-security-nerc-cip https://safeguard.sh/resources/blog/energy-sector-software-security-nerc-cip Tue, 12 Mar 2024 09:00:00 GMT Industry Guides hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/endor-labs-sca-platform-review https://safeguard.sh/resources/blog/endor-labs-sca-platform-review Tue, 12 Mar 2024 00:00:00 GMT Tool Reviews hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/flutter-dart-dependency-security-guide https://safeguard.sh/resources/blog/flutter-dart-dependency-security-guide Tue, 12 Mar 2024 00:00:00 GMT Developer Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cisa-secure-software-development-attestation https://safeguard.sh/resources/blog/cisa-secure-software-development-attestation Mon, 11 Mar 2024 09:00:00 GMT Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cisa-kev-catalog-growth-analysis-2024 https://safeguard.sh/resources/blog/cisa-kev-catalog-growth-analysis-2024 Sun, 10 Mar 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/dotnet-8-supply-chain-improvements https://safeguard.sh/resources/blog/dotnet-8-supply-chain-improvements Sun, 10 Mar 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/kubernetes-vulnerability-cve-2024-3177 https://safeguard.sh/resources/blog/kubernetes-vulnerability-cve-2024-3177 Sun, 10 Mar 2024 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/bianlian-ransomware-data-extortion-evolution https://safeguard.sh/resources/blog/bianlian-ransomware-data-extortion-evolution Sun, 10 Mar 2024 00:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ci-cd-compromise-investigation-steps https://safeguard.sh/resources/blog/ci-cd-compromise-investigation-steps Fri, 08 Mar 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/how-to-publish-npm-package-with-provenance https://safeguard.sh/resources/blog/how-to-publish-npm-package-with-provenance Fri, 08 Mar 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/tekton-pipelines-hardening-guide https://safeguard.sh/resources/blog/tekton-pipelines-hardening-guide Fri, 08 Mar 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vm-to-container-supply-chain-implications https://safeguard.sh/resources/blog/vm-to-container-supply-chain-implications Fri, 08 Mar 2024 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/certificate-pinning-software-updates https://safeguard.sh/resources/blog/certificate-pinning-software-updates Fri, 08 Mar 2024 10:00:00 GMT Application Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/mobile-application-security-testing https://safeguard.sh/resources/blog/mobile-application-security-testing Fri, 08 Mar 2024 00:00:00 GMT Application Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/security-kpi-frameworks-guide https://safeguard.sh/resources/blog/security-kpi-frameworks-guide Fri, 08 Mar 2024 00:00:00 GMT Security Management hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/fintech-software-supply-chain-regulatory-map https://safeguard.sh/resources/blog/fintech-software-supply-chain-regulatory-map Tue, 05 Mar 2024 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/kubernetes-secrets-encryption-providers-review https://safeguard.sh/resources/blog/kubernetes-secrets-encryption-providers-review Tue, 05 Mar 2024 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/abandoned-package-takeover-risks https://safeguard.sh/resources/blog/abandoned-package-takeover-risks Tue, 05 Mar 2024 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/capacitor-ionic-hybrid-app-security https://safeguard.sh/resources/blog/capacitor-ionic-hybrid-app-security Tue, 05 Mar 2024 10:00:00 GMT Application Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/crates-io-security-audit-results https://safeguard.sh/resources/blog/crates-io-security-audit-results Tue, 05 Mar 2024 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/software-liability-shifting-landscape-2024 https://safeguard.sh/resources/blog/software-liability-shifting-landscape-2024 Tue, 05 Mar 2024 09:00:00 GMT Policy & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/argo-cd-gitops-security-guide https://safeguard.sh/resources/blog/argo-cd-gitops-security-guide Tue, 05 Mar 2024 00:00:00 GMT DevSecOps hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/software-update-mechanism-security https://safeguard.sh/resources/blog/software-update-mechanism-security Tue, 05 Mar 2024 00:00:00 GMT Supply Chain Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/introducing-safeguard-software-supply-chain-security https://safeguard.sh/resources/blog/introducing-safeguard-software-supply-chain-security Fri, 01 Mar 2024 10:00:00 GMT Company hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/aws-sam-template-security-considerations https://safeguard.sh/resources/blog/aws-sam-template-security-considerations Wed, 28 Feb 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/how-to-set-up-sigstore-in-your-build-pipeline https://safeguard.sh/resources/blog/how-to-set-up-sigstore-in-your-build-pipeline Wed, 28 Feb 2024 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/lazarus-group-software-supply-chain-campaigns https://safeguard.sh/resources/blog/lazarus-group-software-supply-chain-campaigns Wed, 28 Feb 2024 12:00:00 GMT Industry Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/lockbit-takedown-operation-cronos-analysis https://safeguard.sh/resources/blog/lockbit-takedown-operation-cronos-analysis Wed, 28 Feb 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/multi-cloud-security-posture-management https://safeguard.sh/resources/blog/multi-cloud-security-posture-management Wed, 28 Feb 2024 11:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/security-champions-program-building-guide https://safeguard.sh/resources/blog/security-champions-program-building-guide Wed, 28 Feb 2024 09:00:00 GMT How-To Guide hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/software-vendor-security-scorecard https://safeguard.sh/resources/blog/software-vendor-security-scorecard Wed, 28 Feb 2024 09:00:00 GMT Risk Management hi@safeguard.sh (James) https://safeguard.sh/resources/blog/earthly-reproducible-builds-security https://safeguard.sh/resources/blog/earthly-reproducible-builds-security Wed, 28 Feb 2024 00:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/cisa-memory-safe-languages-roadmap https://safeguard.sh/resources/blog/cisa-memory-safe-languages-roadmap Mon, 26 Feb 2024 12:00:00 GMT Compliance & Frameworks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nist-cybersecurity-framework-2-0-guide https://safeguard.sh/resources/blog/nist-cybersecurity-framework-2-0-guide Mon, 26 Feb 2024 10:00:00 GMT Compliance hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/nuget-package-signing-enterprise-rollout https://safeguard.sh/resources/blog/nuget-package-signing-enterprise-rollout Sun, 25 Feb 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/python-poetry-supply-chain-security https://safeguard.sh/resources/blog/python-poetry-supply-chain-security Thu, 22 Feb 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/pdf-supply-chain-attack-vectors https://safeguard.sh/resources/blog/pdf-supply-chain-attack-vectors Thu, 22 Feb 2024 10:00:00 GMT Vulnerability Management hi@safeguard.sh (James) https://safeguard.sh/resources/blog/unitedhealth-change-healthcare-breach https://safeguard.sh/resources/blog/unitedhealth-change-healthcare-breach Wed, 21 Feb 2024 14:00:00 GMT Incident Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/change-healthcare-ransomware-attack https://safeguard.sh/resources/blog/change-healthcare-ransomware-attack Wed, 21 Feb 2024 10:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/lockbit-ransomware-takedown-operation-cronos https://safeguard.sh/resources/blog/lockbit-ransomware-takedown-operation-cronos Tue, 20 Feb 2024 11:00:00 GMT Threat Intelligence hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/dependency-confusion-private-registries https://safeguard.sh/resources/blog/dependency-confusion-private-registries Tue, 20 Feb 2024 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/security-awareness-training-developers https://safeguard.sh/resources/blog/security-awareness-training-developers Tue, 20 Feb 2024 10:00:00 GMT Best Practices hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/sbom-for-microservices-architecture https://safeguard.sh/resources/blog/sbom-for-microservices-architecture Tue, 20 Feb 2024 00:00:00 GMT SBOM hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/shopify-supply-chain-security-program https://safeguard.sh/resources/blog/shopify-supply-chain-security-program Tue, 20 Feb 2024 00:00:00 GMT Case Studies hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/fortinet-fortios-cve-2024-21762-exploitation https://safeguard.sh/resources/blog/fortinet-fortios-cve-2024-21762-exploitation Sun, 18 Feb 2024 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/gvisor-runtime-security-deep-dive https://safeguard.sh/resources/blog/gvisor-runtime-security-deep-dive Sun, 18 Feb 2024 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/nydfs-cybersecurity-regulation-software https://safeguard.sh/resources/blog/nydfs-cybersecurity-regulation-software Sun, 18 Feb 2024 09:00:00 GMT Compliance hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/supply-chain-incident-notification-laws https://safeguard.sh/resources/blog/supply-chain-incident-notification-laws Sun, 18 Feb 2024 09:00:00 GMT Compliance hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/semgrep-codeql-sast-comparison https://safeguard.sh/resources/blog/semgrep-codeql-sast-comparison Sun, 18 Feb 2024 00:00:00 GMT Tool Comparisons hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/xml-external-entity-xxe-prevention https://safeguard.sh/resources/blog/xml-external-entity-xxe-prevention Sun, 18 Feb 2024 00:00:00 GMT Code Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/how-to-enforce-cosign-signatures-in-kubernetes-admission https://safeguard.sh/resources/blog/how-to-enforce-cosign-signatures-in-kubernetes-admission Thu, 15 Feb 2024 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dotnet-nuget-package-security https://safeguard.sh/resources/blog/dotnet-nuget-package-security Thu, 15 Feb 2024 10:00:00 GMT Dependency Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/media-entertainment-software-supply-chain https://safeguard.sh/resources/blog/media-entertainment-software-supply-chain Thu, 15 Feb 2024 10:00:00 GMT Industry Guides hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/why-we-built-safeguard https://safeguard.sh/resources/blog/why-we-built-safeguard Thu, 15 Feb 2024 10:00:00 GMT Company hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/azure-managed-identities-supply-chain https://safeguard.sh/resources/blog/azure-managed-identities-supply-chain Wed, 14 Feb 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/bank-of-america-infosys-mccamish-breach https://safeguard.sh/resources/blog/bank-of-america-infosys-mccamish-breach Mon, 12 Feb 2024 14:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/multi-stage-docker-builds-security https://safeguard.sh/resources/blog/multi-stage-docker-builds-security Mon, 12 Feb 2024 10:00:00 GMT DevSecOps hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/service-worker-security-risks https://safeguard.sh/resources/blog/service-worker-security-risks Mon, 12 Feb 2024 10:00:00 GMT Application Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/compliance-as-code-implementation-guide https://safeguard.sh/resources/blog/compliance-as-code-implementation-guide Mon, 12 Feb 2024 09:00:00 GMT Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/go-mod-tidy-security-implications https://safeguard.sh/resources/blog/go-mod-tidy-security-implications Sat, 10 Feb 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/npm-package-visibility-audit-techniques https://safeguard.sh/resources/blog/npm-package-visibility-audit-techniques Sat, 10 Feb 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sbom-for-ai-ml-models-emerging-standards https://safeguard.sh/resources/blog/sbom-for-ai-ml-models-emerging-standards Sat, 10 Feb 2024 09:00:00 GMT SBOM & Standards hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/remix-framework-security-deep-dive https://safeguard.sh/resources/blog/remix-framework-security-deep-dive Thu, 08 Feb 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/building-vs-buying-security-tools https://safeguard.sh/resources/blog/building-vs-buying-security-tools Thu, 08 Feb 2024 10:00:00 GMT Security Strategy hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/government-contractor-sbom-compliance https://safeguard.sh/resources/blog/government-contractor-sbom-compliance Thu, 08 Feb 2024 08:00:00 GMT Industry Guides hi@safeguard.sh (James) https://safeguard.sh/resources/blog/green-software-security-sustainability https://safeguard.sh/resources/blog/green-software-security-sustainability Thu, 08 Feb 2024 08:00:00 GMT Industry Trends hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/air-gapped-environment-software-updates https://safeguard.sh/resources/blog/air-gapped-environment-software-updates Thu, 08 Feb 2024 00:00:00 GMT Infrastructure Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/annual-vendor-security-review-cadence https://safeguard.sh/resources/blog/annual-vendor-security-review-cadence Tue, 06 Feb 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/privilege-escalation-web-applications https://safeguard.sh/resources/blog/privilege-escalation-web-applications Mon, 05 Feb 2024 10:00:00 GMT Web Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/secure-development-environment-setup https://safeguard.sh/resources/blog/secure-development-environment-setup Mon, 05 Feb 2024 10:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/south-korea-cybersecurity-regulations https://safeguard.sh/resources/blog/south-korea-cybersecurity-regulations Mon, 05 Feb 2024 09:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/anydesk-production-systems-compromised https://safeguard.sh/resources/blog/anydesk-production-systems-compromised Fri, 02 Feb 2024 10:00:00 GMT Incident Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/cloudflare-thanksgiving-2023-breach-okta https://safeguard.sh/resources/blog/cloudflare-thanksgiving-2023-breach-okta Thu, 01 Feb 2024 09:00:00 GMT Incident Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/secure-boot-uefi-software-supply-chain-links https://safeguard.sh/resources/blog/secure-boot-uefi-software-supply-chain-links Tue, 30 Jan 2024 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sbom-for-defense-contractors-cmmc https://safeguard.sh/resources/blog/sbom-for-defense-contractors-cmmc Sun, 28 Jan 2024 10:00:00 GMT Compliance hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/yaml-deserialization-attacks-prevention https://safeguard.sh/resources/blog/yaml-deserialization-attacks-prevention Sun, 28 Jan 2024 10:00:00 GMT Application Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/vite-turbopack-build-security https://safeguard.sh/resources/blog/vite-turbopack-build-security Sun, 28 Jan 2024 09:00:00 GMT AppSec hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-for-fintech-startups https://safeguard.sh/resources/blog/sbom-for-fintech-startups Sun, 28 Jan 2024 00:00:00 GMT SBOM hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/midnight-blizzard-microsoft-email-breach-analysis https://safeguard.sh/resources/blog/midnight-blizzard-microsoft-email-breach-analysis Thu, 25 Jan 2024 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ai-code-generation-security-audit-guide https://safeguard.sh/resources/blog/ai-code-generation-security-audit-guide Thu, 25 Jan 2024 09:00:00 GMT AppSec hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/sbom-api-integration-patterns https://safeguard.sh/resources/blog/sbom-api-integration-patterns Thu, 25 Jan 2024 00:00:00 GMT SBOM hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/trello-15-million-accounts-exposed https://safeguard.sh/resources/blog/trello-15-million-accounts-exposed Mon, 22 Jan 2024 14:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/netflix-open-source-security-approach https://safeguard.sh/resources/blog/netflix-open-source-security-approach Mon, 22 Jan 2024 00:00:00 GMT Case Studies hi@safeguard.sh (James) https://safeguard.sh/resources/blog/npm-audit-vs-pnpm-audit-vs-yarn-audit https://safeguard.sh/resources/blog/npm-audit-vs-pnpm-audit-vs-yarn-audit Sat, 20 Jan 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/manufacturing-ot-software-supply-chain https://safeguard.sh/resources/blog/manufacturing-ot-software-supply-chain Sat, 20 Jan 2024 10:00:00 GMT Industry Guides hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/react-application-security-guide https://safeguard.sh/resources/blog/react-application-security-guide Sat, 20 Jan 2024 10:00:00 GMT Application Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/microsoft-midnight-blizzard-email-breach https://safeguard.sh/resources/blog/microsoft-midnight-blizzard-email-breach Fri, 19 Jan 2024 14:00:00 GMT Incident Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/midnight-blizzard-microsoft-exchange-breach https://safeguard.sh/resources/blog/midnight-blizzard-microsoft-exchange-breach Fri, 19 Jan 2024 10:00:00 GMT Threat Intelligence hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/veracode-sca-platform-overview https://safeguard.sh/resources/blog/veracode-sca-platform-overview Thu, 18 Jan 2024 00:00:00 GMT Tool Reviews hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/how-to-detect-typosquatting-in-package-installs https://safeguard.sh/resources/blog/how-to-detect-typosquatting-in-package-installs Mon, 15 Jan 2024 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/software-component-lifecycle-management https://safeguard.sh/resources/blog/software-component-lifecycle-management Mon, 15 Jan 2024 11:00:00 GMT Lifecycle Management hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/open-source-project-security-audit-guide https://safeguard.sh/resources/blog/open-source-project-security-audit-guide Mon, 15 Jan 2024 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/bun-runtime-security-considerations https://safeguard.sh/resources/blog/bun-runtime-security-considerations Sun, 14 Jan 2024 10:00:00 GMT Secure Development hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/akira-ransomware-supply-chain-entry https://safeguard.sh/resources/blog/akira-ransomware-supply-chain-entry Fri, 12 Jan 2024 10:00:00 GMT Ransomware hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/aws-ecr-image-scanning-deep-dive https://safeguard.sh/resources/blog/aws-ecr-image-scanning-deep-dive Fri, 12 Jan 2024 10:00:00 GMT Cloud Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/express-nodejs-security-hardening https://safeguard.sh/resources/blog/express-nodejs-security-hardening Fri, 12 Jan 2024 10:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/platform-engineering-security-integration https://safeguard.sh/resources/blog/platform-engineering-security-integration Fri, 12 Jan 2024 10:00:00 GMT Industry Trends hi@safeguard.sh (James) https://safeguard.sh/resources/blog/vulnerability-sla-compliance-tracking https://safeguard.sh/resources/blog/vulnerability-sla-compliance-tracking Fri, 12 Jan 2024 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ivanti-connect-secure-cve-2024-21887-zero-day https://safeguard.sh/resources/blog/ivanti-connect-secure-cve-2024-21887-zero-day Wed, 10 Jan 2024 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/ansible-galaxy-security-risks https://safeguard.sh/resources/blog/ansible-galaxy-security-risks Mon, 08 Jan 2024 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/gradle-plugin-security-risks https://safeguard.sh/resources/blog/gradle-plugin-security-risks Mon, 08 Jan 2024 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/npm-registry-governance-and-security https://safeguard.sh/resources/blog/npm-registry-governance-and-security Mon, 08 Jan 2024 00:00:00 GMT Open Source Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/http-request-smuggling-guide https://safeguard.sh/resources/blog/http-request-smuggling-guide Fri, 05 Jan 2024 10:00:00 GMT Web Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/iast-rasp-runtime-protection-comparison https://safeguard.sh/resources/blog/iast-rasp-runtime-protection-comparison Fri, 05 Jan 2024 10:00:00 GMT Application Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/ai-code-review-security-effectiveness https://safeguard.sh/resources/blog/ai-code-review-security-effectiveness Fri, 05 Jan 2024 09:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/security-advisory-writing-guide https://safeguard.sh/resources/blog/security-advisory-writing-guide Thu, 28 Dec 2023 09:00:00 GMT Security Strategy hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/apache-ofbiz-cve-2023-51467-auth-bypass https://safeguard.sh/resources/blog/apache-ofbiz-cve-2023-51467-auth-bypass Tue, 26 Dec 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/npm-team-access-model-hardening https://safeguard.sh/resources/blog/npm-team-access-model-hardening Fri, 22 Dec 2023 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-supply-chain-security-2023-year-review https://safeguard.sh/resources/blog/software-supply-chain-security-2023-year-review Wed, 20 Dec 2023 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/vulnerability-disclosure-policy-template https://safeguard.sh/resources/blog/vulnerability-disclosure-policy-template Wed, 20 Dec 2023 00:00:00 GMT Organizational Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/vans-vf-corporation-ransomware https://safeguard.sh/resources/blog/vans-vf-corporation-ransomware Mon, 18 Dec 2023 14:00:00 GMT Incident Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/xfinity-citrix-bleed-35-million https://safeguard.sh/resources/blog/xfinity-citrix-bleed-35-million Mon, 18 Dec 2023 14:00:00 GMT Incident Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/security-automation-playbook-library https://safeguard.sh/resources/blog/security-automation-playbook-library Mon, 18 Dec 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (James) https://safeguard.sh/resources/blog/red-team-supply-chain-attack-simulation https://safeguard.sh/resources/blog/red-team-supply-chain-attack-simulation Mon, 18 Dec 2023 00:00:00 GMT Offensive Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/sec-cyber-disclosure-rules-impact https://safeguard.sh/resources/blog/sec-cyber-disclosure-rules-impact Fri, 15 Dec 2023 11:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/autonomous-security-remediation-future https://safeguard.sh/resources/blog/autonomous-security-remediation-future Fri, 15 Dec 2023 09:00:00 GMT AI Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/jfrog-artifactory-hardening-guide-2023 https://safeguard.sh/resources/blog/jfrog-artifactory-hardening-guide-2023 Thu, 14 Dec 2023 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/api-gateway-security-patterns https://safeguard.sh/resources/blog/api-gateway-security-patterns Tue, 12 Dec 2023 10:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/puppet-forge-supply-chain-security https://safeguard.sh/resources/blog/puppet-forge-supply-chain-security Tue, 12 Dec 2023 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/container-runtime-comparison-security https://safeguard.sh/resources/blog/container-runtime-comparison-security Tue, 12 Dec 2023 00:00:00 GMT Container Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/education-sector-software-security https://safeguard.sh/resources/blog/education-sector-software-security Sun, 10 Dec 2023 11:00:00 GMT Industry Guides hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/log4j-two-years-later-are-we-safer https://safeguard.sh/resources/blog/log4j-two-years-later-are-we-safer Sun, 10 Dec 2023 10:00:00 GMT Open Source Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/post-install-hooks-across-package-managers https://safeguard.sh/resources/blog/post-install-hooks-across-package-managers Sun, 10 Dec 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/norton-healthcare-ransomware-breach https://safeguard.sh/resources/blog/norton-healthcare-ransomware-breach Fri, 08 Dec 2023 14:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/web-application-firewall-bypass-techniques https://safeguard.sh/resources/blog/web-application-firewall-bypass-techniques Fri, 08 Dec 2023 14:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/firmware-analysis-reverse-engineering-security https://safeguard.sh/resources/blog/firmware-analysis-reverse-engineering-security Fri, 08 Dec 2023 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/multi-cloud-container-security-strategy https://safeguard.sh/resources/blog/multi-cloud-container-security-strategy Fri, 08 Dec 2023 10:00:00 GMT Cloud Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/security-observability-telemetry-guide https://safeguard.sh/resources/blog/security-observability-telemetry-guide Fri, 08 Dec 2023 00:00:00 GMT Security Operations hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/apache-struts-cve-2023-50164-rce https://safeguard.sh/resources/blog/apache-struts-cve-2023-50164-rce Thu, 07 Dec 2023 14:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/openshift-security-context-constraints-guide https://safeguard.sh/resources/blog/openshift-security-context-constraints-guide Wed, 06 Dec 2023 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/how-to-verify-pypi-package-before-install https://safeguard.sh/resources/blog/how-to-verify-pypi-package-before-install Tue, 05 Dec 2023 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/deserialization-attacks-java-python https://safeguard.sh/resources/blog/deserialization-attacks-java-python Tue, 05 Dec 2023 10:00:00 GMT Application Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/purple-team-supply-chain-exercises https://safeguard.sh/resources/blog/purple-team-supply-chain-exercises Tue, 05 Dec 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/managing-security-debt-practical-guide https://safeguard.sh/resources/blog/managing-security-debt-practical-guide Tue, 05 Dec 2023 09:00:00 GMT Best Practices hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/open-source-dependency-health-metrics https://safeguard.sh/resources/blog/open-source-dependency-health-metrics Tue, 05 Dec 2023 00:00:00 GMT Open Source Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/monorepo-security-dependency-management https://safeguard.sh/resources/blog/monorepo-security-dependency-management Sun, 03 Dec 2023 11:00:00 GMT Architecture hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/federal-sbom-mandate-compliance-deadline https://safeguard.sh/resources/blog/federal-sbom-mandate-compliance-deadline Fri, 01 Dec 2023 10:00:00 GMT Compliance & Regulations hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/npm-scripts-sandboxing-techniques https://safeguard.sh/resources/blog/npm-scripts-sandboxing-techniques Thu, 30 Nov 2023 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sox-it-controls-software-supply-chain-intersection https://safeguard.sh/resources/blog/sox-it-controls-software-supply-chain-intersection Sun, 26 Nov 2023 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dollar-tree-third-party-breach https://safeguard.sh/resources/blog/dollar-tree-third-party-breach Wed, 22 Nov 2023 14:00:00 GMT Incident Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/how-to-audit-npm-postinstall-scripts-safely https://safeguard.sh/resources/blog/how-to-audit-npm-postinstall-scripts-safely Wed, 22 Nov 2023 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/chainguard-images-minimal-containers https://safeguard.sh/resources/blog/chainguard-images-minimal-containers Wed, 22 Nov 2023 00:00:00 GMT Container Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/ai-model-supply-chain-hugging-face-risks https://safeguard.sh/resources/blog/ai-model-supply-chain-hugging-face-risks Mon, 20 Nov 2023 10:00:00 GMT AI Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/monolith-to-microservices-security-migration https://safeguard.sh/resources/blog/monolith-to-microservices-security-migration Sat, 18 Nov 2023 10:00:00 GMT Application Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/legacy-software-supply-chain-risks https://safeguard.sh/resources/blog/legacy-software-supply-chain-risks Sat, 18 Nov 2023 00:00:00 GMT Risk Management hi@safeguard.sh (James) https://safeguard.sh/resources/blog/express-js-security-middleware-audit https://safeguard.sh/resources/blog/express-js-security-middleware-audit Wed, 15 Nov 2023 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/healthcare-software-security-hipaa-sbom https://safeguard.sh/resources/blog/healthcare-software-security-hipaa-sbom Wed, 15 Nov 2023 11:00:00 GMT Industry Guides hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/mongodb-atlas-breach-customer-data https://safeguard.sh/resources/blog/mongodb-atlas-breach-customer-data Wed, 15 Nov 2023 10:00:00 GMT Incident Response hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/api-key-rotation-automation-guide https://safeguard.sh/resources/blog/api-key-rotation-automation-guide Wed, 15 Nov 2023 00:00:00 GMT Security Operations hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/sonarqube-security-scanning-review https://safeguard.sh/resources/blog/sonarqube-security-scanning-review Wed, 15 Nov 2023 00:00:00 GMT Tool Reviews hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/apache-web-server-hardening-guide https://safeguard.sh/resources/blog/apache-web-server-hardening-guide Sun, 12 Nov 2023 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/snap-store-flatpak-security-models https://safeguard.sh/resources/blog/snap-store-flatpak-security-models Sun, 12 Nov 2023 10:00:00 GMT Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/travis-ci-security-best-practices https://safeguard.sh/resources/blog/travis-ci-security-best-practices Sun, 12 Nov 2023 00:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/boeing-lockbit-ransomware-data-leak https://safeguard.sh/resources/blog/boeing-lockbit-ransomware-data-leak Fri, 10 Nov 2023 14:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/rust-cargo-dependency-security-guide https://safeguard.sh/resources/blog/rust-cargo-dependency-security-guide Fri, 10 Nov 2023 10:00:00 GMT Dependency Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/singapore-cybersecurity-act-supply-chain https://safeguard.sh/resources/blog/singapore-cybersecurity-act-supply-chain Fri, 10 Nov 2023 09:00:00 GMT Compliance hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/govulncheck-production-integration https://safeguard.sh/resources/blog/govulncheck-production-integration Wed, 08 Nov 2023 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/apache-activemq-cve-2023-46604-rce https://safeguard.sh/resources/blog/apache-activemq-cve-2023-46604-rce Wed, 08 Nov 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/citrix-bleed-cve-2023-4966-exploitation https://safeguard.sh/resources/blog/citrix-bleed-cve-2023-4966-exploitation Wed, 08 Nov 2023 10:00:00 GMT Zero-Day Exploits hi@safeguard.sh (James) https://safeguard.sh/resources/blog/java-module-system-security-features https://safeguard.sh/resources/blog/java-module-system-security-features Wed, 08 Nov 2023 10:00:00 GMT Application Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/large-language-model-supply-chain-risks https://safeguard.sh/resources/blog/large-language-model-supply-chain-risks Wed, 08 Nov 2023 10:00:00 GMT AI Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/oauth-token-security-lifecycle https://safeguard.sh/resources/blog/oauth-token-security-lifecycle Wed, 08 Nov 2023 10:00:00 GMT Application Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/ci-cd-credential-theft-prevention https://safeguard.sh/resources/blog/ci-cd-credential-theft-prevention Wed, 08 Nov 2023 00:00:00 GMT DevSecOps hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/deno-runtime-security-model-analysis https://safeguard.sh/resources/blog/deno-runtime-security-model-analysis Wed, 08 Nov 2023 00:00:00 GMT Developer Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/executive-order-14028-year-two-checkpoint https://safeguard.sh/resources/blog/executive-order-14028-year-two-checkpoint Sun, 05 Nov 2023 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-bill-of-materials-automotive-industry https://safeguard.sh/resources/blog/software-bill-of-materials-automotive-industry Sun, 05 Nov 2023 12:00:00 GMT Industry Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/cmmc-2-0-software-supply-chain-guide https://safeguard.sh/resources/blog/cmmc-2-0-software-supply-chain-guide Sun, 05 Nov 2023 10:00:00 GMT Compliance hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/container-escape-techniques-2023-update https://safeguard.sh/resources/blog/container-escape-techniques-2023-update Sun, 05 Nov 2023 10:00:00 GMT Container Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/deno-security-model-advantages https://safeguard.sh/resources/blog/deno-security-model-advantages Sun, 05 Nov 2023 10:00:00 GMT Secure Development hi@safeguard.sh (James) https://safeguard.sh/resources/blog/dependency-hijacking-prevention-guide https://safeguard.sh/resources/blog/dependency-hijacking-prevention-guide Sun, 05 Nov 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/pulumi-crossplane-iac-security https://safeguard.sh/resources/blog/pulumi-crossplane-iac-security Sun, 05 Nov 2023 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/react-native-security-considerations https://safeguard.sh/resources/blog/react-native-security-considerations Sun, 05 Nov 2023 10:00:00 GMT Application Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/rubygems-yanked-gems-security https://safeguard.sh/resources/blog/rubygems-yanked-gems-security Sun, 05 Nov 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/api-security-testing-owasp-guide https://safeguard.sh/resources/blog/api-security-testing-owasp-guide Sun, 05 Nov 2023 00:00:00 GMT Application Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/cloudflare-supply-chain-security-model https://safeguard.sh/resources/blog/cloudflare-supply-chain-security-model Sun, 05 Nov 2023 00:00:00 GMT Case Studies hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/wiz-cloud-security-platform-overview https://safeguard.sh/resources/blog/wiz-cloud-security-platform-overview Sun, 05 Nov 2023 00:00:00 GMT Tool Reviews hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/mr-cooper-mortgage-data-breach https://safeguard.sh/resources/blog/mr-cooper-mortgage-data-breach Wed, 01 Nov 2023 14:00:00 GMT Incident Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/cisa-secure-by-default-guidance https://safeguard.sh/resources/blog/cisa-secure-by-default-guidance Wed, 01 Nov 2023 10:00:00 GMT Compliance & Regulations hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/pypi-2fa-enrollment-enterprise-rollout https://safeguard.sh/resources/blog/pypi-2fa-enrollment-enterprise-rollout Sat, 28 Oct 2023 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/supply-chain-risk-register-template https://safeguard.sh/resources/blog/supply-chain-risk-register-template Sat, 28 Oct 2023 09:00:00 GMT Risk Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dagger-ci-cd-security-benefits https://safeguard.sh/resources/blog/dagger-ci-cd-security-benefits Sat, 28 Oct 2023 00:00:00 GMT DevSecOps hi@safeguard.sh (James) https://safeguard.sh/resources/blog/f5-big-ip-cve-2023-46747-authentication-bypass https://safeguard.sh/resources/blog/f5-big-ip-cve-2023-46747-authentication-bypass Fri, 27 Oct 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/browser-sandbox-escape-history https://safeguard.sh/resources/blog/browser-sandbox-escape-history Wed, 25 Oct 2023 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/devsecops-culture-building-security-teams https://safeguard.sh/resources/blog/devsecops-culture-building-security-teams Wed, 25 Oct 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (James) https://safeguard.sh/resources/blog/confidential-computing-supply-chain https://safeguard.sh/resources/blog/confidential-computing-supply-chain Sun, 22 Oct 2023 11:00:00 GMT Emerging Technology hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/southeast-asia-supply-chain-security https://safeguard.sh/resources/blog/southeast-asia-supply-chain-security Sun, 22 Oct 2023 00:00:00 GMT Regional Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/trivy-vs-grype-container-scanning-2023 https://safeguard.sh/resources/blog/trivy-vs-grype-container-scanning-2023 Fri, 20 Oct 2023 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/okta-support-system-breach-october-2023 https://safeguard.sh/resources/blog/okta-support-system-breach-october-2023 Fri, 20 Oct 2023 10:00:00 GMT Incident Response hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/ciso-quarterly-reporting-template https://safeguard.sh/resources/blog/ciso-quarterly-reporting-template Fri, 20 Oct 2023 09:00:00 GMT Security Strategy hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/rsa-conference-2023-supply-chain-track-notes https://safeguard.sh/resources/blog/rsa-conference-2023-supply-chain-track-notes Wed, 18 Oct 2023 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sbom-for-embedded-systems https://safeguard.sh/resources/blog/sbom-for-embedded-systems Wed, 18 Oct 2023 00:00:00 GMT SBOM hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/uber-security-transformation-post-breach https://safeguard.sh/resources/blog/uber-security-transformation-post-breach Wed, 18 Oct 2023 00:00:00 GMT Case Studies hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/cisco-ios-xe-cve-2023-20198-implant https://safeguard.sh/resources/blog/cisco-ios-xe-cve-2023-20198-implant Mon, 16 Oct 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cisco-ios-xe-webui-cve-2023-20198-implant https://safeguard.sh/resources/blog/cisco-ios-xe-webui-cve-2023-20198-implant Mon, 16 Oct 2023 10:00:00 GMT Zero-Day Exploits hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/typescript-security-best-practices https://safeguard.sh/resources/blog/typescript-security-best-practices Sun, 15 Oct 2023 10:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/how-to-enable-github-dependency-review-on-prs https://safeguard.sh/resources/blog/how-to-enable-github-dependency-review-on-prs Thu, 12 Oct 2023 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/progressive-web-app-security-guide https://safeguard.sh/resources/blog/progressive-web-app-security-guide Thu, 12 Oct 2023 10:00:00 GMT Application Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/scratch-vs-distroless-minimal-images https://safeguard.sh/resources/blog/scratch-vs-distroless-minimal-images Thu, 12 Oct 2023 10:00:00 GMT Container Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/incident-response-tabletop-exercises-guide https://safeguard.sh/resources/blog/incident-response-tabletop-exercises-guide Thu, 12 Oct 2023 00:00:00 GMT Incident Response hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/insecure-deserialization-prevention https://safeguard.sh/resources/blog/insecure-deserialization-prevention Thu, 12 Oct 2023 00:00:00 GMT Code Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/curl-cve-2023-38545-heap-buffer-overflow https://safeguard.sh/resources/blog/curl-cve-2023-38545-heap-buffer-overflow Wed, 11 Oct 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/http2-rapid-reset-cve-2023-44487-ddos https://safeguard.sh/resources/blog/http2-rapid-reset-cve-2023-44487-ddos Tue, 10 Oct 2023 10:00:00 GMT Application Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cloud-native-application-protection-guide https://safeguard.sh/resources/blog/cloud-native-application-protection-guide Sun, 08 Oct 2023 10:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/open-source-vs-commercial-sca https://safeguard.sh/resources/blog/open-source-vs-commercial-sca Sun, 08 Oct 2023 10:00:00 GMT Security Strategy hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/scattered-spider-social-engineering-attacks https://safeguard.sh/resources/blog/scattered-spider-social-engineering-attacks Sun, 08 Oct 2023 10:00:00 GMT Threat Actors hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/package-registry-mirroring-security https://safeguard.sh/resources/blog/package-registry-mirroring-security Sun, 08 Oct 2023 00:00:00 GMT Supply Chain Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/python-setuptools-security-considerations https://safeguard.sh/resources/blog/python-setuptools-security-considerations Thu, 05 Oct 2023 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/authorization-vulnerabilities-prevention https://safeguard.sh/resources/blog/authorization-vulnerabilities-prevention Thu, 05 Oct 2023 10:00:00 GMT Web Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/openssf-scorecard-v5-release https://safeguard.sh/resources/blog/openssf-scorecard-v5-release Thu, 05 Oct 2023 10:00:00 GMT Open Source Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/zero-trust-developer-workstations https://safeguard.sh/resources/blog/zero-trust-developer-workstations Thu, 05 Oct 2023 10:00:00 GMT Network Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/observability-security-convergence https://safeguard.sh/resources/blog/observability-security-convergence Thu, 05 Oct 2023 09:00:00 GMT Industry Trends hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/jetbrains-teamcity-cve-2023-42793-exploitation https://safeguard.sh/resources/blog/jetbrains-teamcity-cve-2023-42793-exploitation Tue, 03 Oct 2023 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/owasp-top-10-for-llm-applications-first-look https://safeguard.sh/resources/blog/owasp-top-10-for-llm-applications-first-look Thu, 28 Sep 2023 12:00:00 GMT AI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/json-parsing-library-vulnerabilities https://safeguard.sh/resources/blog/json-parsing-library-vulnerabilities Thu, 28 Sep 2023 10:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/webpack-rollup-esbuild-security https://safeguard.sh/resources/blog/webpack-rollup-esbuild-security Thu, 28 Sep 2023 09:00:00 GMT AppSec hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/checkmarx-sca-platform-review https://safeguard.sh/resources/blog/checkmarx-sca-platform-review Thu, 28 Sep 2023 00:00:00 GMT Tool Reviews hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/progress-ws-ftp-cve-2023-40044-critical https://safeguard.sh/resources/blog/progress-ws-ftp-cve-2023-40044-critical Wed, 27 Sep 2023 14:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/vulnerability-triage-workflow-design https://safeguard.sh/resources/blog/vulnerability-triage-workflow-design Mon, 25 Sep 2023 12:00:00 GMT Best Practices hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/securing-llm-applications-owasp-top-10 https://safeguard.sh/resources/blog/securing-llm-applications-owasp-top-10 Mon, 25 Sep 2023 10:00:00 GMT AI Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/sbom-storage-distribution-infrastructure https://safeguard.sh/resources/blog/sbom-storage-distribution-infrastructure Mon, 25 Sep 2023 00:00:00 GMT SBOM hi@safeguard.sh (James) https://safeguard.sh/resources/blog/ai-hallucination-package-confusion-attacks https://safeguard.sh/resources/blog/ai-hallucination-package-confusion-attacks Wed, 20 Sep 2023 10:00:00 GMT AI Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/spring-boot-security-dependency-management https://safeguard.sh/resources/blog/spring-boot-security-dependency-management Wed, 20 Sep 2023 10:00:00 GMT Application Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-for-gaming-industry https://safeguard.sh/resources/blog/sbom-for-gaming-industry Wed, 20 Sep 2023 00:00:00 GMT SBOM hi@safeguard.sh (James) https://safeguard.sh/resources/blog/sbom-tooling-landscape-2023 https://safeguard.sh/resources/blog/sbom-tooling-landscape-2023 Fri, 15 Sep 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/microsoft-secure-supply-chain-practices https://safeguard.sh/resources/blog/microsoft-secure-supply-chain-practices Fri, 15 Sep 2023 00:00:00 GMT Case Studies hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/python-packaging-authority-security https://safeguard.sh/resources/blog/python-packaging-authority-security Fri, 15 Sep 2023 00:00:00 GMT Open Source Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/mgm-resorts-caesars-scattered-spider-2023 https://safeguard.sh/resources/blog/mgm-resorts-caesars-scattered-spider-2023 Thu, 14 Sep 2023 14:00:00 GMT Incident Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/dependabot-security-updates-behavior-2023 https://safeguard.sh/resources/blog/dependabot-security-updates-behavior-2023 Tue, 12 Sep 2023 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/electron-app-supply-chain-security-posture https://safeguard.sh/resources/blog/electron-app-supply-chain-security-posture Tue, 12 Sep 2023 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/api-security-supply-chain-considerations https://safeguard.sh/resources/blog/api-security-supply-chain-considerations Tue, 12 Sep 2023 10:00:00 GMT Application Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/canada-cyber-security-strategy-sbom https://safeguard.sh/resources/blog/canada-cyber-security-strategy-sbom Tue, 12 Sep 2023 10:00:00 GMT Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/dart-flutter-dependency-security https://safeguard.sh/resources/blog/dart-flutter-dependency-security Tue, 12 Sep 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/github-packages-security-features https://safeguard.sh/resources/blog/github-packages-security-features Tue, 12 Sep 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (James) https://safeguard.sh/resources/blog/supply-chain-security-metrics-dashboard https://safeguard.sh/resources/blog/supply-chain-security-metrics-dashboard Tue, 12 Sep 2023 10:00:00 GMT Security Operations hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/grpc-security-considerations-guide https://safeguard.sh/resources/blog/grpc-security-considerations-guide Tue, 12 Sep 2023 00:00:00 GMT API Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/software-provenance-attestation-slsa-v1 https://safeguard.sh/resources/blog/software-provenance-attestation-slsa-v1 Sun, 10 Sep 2023 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/edge-computing-software-supply-chain https://safeguard.sh/resources/blog/edge-computing-software-supply-chain Fri, 08 Sep 2023 14:00:00 GMT Emerging Technology hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/build-system-poisoning-techniques https://safeguard.sh/resources/blog/build-system-poisoning-techniques Fri, 08 Sep 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cloud-marketplace-security-aws-azure https://safeguard.sh/resources/blog/cloud-marketplace-security-aws-azure Fri, 08 Sep 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/cache-poisoning-attacks-prevention https://safeguard.sh/resources/blog/cache-poisoning-attacks-prevention Tue, 05 Sep 2023 10:00:00 GMT Web Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dast-tool-comparison-enterprise-2023 https://safeguard.sh/resources/blog/dast-tool-comparison-enterprise-2023 Tue, 05 Sep 2023 10:00:00 GMT Application Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/pypi-malware-campaign-targeting-developers https://safeguard.sh/resources/blog/pypi-malware-campaign-targeting-developers Tue, 05 Sep 2023 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/pipenv-security-posture-review-2023 https://safeguard.sh/resources/blog/pipenv-security-posture-review-2023 Wed, 30 Aug 2023 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ransomware-payment-ban-debate-analysis https://safeguard.sh/resources/blog/ransomware-payment-ban-debate-analysis Mon, 28 Aug 2023 10:00:00 GMT Ransomware hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/secure-package-publishing-checklist https://safeguard.sh/resources/blog/secure-package-publishing-checklist Mon, 28 Aug 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/changelog-security-disclosure-practices https://safeguard.sh/resources/blog/changelog-security-disclosure-practices Mon, 28 Aug 2023 09:00:00 GMT Security Strategy hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/bitbucket-pipelines-security-guide https://safeguard.sh/resources/blog/bitbucket-pipelines-security-guide Fri, 25 Aug 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/runtime-sbom-vs-build-time-sbom https://safeguard.sh/resources/blog/runtime-sbom-vs-build-time-sbom Fri, 25 Aug 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/security-incident-communication-guide https://safeguard.sh/resources/blog/security-incident-communication-guide Fri, 25 Aug 2023 00:00:00 GMT Organizational Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/socket-dev-supply-chain-detection https://safeguard.sh/resources/blog/socket-dev-supply-chain-detection Tue, 22 Aug 2023 00:00:00 GMT Tool Reviews hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/winrar-cve-2023-38831-zero-day-exploitation https://safeguard.sh/resources/blog/winrar-cve-2023-38831-zero-day-exploitation Sun, 20 Aug 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/japan-cybersecurity-software-supply-chain https://safeguard.sh/resources/blog/japan-cybersecurity-software-supply-chain Sun, 20 Aug 2023 08:00:00 GMT Compliance hi@safeguard.sh (James) https://safeguard.sh/resources/blog/pip-install-hooks-security https://safeguard.sh/resources/blog/pip-install-hooks-security Fri, 18 Aug 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/devsecops-toolchain-integration-patterns https://safeguard.sh/resources/blog/devsecops-toolchain-integration-patterns Fri, 18 Aug 2023 00:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/kubernetes-network-policies-deep-dive https://safeguard.sh/resources/blog/kubernetes-network-policies-deep-dive Fri, 18 Aug 2023 00:00:00 GMT Kubernetes Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/threat-hunting-software-supply-chain https://safeguard.sh/resources/blog/threat-hunting-software-supply-chain Fri, 18 Aug 2023 00:00:00 GMT Threat Intelligence hi@safeguard.sh (James) https://safeguard.sh/resources/blog/security-champions-program-supply-chain-focus https://safeguard.sh/resources/blog/security-champions-program-supply-chain-focus Wed, 16 Aug 2023 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vulnerability-remediation-sla-best-practices https://safeguard.sh/resources/blog/vulnerability-remediation-sla-best-practices Tue, 15 Aug 2023 11:00:00 GMT Vulnerability Management hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/github-dependabot-supply-chain-security https://safeguard.sh/resources/blog/github-dependabot-supply-chain-security Tue, 15 Aug 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (James) https://safeguard.sh/resources/blog/africa-digital-transformation-security-challenges https://safeguard.sh/resources/blog/africa-digital-transformation-security-challenges Tue, 15 Aug 2023 00:00:00 GMT Regional Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/google-cloud-build-supply-chain-security https://safeguard.sh/resources/blog/google-cloud-build-supply-chain-security Sat, 12 Aug 2023 10:00:00 GMT Cloud Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/kubernetes-ingress-security-configuration https://safeguard.sh/resources/blog/kubernetes-ingress-security-configuration Sat, 12 Aug 2023 10:00:00 GMT Kubernetes Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/terraform-provider-verification-guide https://safeguard.sh/resources/blog/terraform-provider-verification-guide Sat, 12 Aug 2023 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/kubernetes-1-27-security-highlights https://safeguard.sh/resources/blog/kubernetes-1-27-security-highlights Fri, 11 Aug 2023 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/npm-lockfile-v3-security-improvements https://safeguard.sh/resources/blog/npm-lockfile-v3-security-improvements Thu, 10 Aug 2023 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/llm-prompt-injection-supply-chain-risk https://safeguard.sh/resources/blog/llm-prompt-injection-supply-chain-risk Thu, 10 Aug 2023 10:00:00 GMT AI Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/internal-package-naming-best-practices https://safeguard.sh/resources/blog/internal-package-naming-best-practices Tue, 08 Aug 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/ivanti-epmm-cve-2023-35078-zero-day https://safeguard.sh/resources/blog/ivanti-epmm-cve-2023-35078-zero-day Tue, 08 Aug 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/abandoned-open-source-project-risks https://safeguard.sh/resources/blog/abandoned-open-source-project-risks Tue, 08 Aug 2023 00:00:00 GMT Open Source Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/how-to-generate-sboms-from-maven-projects-cli https://safeguard.sh/resources/blog/how-to-generate-sboms-from-maven-projects-cli Sat, 05 Aug 2023 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/game-day-exercises-supply-chain https://safeguard.sh/resources/blog/game-day-exercises-supply-chain Sat, 05 Aug 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/template-injection-ssti-prevention https://safeguard.sh/resources/blog/template-injection-ssti-prevention Sat, 05 Aug 2023 10:00:00 GMT Application Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/osv-schema-vulnerability-database-format https://safeguard.sh/resources/blog/osv-schema-vulnerability-database-format Sat, 05 Aug 2023 09:00:00 GMT Vulnerability Management hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/pharmaceutical-software-validation-supply-chain https://safeguard.sh/resources/blog/pharmaceutical-software-validation-supply-chain Sat, 05 Aug 2023 09:00:00 GMT Industry Guides hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/npm-unpublish-policy-changes-2023 https://safeguard.sh/resources/blog/npm-unpublish-policy-changes-2023 Tue, 01 Aug 2023 10:00:00 GMT Open Source Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/kotlin-detekt-security-rules https://safeguard.sh/resources/blog/kotlin-detekt-security-rules Fri, 28 Jul 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/oss-vulnerability-rewards-programs https://safeguard.sh/resources/blog/oss-vulnerability-rewards-programs Fri, 28 Jul 2023 10:00:00 GMT Open Source Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/distroless-container-images-security https://safeguard.sh/resources/blog/distroless-container-images-security Fri, 28 Jul 2023 00:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/zenbleed-amd-cpu-vulnerability-cve-2023-20593 https://safeguard.sh/resources/blog/zenbleed-amd-cpu-vulnerability-cve-2023-20593 Mon, 24 Jul 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/golang-module-security-verification https://safeguard.sh/resources/blog/golang-module-security-verification Sat, 22 Jul 2023 10:00:00 GMT Dependency Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/polyglot-repository-security-challenges https://safeguard.sh/resources/blog/polyglot-repository-security-challenges Sat, 22 Jul 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/python-wheel-security-verification https://safeguard.sh/resources/blog/python-wheel-security-verification Sat, 22 Jul 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/automated-security-testing-in-ci-cd https://safeguard.sh/resources/blog/automated-security-testing-in-ci-cd Sat, 22 Jul 2023 08:00:00 GMT How-To Guide hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/interactive-application-security-testing https://safeguard.sh/resources/blog/interactive-application-security-testing Sat, 22 Jul 2023 00:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/reproducible-builds-go-ecosystem-2023 https://safeguard.sh/resources/blog/reproducible-builds-go-ecosystem-2023 Thu, 20 Jul 2023 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/aqua-security-platform-review-2023 https://safeguard.sh/resources/blog/aqua-security-platform-review-2023 Thu, 20 Jul 2023 00:00:00 GMT Tool Reviews hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/ci-cd-secret-sprawl-management https://safeguard.sh/resources/blog/ci-cd-secret-sprawl-management Thu, 20 Jul 2023 00:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/how-to-structure-an-sbom-review-process https://safeguard.sh/resources/blog/how-to-structure-an-sbom-review-process Tue, 18 Jul 2023 12:00:00 GMT SBOM & Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/wasm-webassembly-security-considerations https://safeguard.sh/resources/blog/wasm-webassembly-security-considerations Tue, 18 Jul 2023 12:00:00 GMT Emerging Technology hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/citrix-netscaler-cve-2023-3519-zero-day https://safeguard.sh/resources/blog/citrix-netscaler-cve-2023-3519-zero-day Tue, 18 Jul 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/supply-chain-risk-scoring-algorithms https://safeguard.sh/resources/blog/supply-chain-risk-scoring-algorithms Tue, 18 Jul 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/aerospace-defense-software-supply-chain https://safeguard.sh/resources/blog/aerospace-defense-software-supply-chain Tue, 18 Jul 2023 09:00:00 GMT Industry Guides hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/security-debt-tracking-remediation https://safeguard.sh/resources/blog/security-debt-tracking-remediation Tue, 18 Jul 2023 00:00:00 GMT Risk Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/svelte-sveltekit-security-best-practices https://safeguard.sh/resources/blog/svelte-sveltekit-security-best-practices Tue, 18 Jul 2023 00:00:00 GMT Developer Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/itar-ear-export-control-software https://safeguard.sh/resources/blog/itar-ear-export-control-software Sat, 15 Jul 2023 09:00:00 GMT Compliance hi@safeguard.sh (James) https://safeguard.sh/resources/blog/vulnerability-bounty-economics-analysis https://safeguard.sh/resources/blog/vulnerability-bounty-economics-analysis Sat, 15 Jul 2023 00:00:00 GMT Industry Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/zimbra-collaboration-cve-2023-37580-xss https://safeguard.sh/resources/blog/zimbra-collaboration-cve-2023-37580-xss Thu, 13 Jul 2023 11:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/jumpcloud-supply-chain-attack-north-korea https://safeguard.sh/resources/blog/jumpcloud-supply-chain-attack-north-korea Wed, 12 Jul 2023 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/load-balancer-security-considerations https://safeguard.sh/resources/blog/load-balancer-security-considerations Wed, 12 Jul 2023 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/rate-limiting-package-registries https://safeguard.sh/resources/blog/rate-limiting-package-registries Wed, 12 Jul 2023 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/vulnerability-chaining-real-world-examples https://safeguard.sh/resources/blog/vulnerability-chaining-real-world-examples Wed, 12 Jul 2023 08:00:00 GMT Vulnerability Management hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/stripe-dependency-security-practices https://safeguard.sh/resources/blog/stripe-dependency-security-practices Wed, 12 Jul 2023 00:00:00 GMT Case Studies hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/digital-twin-security-supply-chain https://safeguard.sh/resources/blog/digital-twin-security-supply-chain Mon, 10 Jul 2023 11:00:00 GMT Emerging Technology hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cloud-native-sbom-generation-strategies https://safeguard.sh/resources/blog/cloud-native-sbom-generation-strategies Mon, 10 Jul 2023 10:00:00 GMT Software Supply Chain hi@safeguard.sh (James) https://safeguard.sh/resources/blog/nonprofit-organization-cybersecurity-guide https://safeguard.sh/resources/blog/nonprofit-organization-cybersecurity-guide Sat, 08 Jul 2023 11:00:00 GMT Industry Guides hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ssh-key-management-organizations https://safeguard.sh/resources/blog/ssh-key-management-organizations Sat, 08 Jul 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/circleci-security-configuration-guide https://safeguard.sh/resources/blog/circleci-security-configuration-guide Sat, 08 Jul 2023 00:00:00 GMT DevSecOps hi@safeguard.sh (James) https://safeguard.sh/resources/blog/github-advanced-security-review https://safeguard.sh/resources/blog/github-advanced-security-review Sat, 08 Jul 2023 00:00:00 GMT Tool Reviews hi@safeguard.sh (James) https://safeguard.sh/resources/blog/clop-ransomware-moveit-campaign-analysis https://safeguard.sh/resources/blog/clop-ransomware-moveit-campaign-analysis Wed, 05 Jul 2023 10:00:00 GMT Ransomware hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/electron-contextbridge-security https://safeguard.sh/resources/blog/electron-contextbridge-security Wed, 05 Jul 2023 10:00:00 GMT Application Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nuget-package-tampering-detection https://safeguard.sh/resources/blog/nuget-package-tampering-detection Wed, 05 Jul 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/starjacking-attacks-package-registries https://safeguard.sh/resources/blog/starjacking-attacks-package-registries Wed, 05 Jul 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/domain-squatting-package-registries https://safeguard.sh/resources/blog/domain-squatting-package-registries Wed, 05 Jul 2023 00:00:00 GMT Supply Chain Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/kotlin-gradle-dependency-verification https://safeguard.sh/resources/blog/kotlin-gradle-dependency-verification Fri, 30 Jun 2023 10:00:00 GMT Dependency Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/automated-sbom-drift-detection https://safeguard.sh/resources/blog/automated-sbom-drift-detection Wed, 28 Jun 2023 09:00:00 GMT SBOM hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/harness-ci-cd-security-features https://safeguard.sh/resources/blog/harness-ci-cd-security-features Wed, 28 Jun 2023 00:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/moveit-vulnerability-mass-exploitation-analysis https://safeguard.sh/resources/blog/moveit-vulnerability-mass-exploitation-analysis Sun, 25 Jun 2023 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/runtime-application-self-protection-rasp-guide https://safeguard.sh/resources/blog/runtime-application-self-protection-rasp-guide Sun, 25 Jun 2023 10:00:00 GMT Application Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/microsegmentation-supply-chain-security https://safeguard.sh/resources/blog/microsegmentation-supply-chain-security Sun, 25 Jun 2023 00:00:00 GMT Security Architecture hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/automotive-cybersecurity-unece-wp29 https://safeguard.sh/resources/blog/automotive-cybersecurity-unece-wp29 Thu, 22 Jun 2023 10:00:00 GMT Industry Guides hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/microsoft-teams-vulnerability-giftofspeed https://safeguard.sh/resources/blog/microsoft-teams-vulnerability-giftofspeed Thu, 22 Jun 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/spotbugs-security-detectors-java https://safeguard.sh/resources/blog/spotbugs-security-detectors-java Thu, 22 Jun 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/cyclonedx-v1-5-new-features-guide https://safeguard.sh/resources/blog/cyclonedx-v1-5-new-features-guide Tue, 20 Jun 2023 14:00:00 GMT SBOM Standards hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/quantum-computing-cryptography-supply-chain https://safeguard.sh/resources/blog/quantum-computing-cryptography-supply-chain Tue, 20 Jun 2023 11:00:00 GMT Emerging Technology hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/progress-moveit-second-vulnerability-discovered https://safeguard.sh/resources/blog/progress-moveit-second-vulnerability-discovered Tue, 20 Jun 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/flask-application-security-deep-dive-2023 https://safeguard.sh/resources/blog/flask-application-security-deep-dive-2023 Sun, 18 Jun 2023 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/server-side-request-forgery-ssrf-guide https://safeguard.sh/resources/blog/server-side-request-forgery-ssrf-guide Sun, 18 Jun 2023 00:00:00 GMT Code Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/barracuda-esg-zero-day-cve-2023-2868 https://safeguard.sh/resources/blog/barracuda-esg-zero-day-cve-2023-2868 Thu, 15 Jun 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/security-maturity-benchmarking-peers https://safeguard.sh/resources/blog/security-maturity-benchmarking-peers Thu, 15 Jun 2023 09:00:00 GMT Security Strategy hi@safeguard.sh (James) https://safeguard.sh/resources/blog/dns-security-software-distribution https://safeguard.sh/resources/blog/dns-security-software-distribution Thu, 15 Jun 2023 00:00:00 GMT Infrastructure Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/sbom-for-mobile-applications-ios-android https://safeguard.sh/resources/blog/sbom-for-mobile-applications-ios-android Thu, 15 Jun 2023 00:00:00 GMT SBOM hi@safeguard.sh (James) https://safeguard.sh/resources/blog/snyk-vs-dependabot-head-to-head-2023 https://safeguard.sh/resources/blog/snyk-vs-dependabot-head-to-head-2023 Wed, 14 Jun 2023 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/container-base-image-selection-guide https://safeguard.sh/resources/blog/container-base-image-selection-guide Mon, 12 Jun 2023 10:00:00 GMT Container Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/fortinet-fortigate-cve-2023-27997-heap-overflow https://safeguard.sh/resources/blog/fortinet-fortigate-cve-2023-27997-heap-overflow Mon, 12 Jun 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/jetbrains-plugin-security-verification https://safeguard.sh/resources/blog/jetbrains-plugin-security-verification Mon, 12 Jun 2023 10:00:00 GMT Developer Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/jfrog-xray-vulnerability-scanning https://safeguard.sh/resources/blog/jfrog-xray-vulnerability-scanning Mon, 12 Jun 2023 00:00:00 GMT Tool Reviews hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/moveit-breach-impact-assessment-cl0p https://safeguard.sh/resources/blog/moveit-breach-impact-assessment-cl0p Sat, 10 Jun 2023 10:00:00 GMT Incident Response hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/swift-cscf-software-security-requirements https://safeguard.sh/resources/blog/swift-cscf-software-security-requirements Sat, 10 Jun 2023 10:00:00 GMT Compliance hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/spotify-dependency-management-at-scale https://safeguard.sh/resources/blog/spotify-dependency-management-at-scale Sat, 10 Jun 2023 00:00:00 GMT Case Studies hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/vendor-lock-in-security-tooling https://safeguard.sh/resources/blog/vendor-lock-in-security-tooling Thu, 08 Jun 2023 10:00:00 GMT Security Strategy hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/anchore-syft-sbom-generation-review https://safeguard.sh/resources/blog/anchore-syft-sbom-generation-review Thu, 08 Jun 2023 00:00:00 GMT Tool Reviews hi@safeguard.sh (James) https://safeguard.sh/resources/blog/cissp-ceh-oscp-supply-chain-certifications https://safeguard.sh/resources/blog/cissp-ceh-oscp-supply-chain-certifications Thu, 08 Jun 2023 00:00:00 GMT Career Development hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/authentication-bypass-common-patterns https://safeguard.sh/resources/blog/authentication-bypass-common-patterns Mon, 05 Jun 2023 10:00:00 GMT Web Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/eu-cyber-resilience-act-impact-on-developers https://safeguard.sh/resources/blog/eu-cyber-resilience-act-impact-on-developers Mon, 05 Jun 2023 10:00:00 GMT Compliance & Regulations hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/wireguard-development-infrastructure https://safeguard.sh/resources/blog/wireguard-development-infrastructure Mon, 05 Jun 2023 10:00:00 GMT Network Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/chatgpt-plugins-supply-chain-risks https://safeguard.sh/resources/blog/chatgpt-plugins-supply-chain-risks Mon, 05 Jun 2023 09:00:00 GMT AI Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/npm-install-script-security https://safeguard.sh/resources/blog/npm-install-script-security Fri, 02 Jun 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/moveit-transfer-cve-2023-34362-analysis https://safeguard.sh/resources/blog/moveit-transfer-cve-2023-34362-analysis Thu, 01 Jun 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/private-package-registry-security https://safeguard.sh/resources/blog/private-package-registry-security Tue, 30 May 2023 11:00:00 GMT How-To Guide hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/security-implications-package-bundlers https://safeguard.sh/resources/blog/security-implications-package-bundlers Sun, 28 May 2023 09:00:00 GMT AppSec hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/legal-tech-software-security-compliance https://safeguard.sh/resources/blog/legal-tech-software-security-compliance Thu, 25 May 2023 10:00:00 GMT Industry Guides hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/tls-library-comparison-openssl-boringssl https://safeguard.sh/resources/blog/tls-library-comparison-openssl-boringssl Thu, 25 May 2023 10:00:00 GMT Application Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/hipaa-software-supply-chain-compliance https://safeguard.sh/resources/blog/hipaa-software-supply-chain-compliance Thu, 25 May 2023 08:00:00 GMT Compliance hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/security-awareness-training-developer-focused-supply-chain https://safeguard.sh/resources/blog/security-awareness-training-developer-focused-supply-chain Mon, 22 May 2023 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sbom-validation-quality-checks https://safeguard.sh/resources/blog/sbom-validation-quality-checks Mon, 22 May 2023 00:00:00 GMT SBOM hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/gcp-binary-authorization-guide https://safeguard.sh/resources/blog/gcp-binary-authorization-guide Sat, 20 May 2023 10:00:00 GMT Cloud Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/open-source-malware-detection-techniques https://safeguard.sh/resources/blog/open-source-malware-detection-techniques Sat, 20 May 2023 10:00:00 GMT Open Source Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/swift-security-analysis-tools https://safeguard.sh/resources/blog/swift-security-analysis-tools Sat, 20 May 2023 10:00:00 GMT Secure Development hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/apache-foundation-security-practices https://safeguard.sh/resources/blog/apache-foundation-security-practices Sat, 20 May 2023 00:00:00 GMT Open Source Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/serverless-security-supply-chain-risks https://safeguard.sh/resources/blog/serverless-security-supply-chain-risks Thu, 18 May 2023 09:00:00 GMT Cloud Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/nist-ssdf-v1-1-practical-adoption https://safeguard.sh/resources/blog/nist-ssdf-v1-1-practical-adoption Mon, 15 May 2023 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/django-security-supply-chain-guide https://safeguard.sh/resources/blog/django-security-supply-chain-guide Mon, 15 May 2023 10:00:00 GMT Application Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/double-extortion-ransomware-evolution https://safeguard.sh/resources/blog/double-extortion-ransomware-evolution Mon, 15 May 2023 10:00:00 GMT Ransomware hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/google-assured-open-source-software-service https://safeguard.sh/resources/blog/google-assured-open-source-software-service Mon, 15 May 2023 10:00:00 GMT Tools & Platforms hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/low-code-no-code-platform-security-risks https://safeguard.sh/resources/blog/low-code-no-code-platform-security-risks Mon, 15 May 2023 10:00:00 GMT Industry Trends hi@safeguard.sh (James) https://safeguard.sh/resources/blog/malware-analysis-npm-packages-techniques https://safeguard.sh/resources/blog/malware-analysis-npm-packages-techniques Mon, 15 May 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/artifactory-security-best-practices https://safeguard.sh/resources/blog/artifactory-security-best-practices Fri, 12 May 2023 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/subresource-integrity-failures-guide https://safeguard.sh/resources/blog/subresource-integrity-failures-guide Fri, 12 May 2023 10:00:00 GMT Application Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/container-vulnerability-scanning-comparison https://safeguard.sh/resources/blog/container-vulnerability-scanning-comparison Wed, 10 May 2023 10:00:00 GMT Container Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/sbom-requirements-financial-services https://safeguard.sh/resources/blog/sbom-requirements-financial-services Wed, 10 May 2023 10:00:00 GMT Industry Guides hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/elixir-hex-package-security https://safeguard.sh/resources/blog/elixir-hex-package-security Wed, 10 May 2023 00:00:00 GMT Developer Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/snyk-vs-sonatype-comparison-2023 https://safeguard.sh/resources/blog/snyk-vs-sonatype-comparison-2023 Wed, 10 May 2023 00:00:00 GMT Tool Comparisons hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/environment-variable-injection-ci-cd https://safeguard.sh/resources/blog/environment-variable-injection-ci-cd Mon, 08 May 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/sbom-for-saas-products https://safeguard.sh/resources/blog/sbom-for-saas-products Mon, 08 May 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/how-google-secures-software-supply-chain https://safeguard.sh/resources/blog/how-google-secures-software-supply-chain Mon, 08 May 2023 00:00:00 GMT Case Studies hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/msi-breach-intel-boot-guard-keys-leaked https://safeguard.sh/resources/blog/msi-breach-intel-boot-guard-keys-leaked Fri, 05 May 2023 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/business-logic-vulnerabilities-guide https://safeguard.sh/resources/blog/business-logic-vulnerabilities-guide Fri, 05 May 2023 09:00:00 GMT AppSec hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/supply-chain-levels-for-software-artifacts-slsa-v1 https://safeguard.sh/resources/blog/supply-chain-levels-for-software-artifacts-slsa-v1 Mon, 01 May 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/semantic-versioning-security-implications https://safeguard.sh/resources/blog/semantic-versioning-security-implications Fri, 28 Apr 2023 09:00:00 GMT Dependency Management hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/cisa-kev-catalog-one-year-analysis https://safeguard.sh/resources/blog/cisa-kev-catalog-one-year-analysis Tue, 25 Apr 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/post-breach-supply-chain-hardening https://safeguard.sh/resources/blog/post-breach-supply-chain-hardening Sat, 22 Apr 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/cisa-secure-by-design-principles https://safeguard.sh/resources/blog/cisa-secure-by-design-principles Thu, 20 Apr 2023 10:00:00 GMT Compliance & Regulations hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/papercut-cve-2023-27350-rce-exploitation https://safeguard.sh/resources/blog/papercut-cve-2023-27350-rce-exploitation Wed, 19 Apr 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/how-to-pin-github-actions-to-shas-correctly https://safeguard.sh/resources/blog/how-to-pin-github-actions-to-shas-correctly Tue, 18 Apr 2023 12:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/gitlab-cicd-security-configuration https://safeguard.sh/resources/blog/gitlab-cicd-security-configuration Tue, 18 Apr 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/open-source-intelligence-osint-supply-chain https://safeguard.sh/resources/blog/open-source-intelligence-osint-supply-chain Tue, 18 Apr 2023 00:00:00 GMT Threat Intelligence hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/maven-plugin-verification https://safeguard.sh/resources/blog/maven-plugin-verification Sat, 15 Apr 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/npm-manifest-confusion-vulnerability https://safeguard.sh/resources/blog/npm-manifest-confusion-vulnerability Sat, 15 Apr 2023 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/choosing-between-sca-tools-2023 https://safeguard.sh/resources/blog/choosing-between-sca-tools-2023 Sat, 15 Apr 2023 09:00:00 GMT Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/black-duck-software-composition-analysis https://safeguard.sh/resources/blog/black-duck-software-composition-analysis Sat, 15 Apr 2023 00:00:00 GMT Tool Reviews hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/open-source-supply-chain-attack-taxonomy https://safeguard.sh/resources/blog/open-source-supply-chain-attack-taxonomy Sat, 15 Apr 2023 00:00:00 GMT Open Source Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/software-escrow-supply-chain-continuity https://safeguard.sh/resources/blog/software-escrow-supply-chain-continuity Wed, 12 Apr 2023 11:00:00 GMT Risk Management hi@safeguard.sh (James) https://safeguard.sh/resources/blog/calico-network-policy-best-practices https://safeguard.sh/resources/blog/calico-network-policy-best-practices Wed, 12 Apr 2023 10:00:00 GMT Kubernetes Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/shared-responsibility-model-supply-chain https://safeguard.sh/resources/blog/shared-responsibility-model-supply-chain Wed, 12 Apr 2023 10:00:00 GMT Risk Management hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/software-heritage-archive-preservation https://safeguard.sh/resources/blog/software-heritage-archive-preservation Sat, 08 Apr 2023 11:00:00 GMT Open Source hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/post-install-hooks-package-managers https://safeguard.sh/resources/blog/post-install-hooks-package-managers Sat, 08 Apr 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/software-attestation-in-practice https://safeguard.sh/resources/blog/software-attestation-in-practice Sat, 08 Apr 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/measuring-security-program-effectiveness https://safeguard.sh/resources/blog/measuring-security-program-effectiveness Sat, 08 Apr 2023 00:00:00 GMT Organizational Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/3cx-desktop-app-cascading-breach https://safeguard.sh/resources/blog/3cx-desktop-app-cascading-breach Wed, 05 Apr 2023 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/chaos-engineering-supply-chain-resilience https://safeguard.sh/resources/blog/chaos-engineering-supply-chain-resilience Wed, 05 Apr 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/command-injection-prevention-modern https://safeguard.sh/resources/blog/command-injection-prevention-modern Wed, 05 Apr 2023 09:00:00 GMT AppSec hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/container-rootless-mode-security-guide https://safeguard.sh/resources/blog/container-rootless-mode-security-guide Wed, 05 Apr 2023 00:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/startup-security-growth-stage-enterprise https://safeguard.sh/resources/blog/startup-security-growth-stage-enterprise Wed, 05 Apr 2023 00:00:00 GMT Startup Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/3cx-attack-lessons-for-software-vendors https://safeguard.sh/resources/blog/3cx-attack-lessons-for-software-vendors Sun, 02 Apr 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/3cx-supply-chain-attack-analysis https://safeguard.sh/resources/blog/3cx-supply-chain-attack-analysis Wed, 29 Mar 2023 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/pypi-malware-wave-march-2023 https://safeguard.sh/resources/blog/pypi-malware-wave-march-2023 Tue, 28 Mar 2023 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fisma-federal-software-security-requirements https://safeguard.sh/resources/blog/fisma-federal-software-security-requirements Tue, 28 Mar 2023 10:00:00 GMT Compliance hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/azure-container-registry-security https://safeguard.sh/resources/blog/azure-container-registry-security Sat, 25 Mar 2023 10:00:00 GMT Cloud Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/openai-chatgpt-data-breach-march-2023 https://safeguard.sh/resources/blog/openai-chatgpt-data-breach-march-2023 Fri, 24 Mar 2023 10:00:00 GMT Incident Response hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/threat-modeling-software-supply-chain https://safeguard.sh/resources/blog/threat-modeling-software-supply-chain Wed, 22 Mar 2023 11:00:00 GMT Threat Modeling hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gitlab-ci-security-scanning-setup https://safeguard.sh/resources/blog/gitlab-ci-security-scanning-setup Wed, 22 Mar 2023 00:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/security-debt-quantification-methods https://safeguard.sh/resources/blog/security-debt-quantification-methods Wed, 22 Mar 2023 00:00:00 GMT Security Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ai-generated-code-security-risks https://safeguard.sh/resources/blog/ai-generated-code-security-risks Mon, 20 Mar 2023 10:00:00 GMT AI Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/cross-language-dependency-analysis https://safeguard.sh/resources/blog/cross-language-dependency-analysis Sat, 18 Mar 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/go-module-checksum-database-security https://safeguard.sh/resources/blog/go-module-checksum-database-security Sat, 18 Mar 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cross-functional-security-collaboration https://safeguard.sh/resources/blog/cross-functional-security-collaboration Sat, 18 Mar 2023 00:00:00 GMT Security Culture hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/dynamic-application-security-testing-guide https://safeguard.sh/resources/blog/dynamic-application-security-testing-guide Sat, 18 Mar 2023 00:00:00 GMT Application Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ruby-brakeman-security-scanner https://safeguard.sh/resources/blog/ruby-brakeman-security-scanner Wed, 15 Mar 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/understanding-epss-exploit-prediction-scoring https://safeguard.sh/resources/blog/understanding-epss-exploit-prediction-scoring Wed, 15 Mar 2023 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/web3-smart-contract-supply-chain-security https://safeguard.sh/resources/blog/web3-smart-contract-supply-chain-security Wed, 15 Mar 2023 08:00:00 GMT Emerging Technology hi@safeguard.sh (James) https://safeguard.sh/resources/blog/chrome-extension-manifest-v3-security https://safeguard.sh/resources/blog/chrome-extension-manifest-v3-security Wed, 15 Mar 2023 00:00:00 GMT Browser Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/go-modules-checksum-database-five-years-in https://safeguard.sh/resources/blog/go-modules-checksum-database-five-years-in Sun, 12 Mar 2023 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ddos-protection-software-distribution https://safeguard.sh/resources/blog/ddos-protection-software-distribution Sun, 12 Mar 2023 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/service-mesh-mtls-configuration https://safeguard.sh/resources/blog/service-mesh-mtls-configuration Sun, 12 Mar 2023 10:00:00 GMT Kubernetes Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/buildkit-buildah-secure-container-builds https://safeguard.sh/resources/blog/buildkit-buildah-secure-container-builds Sun, 12 Mar 2023 00:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/security-code-review-best-practices https://safeguard.sh/resources/blog/security-code-review-best-practices Fri, 10 Mar 2023 11:00:00 GMT Best Practices hi@safeguard.sh (James) https://safeguard.sh/resources/blog/github-private-rsa-key-exposed-in-repository https://safeguard.sh/resources/blog/github-private-rsa-key-exposed-in-repository Fri, 10 Mar 2023 10:00:00 GMT Incident Response hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/code-signing-certificates-supply-chain https://safeguard.sh/resources/blog/code-signing-certificates-supply-chain Wed, 08 Mar 2023 11:00:00 GMT Supply Chain Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/fortinet-fortiproxy-cve-2023-25610 https://safeguard.sh/resources/blog/fortinet-fortiproxy-cve-2023-25610 Wed, 08 Mar 2023 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/git-credential-security-organizations https://safeguard.sh/resources/blog/git-credential-security-organizations Wed, 08 Mar 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/java-maven-gradle-dependency-security https://safeguard.sh/resources/blog/java-maven-gradle-dependency-security Wed, 08 Mar 2023 10:00:00 GMT Dependency Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/email-security-supply-chain-phishing https://safeguard.sh/resources/blog/email-security-supply-chain-phishing Wed, 08 Mar 2023 00:00:00 GMT Social Engineering hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/kubernetes-rbac-security-best-practices https://safeguard.sh/resources/blog/kubernetes-rbac-security-best-practices Sun, 05 Mar 2023 10:00:00 GMT Container Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/maven-dependency-resolution-attacks https://safeguard.sh/resources/blog/maven-dependency-resolution-attacks Sun, 05 Mar 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pwa-service-worker-attack-surface https://safeguard.sh/resources/blog/pwa-service-worker-attack-surface Sun, 05 Mar 2023 10:00:00 GMT Application Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/typosquatting-detection-automation https://safeguard.sh/resources/blog/typosquatting-detection-automation Sun, 05 Mar 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/australia-critical-infrastructure-security https://safeguard.sh/resources/blog/australia-critical-infrastructure-security Sun, 05 Mar 2023 07:00:00 GMT Compliance hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/continuous-dependency-monitoring-setup https://safeguard.sh/resources/blog/continuous-dependency-monitoring-setup Tue, 28 Feb 2023 09:00:00 GMT Dependency Management hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/gitlab-ultimate-security-features-review https://safeguard.sh/resources/blog/gitlab-ultimate-security-features-review Tue, 28 Feb 2023 00:00:00 GMT Tool Reviews hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/swift-cocoapods-spm-security https://safeguard.sh/resources/blog/swift-cocoapods-spm-security Sat, 25 Feb 2023 10:00:00 GMT Dependency Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/spinnaker-deployment-security https://safeguard.sh/resources/blog/spinnaker-deployment-security Sat, 25 Feb 2023 00:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gcp-artifact-registry-security-guide https://safeguard.sh/resources/blog/gcp-artifact-registry-security-guide Wed, 22 Feb 2023 10:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-requirements-for-medical-devices-fda https://safeguard.sh/resources/blog/sbom-requirements-for-medical-devices-fda Mon, 20 Feb 2023 10:00:00 GMT Compliance & Regulations hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/gosec-static-analysis-go-security https://safeguard.sh/resources/blog/gosec-static-analysis-go-security Sat, 18 Feb 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/jira-service-management-cve-2023-22501 https://safeguard.sh/resources/blog/jira-service-management-cve-2023-22501 Wed, 15 Feb 2023 12:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/sbom-sharing-and-distribution-best-practices https://safeguard.sh/resources/blog/sbom-sharing-and-distribution-best-practices Wed, 15 Feb 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (James) https://safeguard.sh/resources/blog/defense-in-depth-software-supply-chain https://safeguard.sh/resources/blog/defense-in-depth-software-supply-chain Wed, 15 Feb 2023 00:00:00 GMT Security Architecture hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/alpine-apk-security-model https://safeguard.sh/resources/blog/alpine-apk-security-model Sun, 12 Feb 2023 10:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/android-apk-supply-chain-verification https://safeguard.sh/resources/blog/android-apk-supply-chain-verification Sun, 12 Feb 2023 10:00:00 GMT Mobile Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/cdn-poisoning-attacks-prevention https://safeguard.sh/resources/blog/cdn-poisoning-attacks-prevention Sun, 12 Feb 2023 00:00:00 GMT Web Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/cross-site-scripting-xss-prevention https://safeguard.sh/resources/blog/cross-site-scripting-xss-prevention Sun, 12 Feb 2023 00:00:00 GMT Code Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sbom-for-serverless-applications https://safeguard.sh/resources/blog/sbom-for-serverless-applications Sun, 12 Feb 2023 00:00:00 GMT SBOM hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pypi-mandatory-2fa-for-critical-packages https://safeguard.sh/resources/blog/pypi-mandatory-2fa-for-critical-packages Fri, 10 Feb 2023 10:00:00 GMT Open Source Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/cybersecurity-budget-planning-guide https://safeguard.sh/resources/blog/cybersecurity-budget-planning-guide Wed, 08 Feb 2023 10:00:00 GMT Security Strategy hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/goanywhere-mft-cve-2023-0669-clop https://safeguard.sh/resources/blog/goanywhere-mft-cve-2023-0669-clop Mon, 06 Feb 2023 09:00:00 GMT Incident Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/session-management-security-guide https://safeguard.sh/resources/blog/session-management-security-guide Sun, 05 Feb 2023 10:00:00 GMT Web Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vpn-security-remote-development-teams https://safeguard.sh/resources/blog/vpn-security-remote-development-teams Sun, 05 Feb 2023 10:00:00 GMT Network Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/eslint-supply-chain-attack-npm-packages https://safeguard.sh/resources/blog/eslint-supply-chain-attack-npm-packages Fri, 03 Feb 2023 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (James) https://safeguard.sh/resources/blog/fork-maintenance-security-responsibilities https://safeguard.sh/resources/blog/fork-maintenance-security-responsibilities Sat, 28 Jan 2023 09:00:00 GMT Dependency Management hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/dependency-pinning-vs-ranges-tradeoffs https://safeguard.sh/resources/blog/dependency-pinning-vs-ranges-tradeoffs Wed, 25 Jan 2023 14:00:00 GMT Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/github-rsa-ssh-key-rotation-incident https://safeguard.sh/resources/blog/github-rsa-ssh-key-rotation-incident Wed, 25 Jan 2023 10:00:00 GMT Incident Response hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dependabot-renovate-comparison-guide https://safeguard.sh/resources/blog/dependabot-renovate-comparison-guide Wed, 25 Jan 2023 00:00:00 GMT Tool Comparisons hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cryptographic-library-selection-guide https://safeguard.sh/resources/blog/cryptographic-library-selection-guide Sun, 22 Jan 2023 10:00:00 GMT Application Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/royal-ransomware-healthcare-targeting https://safeguard.sh/resources/blog/royal-ransomware-healthcare-targeting Sun, 22 Jan 2023 10:00:00 GMT Ransomware hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/securing-ai-ml-pipelines-supply-chain https://safeguard.sh/resources/blog/securing-ai-ml-pipelines-supply-chain Fri, 20 Jan 2023 10:00:00 GMT AI Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/t-mobile-breach-2022-api-exploitation https://safeguard.sh/resources/blog/t-mobile-breach-2022-api-exploitation Thu, 19 Jan 2023 11:00:00 GMT Incident Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/sbom-format-conversion-tools https://safeguard.sh/resources/blog/sbom-format-conversion-tools Wed, 18 Jan 2023 00:00:00 GMT SBOM hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/azure-defender-for-containers-guide https://safeguard.sh/resources/blog/azure-defender-for-containers-guide Sun, 15 Jan 2023 10:00:00 GMT Cloud Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/chatgpt-ai-security-implications-supply-chain https://safeguard.sh/resources/blog/chatgpt-ai-security-implications-supply-chain Sun, 15 Jan 2023 10:00:00 GMT AI Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ccpa-cpra-software-security-requirements https://safeguard.sh/resources/blog/ccpa-cpra-software-security-requirements Sun, 15 Jan 2023 09:00:00 GMT Compliance hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/blue-green-deployment-security https://safeguard.sh/resources/blog/blue-green-deployment-security Sun, 15 Jan 2023 00:00:00 GMT DevSecOps hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/sensitive-data-exposure-prevention https://safeguard.sh/resources/blog/sensitive-data-exposure-prevention Sun, 15 Jan 2023 00:00:00 GMT Application Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/csp-bypass-techniques-prevention https://safeguard.sh/resources/blog/csp-bypass-techniques-prevention Thu, 12 Jan 2023 10:00:00 GMT Application Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/nexus-repository-security-hardening https://safeguard.sh/resources/blog/nexus-repository-security-hardening Thu, 12 Jan 2023 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/container-image-hardening-checklist https://safeguard.sh/resources/blog/container-image-hardening-checklist Thu, 12 Jan 2023 08:00:00 GMT Best Practices hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/openssl-project-governance-security https://safeguard.sh/resources/blog/openssl-project-governance-security Thu, 12 Jan 2023 00:00:00 GMT Open Source Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/circleci-credential-rotation-mass-event-2023 https://safeguard.sh/resources/blog/circleci-credential-rotation-mass-event-2023 Tue, 10 Jan 2023 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/phpstan-security-analysis https://safeguard.sh/resources/blog/phpstan-security-analysis Sun, 08 Jan 2023 10:00:00 GMT DevSecOps hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/symlink-attacks-package-managers https://safeguard.sh/resources/blog/symlink-attacks-package-managers Sun, 08 Jan 2023 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/vendor-concentration-risk-software https://safeguard.sh/resources/blog/vendor-concentration-risk-software Sun, 08 Jan 2023 10:00:00 GMT Security Strategy hi@safeguard.sh (James) https://safeguard.sh/resources/blog/vue-js-security-best-practices https://safeguard.sh/resources/blog/vue-js-security-best-practices Sun, 08 Jan 2023 10:00:00 GMT Application Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/circleci-security-incident-january-2023 https://safeguard.sh/resources/blog/circleci-security-incident-january-2023 Thu, 05 Jan 2023 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/race-condition-vulnerabilities-web-apps https://safeguard.sh/resources/blog/race-condition-vulnerabilities-web-apps Thu, 05 Jan 2023 10:00:00 GMT Web Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/slack-github-repository-theft-2022 https://safeguard.sh/resources/blog/slack-github-repository-theft-2022 Wed, 04 Jan 2023 08:00:00 GMT Incident Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/release-management-security-checklist https://safeguard.sh/resources/blog/release-management-security-checklist Wed, 28 Dec 2022 09:00:00 GMT DevSecOps hi@safeguard.sh (James) https://safeguard.sh/resources/blog/responsible-disclosure-open-source https://safeguard.sh/resources/blog/responsible-disclosure-open-source Thu, 22 Dec 2022 00:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-supply-chain-security-2022-year-review https://safeguard.sh/resources/blog/software-supply-chain-security-2022-year-review Tue, 20 Dec 2022 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/glba-financial-software-security https://safeguard.sh/resources/blog/glba-financial-software-security Tue, 20 Dec 2022 09:00:00 GMT Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/software-vendor-risk-scoring-methodology https://safeguard.sh/resources/blog/software-vendor-risk-scoring-methodology Sun, 18 Dec 2022 00:00:00 GMT Risk Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/open-source-funding-sustainability-security https://safeguard.sh/resources/blog/open-source-funding-sustainability-security Thu, 15 Dec 2022 10:00:00 GMT Open Source hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/security-budget-justification-guide https://safeguard.sh/resources/blog/security-budget-justification-guide Thu, 15 Dec 2022 00:00:00 GMT Organizational Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/lessons-from-solarwinds-two-years-later https://safeguard.sh/resources/blog/lessons-from-solarwinds-two-years-later Tue, 13 Dec 2022 00:00:00 GMT Case Studies hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/cilium-network-security-kubernetes https://safeguard.sh/resources/blog/cilium-network-security-kubernetes Mon, 12 Dec 2022 10:00:00 GMT Kubernetes Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/github-repository-security-settings-guide https://safeguard.sh/resources/blog/github-repository-security-settings-guide Mon, 12 Dec 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/log4j-one-year-later-lessons-learned https://safeguard.sh/resources/blog/log4j-one-year-later-lessons-learned Mon, 12 Dec 2022 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/single-points-of-failure-supply-chains https://safeguard.sh/resources/blog/single-points-of-failure-supply-chains Mon, 12 Dec 2022 10:00:00 GMT Risk Management hi@safeguard.sh (James) https://safeguard.sh/resources/blog/fortinet-fortigate-ssl-vpn-cve-2022-42475 https://safeguard.sh/resources/blog/fortinet-fortigate-ssl-vpn-cve-2022-42475 Mon, 12 Dec 2022 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/end-of-year-dependency-audit-ritual-2022 https://safeguard.sh/resources/blog/end-of-year-dependency-audit-ritual-2022 Sat, 10 Dec 2022 12:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/startup-security-series-a-scaling https://safeguard.sh/resources/blog/startup-security-series-a-scaling Sat, 10 Dec 2022 00:00:00 GMT Startup Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cargo-build-script-security https://safeguard.sh/resources/blog/cargo-build-script-security Thu, 08 Dec 2022 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fossa-open-source-compliance-review https://safeguard.sh/resources/blog/fossa-open-source-compliance-review Thu, 08 Dec 2022 00:00:00 GMT Tool Reviews hi@safeguard.sh (James) https://safeguard.sh/resources/blog/kubernetes-pod-security-standards https://safeguard.sh/resources/blog/kubernetes-pod-security-standards Thu, 08 Dec 2022 00:00:00 GMT Kubernetes Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/github-code-signing-bypass-vulnerability https://safeguard.sh/resources/blog/github-code-signing-bypass-vulnerability Mon, 05 Dec 2022 11:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/ldap-injection-prevention-guide https://safeguard.sh/resources/blog/ldap-injection-prevention-guide Mon, 05 Dec 2022 10:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/property-based-testing-security https://safeguard.sh/resources/blog/property-based-testing-security Mon, 05 Dec 2022 10:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/pypi-malware-campaigns-q4-2022 https://safeguard.sh/resources/blog/pypi-malware-campaigns-q4-2022 Mon, 05 Dec 2022 10:00:00 GMT Open Source Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/dependency-graph-analysis-transitive-risks https://safeguard.sh/resources/blog/dependency-graph-analysis-transitive-risks Thu, 01 Dec 2022 10:00:00 GMT Software Supply Chain hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/incident-response-playbook-supply-chain-attacks https://safeguard.sh/resources/blog/incident-response-playbook-supply-chain-attacks Mon, 28 Nov 2022 10:00:00 GMT Incident Response hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/5g-network-software-supply-chain-risks https://safeguard.sh/resources/blog/5g-network-software-supply-chain-risks Fri, 25 Nov 2022 10:00:00 GMT Emerging Technology hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/lastpass-second-breach-encrypted-vaults https://safeguard.sh/resources/blog/lastpass-second-breach-encrypted-vaults Tue, 22 Nov 2022 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (James) https://safeguard.sh/resources/blog/penetration-testing-software-supply-chain https://safeguard.sh/resources/blog/penetration-testing-software-supply-chain Tue, 22 Nov 2022 10:00:00 GMT Offensive Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/startup-security-budget-allocation-guide https://safeguard.sh/resources/blog/startup-security-budget-allocation-guide Tue, 22 Nov 2022 09:00:00 GMT Industry Guides hi@safeguard.sh (James) https://safeguard.sh/resources/blog/vulnerability-correlation-across-ecosystems https://safeguard.sh/resources/blog/vulnerability-correlation-across-ecosystems Tue, 22 Nov 2022 09:00:00 GMT Vulnerability Management hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/open-source-maintainer-burnout-crisis https://safeguard.sh/resources/blog/open-source-maintainer-burnout-crisis Sun, 20 Nov 2022 00:00:00 GMT Open Source hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/docker-desktop-wsl2-security-changes-2022 https://safeguard.sh/resources/blog/docker-desktop-wsl2-security-changes-2022 Fri, 18 Nov 2022 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/aws-ecr-container-scanning-guide https://safeguard.sh/resources/blog/aws-ecr-container-scanning-guide Fri, 18 Nov 2022 10:00:00 GMT Cloud Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/python-package-security-best-practices https://safeguard.sh/resources/blog/python-package-security-best-practices Fri, 18 Nov 2022 10:00:00 GMT Dependency Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/security-champions-network-scaling https://safeguard.sh/resources/blog/security-champions-network-scaling Fri, 18 Nov 2022 00:00:00 GMT Security Culture hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/browser-extension-supply-chain-attacks https://safeguard.sh/resources/blog/browser-extension-supply-chain-attacks Tue, 15 Nov 2022 10:00:00 GMT Threat Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/podman-vs-docker-security-comparison https://safeguard.sh/resources/blog/podman-vs-docker-security-comparison Tue, 15 Nov 2022 00:00:00 GMT Container Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/runtime-vs-static-container-analysis https://safeguard.sh/resources/blog/runtime-vs-static-container-analysis Sat, 12 Nov 2022 10:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/rust-adoption-security-critical-software https://safeguard.sh/resources/blog/rust-adoption-security-critical-software Sat, 12 Nov 2022 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/software-supply-chain-forensics-guide https://safeguard.sh/resources/blog/software-supply-chain-forensics-guide Sat, 12 Nov 2022 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/waf-rule-writing-best-practices https://safeguard.sh/resources/blog/waf-rule-writing-best-practices Sat, 12 Nov 2022 10:00:00 GMT Application Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/static-analysis-false-positive-reduction https://safeguard.sh/resources/blog/static-analysis-false-positive-reduction Sat, 12 Nov 2022 00:00:00 GMT Application Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/vulnerability-coordination-open-source https://safeguard.sh/resources/blog/vulnerability-coordination-open-source Sat, 12 Nov 2022 00:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/automating-vulnerability-remediation-guide https://safeguard.sh/resources/blog/automating-vulnerability-remediation-guide Tue, 08 Nov 2022 14:00:00 GMT How-To Guide hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/container-image-signing-with-cosign https://safeguard.sh/resources/blog/container-image-signing-with-cosign Tue, 08 Nov 2022 10:00:00 GMT Container Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/software-update-signing-verification https://safeguard.sh/resources/blog/software-update-signing-verification Tue, 08 Nov 2022 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/jenkins-pipeline-security-hardening https://safeguard.sh/resources/blog/jenkins-pipeline-security-hardening Tue, 08 Nov 2022 00:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/brand-protection-package-registries https://safeguard.sh/resources/blog/brand-protection-package-registries Sat, 05 Nov 2022 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/pypi-namespace-squatting-prevention https://safeguard.sh/resources/blog/pypi-namespace-squatting-prevention Sat, 05 Nov 2022 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/browser-extension-permission-model https://safeguard.sh/resources/blog/browser-extension-permission-model Sat, 05 Nov 2022 09:00:00 GMT Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/browser-supply-chain-extension-attacks https://safeguard.sh/resources/blog/browser-supply-chain-extension-attacks Sat, 05 Nov 2022 00:00:00 GMT Application Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/dropbox-phishing-attack-github-repositories https://safeguard.sh/resources/blog/dropbox-phishing-attack-github-repositories Wed, 02 Nov 2022 10:00:00 GMT Incident Response hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/makefile-injection-attacks https://safeguard.sh/resources/blog/makefile-injection-attacks Sun, 30 Oct 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/openssl-critical-vulnerability-cve-2022-3602 https://safeguard.sh/resources/blog/openssl-critical-vulnerability-cve-2022-3602 Fri, 28 Oct 2022 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/real-estate-proptech-security-considerations https://safeguard.sh/resources/blog/real-estate-proptech-security-considerations Fri, 28 Oct 2022 09:00:00 GMT Industry Guides hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/build-reproducibility-verification-guide https://safeguard.sh/resources/blog/build-reproducibility-verification-guide Tue, 25 Oct 2022 11:00:00 GMT Build Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/security-impact-analysis-dependency-updates https://safeguard.sh/resources/blog/security-impact-analysis-dependency-updates Tue, 25 Oct 2022 09:00:00 GMT Dependency Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/mend-io-whitesource-sca-review https://safeguard.sh/resources/blog/mend-io-whitesource-sca-review Sat, 22 Oct 2022 00:00:00 GMT Tool Reviews hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sql-injection-prevention-modern-guide https://safeguard.sh/resources/blog/sql-injection-prevention-modern-guide Sat, 22 Oct 2022 00:00:00 GMT Code Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/tekton-pipeline-security-guide https://safeguard.sh/resources/blog/tekton-pipeline-security-guide Sat, 22 Oct 2022 00:00:00 GMT DevSecOps hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/open-source-policy-template-enterprises https://safeguard.sh/resources/blog/open-source-policy-template-enterprises Thu, 20 Oct 2022 14:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-maturity-model-for-enterprises https://safeguard.sh/resources/blog/sbom-maturity-model-for-enterprises Thu, 20 Oct 2022 10:00:00 GMT Compliance & Regulations hi@safeguard.sh (James) https://safeguard.sh/resources/blog/package-lock-files-security-implications https://safeguard.sh/resources/blog/package-lock-files-security-implications Tue, 18 Oct 2022 11:00:00 GMT Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/apache-commons-text-text4shell-cve-2022-42889 https://safeguard.sh/resources/blog/apache-commons-text-text4shell-cve-2022-42889 Tue, 18 Oct 2022 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/lockbit-3-0-ransomware-evolution https://safeguard.sh/resources/blog/lockbit-3-0-ransomware-evolution Tue, 18 Oct 2022 10:00:00 GMT Ransomware hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/business-continuity-supply-chain-attacks https://safeguard.sh/resources/blog/business-continuity-supply-chain-attacks Tue, 18 Oct 2022 00:00:00 GMT Business Continuity hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/vscode-extension-marketplace-security https://safeguard.sh/resources/blog/vscode-extension-marketplace-security Tue, 18 Oct 2022 00:00:00 GMT Developer Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/azure-devops-pipeline-security-hardening https://safeguard.sh/resources/blog/azure-devops-pipeline-security-hardening Sat, 15 Oct 2022 10:00:00 GMT Cloud Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/bandit-python-security-linting https://safeguard.sh/resources/blog/bandit-python-security-linting Sat, 15 Oct 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sigstore-general-availability-software-signing https://safeguard.sh/resources/blog/sigstore-general-availability-software-signing Sat, 15 Oct 2022 10:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/pre-commit-security-hooks-setup-guide https://safeguard.sh/resources/blog/pre-commit-security-hooks-setup-guide Wed, 12 Oct 2022 13:00:00 GMT How-To Guide hi@safeguard.sh (James) https://safeguard.sh/resources/blog/debian-repository-security-guide https://safeguard.sh/resources/blog/debian-repository-security-guide Wed, 12 Oct 2022 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ios-sideloading-security-implications https://safeguard.sh/resources/blog/ios-sideloading-security-implications Wed, 12 Oct 2022 10:00:00 GMT Mobile Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/opa-gatekeeper-kubernetes-policies https://safeguard.sh/resources/blog/opa-gatekeeper-kubernetes-policies Wed, 12 Oct 2022 00:00:00 GMT Kubernetes Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/tern-sbom-container-analysis-tool https://safeguard.sh/resources/blog/tern-sbom-container-analysis-tool Wed, 12 Oct 2022 00:00:00 GMT Tool Reviews hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/cisa-self-attestation-form-secure-software https://safeguard.sh/resources/blog/cisa-self-attestation-form-secure-software Sat, 08 Oct 2022 10:00:00 GMT Compliance & Regulations hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gdpr-software-supply-chain-obligations https://safeguard.sh/resources/blog/gdpr-software-supply-chain-obligations Sat, 08 Oct 2022 10:00:00 GMT Compliance hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/security-roi-calculation-methods https://safeguard.sh/resources/blog/security-roi-calculation-methods Sat, 08 Oct 2022 10:00:00 GMT Security Strategy hi@safeguard.sh (James) https://safeguard.sh/resources/blog/package-manager-security-npm-pip-maven https://safeguard.sh/resources/blog/package-manager-security-npm-pip-maven Sat, 08 Oct 2022 09:00:00 GMT Supply Chain Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/generating-sbom-from-container-images https://safeguard.sh/resources/blog/generating-sbom-from-container-images Sat, 08 Oct 2022 00:00:00 GMT SBOM hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cookie-security-modern-web-apps https://safeguard.sh/resources/blog/cookie-security-modern-web-apps Wed, 05 Oct 2022 10:00:00 GMT Web Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/network-segmentation-development-environments https://safeguard.sh/resources/blog/network-segmentation-development-environments Wed, 05 Oct 2022 10:00:00 GMT Network Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/php-composer-dependency-security https://safeguard.sh/resources/blog/php-composer-dependency-security Wed, 05 Oct 2022 10:00:00 GMT Dependency Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/telecommunications-supply-chain-security https://safeguard.sh/resources/blog/telecommunications-supply-chain-security Wed, 05 Oct 2022 10:00:00 GMT Industry Guides hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/developer-productivity-security-balance https://safeguard.sh/resources/blog/developer-productivity-security-balance Wed, 05 Oct 2022 00:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/trusted-computing-tpm-software-supply-chain https://safeguard.sh/resources/blog/trusted-computing-tpm-software-supply-chain Wed, 05 Oct 2022 00:00:00 GMT Hardware Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/npm-registry-security-improvements-2022 https://safeguard.sh/resources/blog/npm-registry-security-improvements-2022 Sat, 01 Oct 2022 10:00:00 GMT Open Source Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/microsoft-exchange-proxynotshell-cve-2022-41040 https://safeguard.sh/resources/blog/microsoft-exchange-proxynotshell-cve-2022-41040 Fri, 30 Sep 2022 10:00:00 GMT Zero-Day Exploits hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/oss-review-toolkit-ort-license-compliance https://safeguard.sh/resources/blog/oss-review-toolkit-ort-license-compliance Wed, 28 Sep 2022 10:00:00 GMT Open Source Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/migrating-dependencies-security-guide https://safeguard.sh/resources/blog/migrating-dependencies-security-guide Wed, 28 Sep 2022 09:00:00 GMT Dependency Management hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/database-extension-supply-chain-risks https://safeguard.sh/resources/blog/database-extension-supply-chain-risks Wed, 28 Sep 2022 00:00:00 GMT Infrastructure Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/compression-library-vulnerabilities-zlib-xz https://safeguard.sh/resources/blog/compression-library-vulnerabilities-zlib-xz Thu, 22 Sep 2022 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/open-source-software-security-act-2022 https://safeguard.sh/resources/blog/open-source-software-security-act-2022 Thu, 22 Sep 2022 10:00:00 GMT Compliance & Regulations hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/building-sbom-program-from-scratch https://safeguard.sh/resources/blog/building-sbom-program-from-scratch Tue, 20 Sep 2022 11:00:00 GMT SBOM hi@safeguard.sh (James) https://safeguard.sh/resources/blog/kubernetes-admission-controllers-supply-chain https://safeguard.sh/resources/blog/kubernetes-admission-controllers-supply-chain Sun, 18 Sep 2022 12:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/gosec-static-analysis-for-go https://safeguard.sh/resources/blog/gosec-static-analysis-for-go Sun, 18 Sep 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (James) https://safeguard.sh/resources/blog/sox-compliance-software-development https://safeguard.sh/resources/blog/sox-compliance-software-development Sun, 18 Sep 2022 10:00:00 GMT Compliance hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/uber-breach-2022-social-engineering-attack https://safeguard.sh/resources/blog/uber-breach-2022-social-engineering-attack Fri, 16 Sep 2022 10:00:00 GMT Incident Response hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/software-transparency-eu-cyber-resilience-act https://safeguard.sh/resources/blog/software-transparency-eu-cyber-resilience-act Thu, 15 Sep 2022 10:00:00 GMT Compliance hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/retail-ecommerce-software-supply-chain https://safeguard.sh/resources/blog/retail-ecommerce-software-supply-chain Thu, 15 Sep 2022 09:00:00 GMT Industry Guides hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/spdx-specification-practical-guide https://safeguard.sh/resources/blog/spdx-specification-practical-guide Thu, 15 Sep 2022 00:00:00 GMT SBOM hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/trivy-grype-vulnerability-scanner-comparison https://safeguard.sh/resources/blog/trivy-grype-vulnerability-scanner-comparison Thu, 15 Sep 2022 00:00:00 GMT Tool Comparisons hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/angular-application-security-checklist https://safeguard.sh/resources/blog/angular-application-security-checklist Mon, 12 Sep 2022 10:00:00 GMT Application Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/cors-misconfiguration-exploitation https://safeguard.sh/resources/blog/cors-misconfiguration-exploitation Mon, 12 Sep 2022 10:00:00 GMT Application Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/harbor-registry-security-configuration https://safeguard.sh/resources/blog/harbor-registry-security-configuration Mon, 12 Sep 2022 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/canary-deployments-security-monitoring https://safeguard.sh/resources/blog/canary-deployments-security-monitoring Mon, 12 Sep 2022 00:00:00 GMT DevSecOps hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/path-traversal-dependency-installation https://safeguard.sh/resources/blog/path-traversal-dependency-installation Thu, 08 Sep 2022 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/rust-supply-chain-security-crates-io https://safeguard.sh/resources/blog/rust-supply-chain-security-crates-io Thu, 08 Sep 2022 10:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/software-escrow-agreements-security https://safeguard.sh/resources/blog/software-escrow-agreements-security Thu, 08 Sep 2022 10:00:00 GMT Security Strategy hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/linux-kernel-supply-chain-security https://safeguard.sh/resources/blog/linux-kernel-supply-chain-security Thu, 08 Sep 2022 00:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/security-misconfiguration-checklist https://safeguard.sh/resources/blog/security-misconfiguration-checklist Thu, 08 Sep 2022 00:00:00 GMT Application Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/ssrf-exploitation-cloud-environments https://safeguard.sh/resources/blog/ssrf-exploitation-cloud-environments Mon, 05 Sep 2022 10:00:00 GMT Cloud Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/software-supply-chain-attacks-state-of-2022 https://safeguard.sh/resources/blog/software-supply-chain-attacks-state-of-2022 Thu, 01 Sep 2022 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/supply-chain-integrity-framework-comparison-2022 https://safeguard.sh/resources/blog/supply-chain-integrity-framework-comparison-2022 Tue, 30 Aug 2022 12:00:00 GMT Regulatory Compliance hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/build-artifact-integrity-verification https://safeguard.sh/resources/blog/build-artifact-integrity-verification Sun, 28 Aug 2022 09:00:00 GMT DevSecOps hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/lastpass-security-breach-developer-environment https://safeguard.sh/resources/blog/lastpass-security-breach-developer-environment Thu, 25 Aug 2022 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (James) https://safeguard.sh/resources/blog/plex-data-breach-august-2022 https://safeguard.sh/resources/blog/plex-data-breach-august-2022 Wed, 24 Aug 2022 10:00:00 GMT Data Breach hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/gitlab-critical-vulnerability-cve-2022-2884 https://safeguard.sh/resources/blog/gitlab-critical-vulnerability-cve-2022-2884 Mon, 22 Aug 2022 13:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/setting-up-dependency-scanning-github https://safeguard.sh/resources/blog/setting-up-dependency-scanning-github Mon, 22 Aug 2022 11:00:00 GMT How-To Guide hi@safeguard.sh (James) https://safeguard.sh/resources/blog/infrastructure-as-code-security-scanning https://safeguard.sh/resources/blog/infrastructure-as-code-security-scanning Mon, 22 Aug 2022 10:00:00 GMT Cloud Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/building-security-team-from-scratch https://safeguard.sh/resources/blog/building-security-team-from-scratch Mon, 22 Aug 2022 00:00:00 GMT Organizational Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/malicious-github-commits-supply-chain-risk https://safeguard.sh/resources/blog/malicious-github-commits-supply-chain-risk Sat, 20 Aug 2022 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/software-supply-chain-security-banking https://safeguard.sh/resources/blog/software-supply-chain-security-banking Sat, 20 Aug 2022 09:00:00 GMT Industry Guides hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/open-source-security-bounty-programs https://safeguard.sh/resources/blog/open-source-security-bounty-programs Thu, 18 Aug 2022 00:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/supply-chain-security-for-government-agencies https://safeguard.sh/resources/blog/supply-chain-security-for-government-agencies Thu, 18 Aug 2022 00:00:00 GMT Supply Chain Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/securing-github-actions-supply-chain https://safeguard.sh/resources/blog/securing-github-actions-supply-chain Mon, 15 Aug 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/security-metrics-that-matter-ciso-guide https://safeguard.sh/resources/blog/security-metrics-that-matter-ciso-guide Mon, 15 Aug 2022 09:00:00 GMT Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/ebpf-security-monitoring-applications https://safeguard.sh/resources/blog/ebpf-security-monitoring-applications Fri, 12 Aug 2022 10:00:00 GMT Runtime Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/docker-image-layer-security-analysis https://safeguard.sh/resources/blog/docker-image-layer-security-analysis Fri, 12 Aug 2022 00:00:00 GMT Container Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/trivy-sbom-generation-scanning https://safeguard.sh/resources/blog/trivy-sbom-generation-scanning Fri, 12 Aug 2022 00:00:00 GMT SBOM hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/zimbra-cve-2022-37042-authentication-bypass https://safeguard.sh/resources/blog/zimbra-cve-2022-37042-authentication-bypass Wed, 10 Aug 2022 10:00:00 GMT Zero-Day Exploits hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/cloudflare-twilio-0ktapus-phishing-campaign https://safeguard.sh/resources/blog/cloudflare-twilio-0ktapus-phishing-campaign Mon, 08 Aug 2022 10:00:00 GMT Incident Response hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/docker-security-best-practices-developers https://safeguard.sh/resources/blog/docker-security-best-practices-developers Mon, 08 Aug 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/pip-install-hooks-security-risks https://safeguard.sh/resources/blog/pip-install-hooks-security-risks Mon, 08 Aug 2022 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/startup-security-seed-stage-guide https://safeguard.sh/resources/blog/startup-security-seed-stage-guide Mon, 08 Aug 2022 00:00:00 GMT Startup Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/mutation-testing-security-validation https://safeguard.sh/resources/blog/mutation-testing-security-validation Fri, 05 Aug 2022 10:00:00 GMT Application Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nosql-injection-mongodb-prevention https://safeguard.sh/resources/blog/nosql-injection-mongodb-prevention Fri, 05 Aug 2022 10:00:00 GMT Application Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/reproducible-builds-supply-chain-integrity https://safeguard.sh/resources/blog/reproducible-builds-supply-chain-integrity Mon, 01 Aug 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (James) https://safeguard.sh/resources/blog/aws-inspector-v2-container-scanning https://safeguard.sh/resources/blog/aws-inspector-v2-container-scanning Thu, 28 Jul 2022 10:00:00 GMT Cloud Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/zero-trust-architecture-software-supply-chain https://safeguard.sh/resources/blog/zero-trust-architecture-software-supply-chain Thu, 28 Jul 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/microservices-security-architecture-guide https://safeguard.sh/resources/blog/microservices-security-architecture-guide Mon, 25 Jul 2022 11:00:00 GMT Architecture hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/clippy-rust-security-lints https://safeguard.sh/resources/blog/clippy-rust-security-lints Fri, 22 Jul 2022 10:00:00 GMT Secure Development hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/twitter-54-million-data-breach https://safeguard.sh/resources/blog/twitter-54-million-data-breach Fri, 22 Jul 2022 10:00:00 GMT Data Breach hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/brazil-lgpd-software-security-implications https://safeguard.sh/resources/blog/brazil-lgpd-software-security-implications Fri, 22 Jul 2022 08:00:00 GMT Compliance hi@safeguard.sh (James) https://safeguard.sh/resources/blog/atlassian-questions-for-confluence-cve-2022-26138 https://safeguard.sh/resources/blog/atlassian-questions-for-confluence-cve-2022-26138 Wed, 20 Jul 2022 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/vex-vulnerability-exploitability-exchange-guide https://safeguard.sh/resources/blog/vex-vulnerability-exploitability-exchange-guide Wed, 20 Jul 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/open-source-software-bill-of-rights https://safeguard.sh/resources/blog/open-source-software-bill-of-rights Wed, 20 Jul 2022 00:00:00 GMT Open Source Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/bug-bounty-programs-supply-chain-focus https://safeguard.sh/resources/blog/bug-bounty-programs-supply-chain-focus Mon, 18 Jul 2022 00:00:00 GMT Offensive Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/nist-csf-update-supply-chain-risk-management https://safeguard.sh/resources/blog/nist-csf-update-supply-chain-risk-management Fri, 15 Jul 2022 10:00:00 GMT Compliance & Regulations hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/github-actions-security-best-practices-2022 https://safeguard.sh/resources/blog/github-actions-security-best-practices-2022 Fri, 15 Jul 2022 00:00:00 GMT DevSecOps hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/azure-ad-token-theft-retrospective-2022 https://safeguard.sh/resources/blog/azure-ad-token-theft-retrospective-2022 Thu, 14 Jul 2022 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/blackcat-alphv-ransomware-supply-chain https://safeguard.sh/resources/blog/blackcat-alphv-ransomware-supply-chain Tue, 12 Jul 2022 10:00:00 GMT Ransomware hi@safeguard.sh (James) https://safeguard.sh/resources/blog/javascript-dependency-security-complete-guide https://safeguard.sh/resources/blog/javascript-dependency-security-complete-guide Tue, 12 Jul 2022 10:00:00 GMT Dependency Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/nginx-security-configuration-guide https://safeguard.sh/resources/blog/nginx-security-configuration-guide Tue, 12 Jul 2022 10:00:00 GMT Infrastructure Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/notary-v2-content-trust-guide https://safeguard.sh/resources/blog/notary-v2-content-trust-guide Tue, 12 Jul 2022 10:00:00 GMT Supply Chain Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/memory-safety-bugs-c-cpp-dependencies https://safeguard.sh/resources/blog/memory-safety-bugs-c-cpp-dependencies Fri, 08 Jul 2022 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/protocol-buffer-security-considerations https://safeguard.sh/resources/blog/protocol-buffer-security-considerations Fri, 08 Jul 2022 10:00:00 GMT Application Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/cdn-supply-chain-security-risks https://safeguard.sh/resources/blog/cdn-supply-chain-security-risks Fri, 08 Jul 2022 00:00:00 GMT Infrastructure Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/sast-vs-dast-vs-iast-comparison https://safeguard.sh/resources/blog/sast-vs-dast-vs-iast-comparison Fri, 08 Jul 2022 00:00:00 GMT Application Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/dark-web-monitoring-supply-chain https://safeguard.sh/resources/blog/dark-web-monitoring-supply-chain Tue, 05 Jul 2022 10:00:00 GMT Threat Intelligence hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/how-to-create-your-first-sbom https://safeguard.sh/resources/blog/how-to-create-your-first-sbom Tue, 05 Jul 2022 10:00:00 GMT How-To Guide hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/npm-lockfile-injection-attacks https://safeguard.sh/resources/blog/npm-lockfile-injection-attacks Tue, 05 Jul 2022 10:00:00 GMT Software Supply Chain Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/retbleed-spectre-variant-cve-2022-29900-analysis https://safeguard.sh/resources/blog/retbleed-spectre-variant-cve-2022-29900-analysis Tue, 05 Jul 2022 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/webassembly-security-sandbox-analysis https://safeguard.sh/resources/blog/webassembly-security-sandbox-analysis Tue, 05 Jul 2022 10:00:00 GMT Application Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/docker-scout-container-analysis-guide https://safeguard.sh/resources/blog/docker-scout-container-analysis-guide Tue, 05 Jul 2022 00:00:00 GMT Container Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/open-source-governance-enterprise-framework https://safeguard.sh/resources/blog/open-source-governance-enterprise-framework Tue, 28 Jun 2022 11:00:00 GMT Governance hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/india-cert-in-cyber-security-directives https://safeguard.sh/resources/blog/india-cert-in-cyber-security-directives Tue, 28 Jun 2022 10:00:00 GMT Compliance hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/dependency-update-strategies-for-large-codebases https://safeguard.sh/resources/blog/dependency-update-strategies-for-large-codebases Sat, 25 Jun 2022 09:00:00 GMT Software Supply Chain hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/github-codespaces-security-model-2022 https://safeguard.sh/resources/blog/github-codespaces-security-model-2022 Wed, 22 Jun 2022 12:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/terraform-security-scanning-best-practices https://safeguard.sh/resources/blog/terraform-security-scanning-best-practices Wed, 22 Jun 2022 10:00:00 GMT Infrastructure Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/managing-eol-software-dependencies https://safeguard.sh/resources/blog/managing-eol-software-dependencies Wed, 22 Jun 2022 09:00:00 GMT Dependency Management hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/secrets-management-preventing-credential-leaks https://safeguard.sh/resources/blog/secrets-management-preventing-credential-leaks Wed, 22 Jun 2022 09:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/environment-variable-injection-cicd https://safeguard.sh/resources/blog/environment-variable-injection-cicd Mon, 20 Jun 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/eslint-security-rules-configuration https://safeguard.sh/resources/blog/eslint-security-rules-configuration Mon, 20 Jun 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/ruby-gems-supply-chain-security https://safeguard.sh/resources/blog/ruby-gems-supply-chain-security Mon, 20 Jun 2022 10:00:00 GMT Dependency Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/securing-terraform-infrastructure-as-code https://safeguard.sh/resources/blog/securing-terraform-infrastructure-as-code Sat, 18 Jun 2022 09:00:00 GMT Infrastructure Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/flux-cd-gitops-security-practices https://safeguard.sh/resources/blog/flux-cd-gitops-security-practices Sat, 18 Jun 2022 00:00:00 GMT DevSecOps hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/supply-chain-risk-appetite-framework https://safeguard.sh/resources/blog/supply-chain-risk-appetite-framework Sat, 18 Jun 2022 00:00:00 GMT Risk Management hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/cpe-naming-convention-vulnerability-matching https://safeguard.sh/resources/blog/cpe-naming-convention-vulnerability-matching Wed, 15 Jun 2022 10:00:00 GMT Vulnerability Management hi@safeguard.sh (James) https://safeguard.sh/resources/blog/shifting-left-without-slowing-down https://safeguard.sh/resources/blog/shifting-left-without-slowing-down Wed, 15 Jun 2022 10:00:00 GMT Best Practices hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/owasp-top-10-2021-supply-chain-perspective https://safeguard.sh/resources/blog/owasp-top-10-2021-supply-chain-perspective Wed, 15 Jun 2022 00:00:00 GMT Application Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/log4shell-response-playbook-six-months-in https://safeguard.sh/resources/blog/log4shell-response-playbook-six-months-in Sun, 12 Jun 2022 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/linux-distribution-package-signing https://safeguard.sh/resources/blog/linux-distribution-package-signing Sun, 12 Jun 2022 10:00:00 GMT Supply Chain Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/mobile-app-store-security-bypass https://safeguard.sh/resources/blog/mobile-app-store-security-bypass Sun, 12 Jun 2022 10:00:00 GMT Mobile Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/electron-app-supply-chain-security https://safeguard.sh/resources/blog/electron-app-supply-chain-security Sun, 12 Jun 2022 00:00:00 GMT Application Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/follina-cve-2022-30190-microsoft-zero-day https://safeguard.sh/resources/blog/follina-cve-2022-30190-microsoft-zero-day Fri, 10 Jun 2022 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/container-runtime-security-monitoring https://safeguard.sh/resources/blog/container-runtime-security-monitoring Wed, 08 Jun 2022 11:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/aws-supply-chain-security-best-practices https://safeguard.sh/resources/blog/aws-supply-chain-security-best-practices Wed, 08 Jun 2022 10:00:00 GMT Cloud Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/tls-configuration-security-audit https://safeguard.sh/resources/blog/tls-configuration-security-audit Wed, 08 Jun 2022 10:00:00 GMT Application Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/kubernetes-supply-chain-policy-engine https://safeguard.sh/resources/blog/kubernetes-supply-chain-policy-engine Wed, 08 Jun 2022 00:00:00 GMT Kubernetes Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/security-headers-implementation-checklist https://safeguard.sh/resources/blog/security-headers-implementation-checklist Sun, 05 Jun 2022 10:00:00 GMT Web Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/software-defined-perimeter-supply-chain https://safeguard.sh/resources/blog/software-defined-perimeter-supply-chain Sun, 05 Jun 2022 10:00:00 GMT Network Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/hardware-supply-chain-trust-boundaries https://safeguard.sh/resources/blog/hardware-supply-chain-trust-boundaries Sun, 05 Jun 2022 00:00:00 GMT Hardware Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/sbom-101-complete-beginners-guide https://safeguard.sh/resources/blog/sbom-101-complete-beginners-guide Sun, 05 Jun 2022 00:00:00 GMT SBOM hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/confluence-cve-2022-26134-atlassian-zero-day https://safeguard.sh/resources/blog/confluence-cve-2022-26134-atlassian-zero-day Fri, 03 Jun 2022 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/open-source-alternative-evaluation-security https://safeguard.sh/resources/blog/open-source-alternative-evaluation-security Sat, 28 May 2022 09:00:00 GMT Dependency Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/software-provenance-tracking-best-practices https://safeguard.sh/resources/blog/software-provenance-tracking-best-practices Sat, 28 May 2022 09:00:00 GMT DevSecOps hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/shield-health-group-data-breach https://safeguard.sh/resources/blog/shield-health-group-data-breach Fri, 27 May 2022 10:00:00 GMT Healthcare Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/broken-access-control-prevention-guide https://safeguard.sh/resources/blog/broken-access-control-prevention-guide Wed, 25 May 2022 00:00:00 GMT Application Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/general-motors-credential-stuffing https://safeguard.sh/resources/blog/general-motors-credential-stuffing Tue, 24 May 2022 10:00:00 GMT Credential Attacks hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/red-hat-jboss-vulnerability-exploitation https://safeguard.sh/resources/blog/red-hat-jboss-vulnerability-exploitation Sun, 22 May 2022 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/open-source-funding-models-security https://safeguard.sh/resources/blog/open-source-funding-models-security Sun, 22 May 2022 00:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/pypi-supply-chain-attacks-ctx-package https://safeguard.sh/resources/blog/pypi-supply-chain-attacks-ctx-package Fri, 20 May 2022 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/image-parsing-vulnerabilities-dependencies https://safeguard.sh/resources/blog/image-parsing-vulnerabilities-dependencies Wed, 18 May 2022 10:00:00 GMT Vulnerability Management hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/secure-coding-practices-developers-guide https://safeguard.sh/resources/blog/secure-coding-practices-developers-guide Wed, 18 May 2022 10:00:00 GMT Best Practices hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/why-dependency-pinning-alone-is-not-enough https://safeguard.sh/resources/blog/why-dependency-pinning-alone-is-not-enough Tue, 17 May 2022 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/maven-central-supply-chain-risks https://safeguard.sh/resources/blog/maven-central-supply-chain-risks Sun, 15 May 2022 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/oci-artifact-signing-standards https://safeguard.sh/resources/blog/oci-artifact-signing-standards Thu, 12 May 2022 10:00:00 GMT Supply Chain Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/saml-security-supply-chain-context https://safeguard.sh/resources/blog/saml-security-supply-chain-context Thu, 12 May 2022 10:00:00 GMT Identity Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/zyxel-firewall-cve-2022-30525-rce https://safeguard.sh/resources/blog/zyxel-firewall-cve-2022-30525-rce Thu, 12 May 2022 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/docker-container-escape-vulnerabilities https://safeguard.sh/resources/blog/docker-container-escape-vulnerabilities Thu, 12 May 2022 09:00:00 GMT Container Security hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/cyclonedx-specification-deep-dive https://safeguard.sh/resources/blog/cyclonedx-specification-deep-dive Thu, 12 May 2022 00:00:00 GMT SBOM hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/cisa-sbom-guidance-for-government-agencies https://safeguard.sh/resources/blog/cisa-sbom-guidance-for-government-agencies Tue, 10 May 2022 11:00:00 GMT Compliance & Regulations hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/regex-denial-of-service-redos-prevention https://safeguard.sh/resources/blog/regex-denial-of-service-redos-prevention Sun, 08 May 2022 10:00:00 GMT Application Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/feature-flags-security-implications https://safeguard.sh/resources/blog/feature-flags-security-implications Sun, 08 May 2022 00:00:00 GMT DevSecOps hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/file-upload-vulnerability-prevention https://safeguard.sh/resources/blog/file-upload-vulnerability-prevention Thu, 05 May 2022 10:00:00 GMT Web Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/nist-sp-800-218-ssdf-final-publication https://safeguard.sh/resources/blog/nist-sp-800-218-ssdf-final-publication Thu, 05 May 2022 10:00:00 GMT Compliance & Regulations hi@safeguard.sh (James) https://safeguard.sh/resources/blog/cicd-pipeline-audit-logging https://safeguard.sh/resources/blog/cicd-pipeline-audit-logging Thu, 28 Apr 2022 09:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/openssf-alpha-omega-project-securing-open-source https://safeguard.sh/resources/blog/openssf-alpha-omega-project-securing-open-source Thu, 28 Apr 2022 09:00:00 GMT Open Source Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/ephemeral-environments-security-testing https://safeguard.sh/resources/blog/ephemeral-environments-security-testing Mon, 25 Apr 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/npm-supply-chain-attacks-2022-q1-report https://safeguard.sh/resources/blog/npm-supply-chain-attacks-2022-q1-report Wed, 20 Apr 2022 11:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/costa-rica-conti-ransomware-national https://safeguard.sh/resources/blog/costa-rica-conti-ransomware-national Mon, 18 Apr 2022 10:00:00 GMT Ransomware hi@safeguard.sh (James) https://safeguard.sh/resources/blog/beanstalk-defi-governance-attack https://safeguard.sh/resources/blog/beanstalk-defi-governance-attack Sun, 17 Apr 2022 10:00:00 GMT DeFi Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/github-oauth-token-theft-heroku-travis-ci https://safeguard.sh/resources/blog/github-oauth-token-theft-heroku-travis-ci Fri, 15 Apr 2022 14:00:00 GMT Incident Response hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/temp-file-race-conditions-build-systems https://safeguard.sh/resources/blog/temp-file-race-conditions-build-systems Fri, 15 Apr 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (James) https://safeguard.sh/resources/blog/azure-devops-supply-chain-risks https://safeguard.sh/resources/blog/azure-devops-supply-chain-risks Fri, 15 Apr 2022 08:00:00 GMT Supply Chain Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/container-registry-hardening-2022 https://safeguard.sh/resources/blog/container-registry-hardening-2022 Fri, 08 Apr 2022 12:00:00 GMT Container Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/lapsus-group-attack-techniques-analysis https://safeguard.sh/resources/blog/lapsus-group-attack-techniques-analysis Fri, 08 Apr 2022 10:00:00 GMT Threat Actors hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sbom-automation-in-ci-cd-pipelines https://safeguard.sh/resources/blog/sbom-automation-in-ci-cd-pipelines Fri, 08 Apr 2022 10:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/generating-sbom-with-syft-guide https://safeguard.sh/resources/blog/generating-sbom-with-syft-guide Fri, 08 Apr 2022 00:00:00 GMT SBOM hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/vmware-workspace-one-cve-2022-22954 https://safeguard.sh/resources/blog/vmware-workspace-one-cve-2022-22954 Wed, 06 Apr 2022 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/fuzz-testing-supply-chain-components https://safeguard.sh/resources/blog/fuzz-testing-supply-chain-components Tue, 05 Apr 2022 10:00:00 GMT Application Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/mailchimp-social-engineering-breach https://safeguard.sh/resources/blog/mailchimp-social-engineering-breach Mon, 04 Apr 2022 10:00:00 GMT Social Engineering hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/spring4shell-cve-2022-22965-response-analysis https://safeguard.sh/resources/blog/spring4shell-cve-2022-22965-response-analysis Sat, 02 Apr 2022 12:00:00 GMT Vulnerability Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/spring4shell-vs-log4shell-comparison https://safeguard.sh/resources/blog/spring4shell-vs-log4shell-comparison Sat, 02 Apr 2022 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/spring4shell-cve-2022-22965-analysis https://safeguard.sh/resources/blog/spring4shell-cve-2022-22965-analysis Thu, 31 Mar 2022 08:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/ronin-network-hack-625-million https://safeguard.sh/resources/blog/ronin-network-hack-625-million Tue, 29 Mar 2022 10:00:00 GMT Cryptocurrency Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/microsoft-lapsus-breach-source-code-access https://safeguard.sh/resources/blog/microsoft-lapsus-breach-source-code-access Tue, 22 Mar 2022 15:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/vulnerability-disclosure-programs-best-practices https://safeguard.sh/resources/blog/vulnerability-disclosure-programs-best-practices Tue, 22 Mar 2022 11:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/okta-lapsus-breach-january-2022 https://safeguard.sh/resources/blog/okta-lapsus-breach-january-2022 Tue, 22 Mar 2022 09:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/first-principles-artifact-signing-guide-2022 https://safeguard.sh/resources/blog/first-principles-artifact-signing-guide-2022 Sun, 20 Mar 2022 12:00:00 GMT Best Practices hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/kubernetes-supply-chain-security-best-practices https://safeguard.sh/resources/blog/kubernetes-supply-chain-security-best-practices Tue, 15 Mar 2022 09:00:00 GMT Container Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/certificate-authority-compromise-risks https://safeguard.sh/resources/blog/certificate-authority-compromise-risks Sat, 12 Mar 2022 00:00:00 GMT PKI Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/dirty-pipe-cve-2022-0847-linux-kernel-vulnerability https://safeguard.sh/resources/blog/dirty-pipe-cve-2022-0847-linux-kernel-vulnerability Mon, 07 Mar 2022 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/samsung-lapsus-breach-source-code-theft https://safeguard.sh/resources/blog/samsung-lapsus-breach-source-code-theft Mon, 07 Mar 2022 10:00:00 GMT Incident Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/conti-ransomware-leaks-supply-chain-tools https://safeguard.sh/resources/blog/conti-ransomware-leaks-supply-chain-tools Wed, 02 Mar 2022 10:00:00 GMT Ransomware hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/nvidia-lapsus-breach-code-signing-certificates https://safeguard.sh/resources/blog/nvidia-lapsus-breach-code-signing-certificates Tue, 01 Mar 2022 12:00:00 GMT Incident Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/heroku-github-oauth-token-theft https://safeguard.sh/resources/blog/heroku-github-oauth-token-theft Fri, 25 Feb 2022 12:00:00 GMT Incident Response hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/solarwinds-lessons-two-years-on https://safeguard.sh/resources/blog/solarwinds-lessons-two-years-on Fri, 18 Feb 2022 12:00:00 GMT Industry Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/event-driven-architecture-security https://safeguard.sh/resources/blog/event-driven-architecture-security Fri, 18 Feb 2022 10:00:00 GMT Architecture Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/software-supply-chain-security-for-startups https://safeguard.sh/resources/blog/software-supply-chain-security-for-startups Tue, 15 Feb 2022 09:00:00 GMT DevSecOps hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/open-source-license-compliance-guide-2022 https://safeguard.sh/resources/blog/open-source-license-compliance-guide-2022 Thu, 10 Feb 2022 08:00:00 GMT Compliance & Regulations hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/sap-icmad-cve-2022-22536-critical https://safeguard.sh/resources/blog/sap-icmad-cve-2022-22536-critical Tue, 08 Feb 2022 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sbom-formats-compared-cyclonedx-vs-spdx https://safeguard.sh/resources/blog/sbom-formats-compared-cyclonedx-vs-spdx Sat, 05 Feb 2022 10:00:00 GMT Compliance & Regulations hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/firmware-supply-chain-security-guide https://safeguard.sh/resources/blog/firmware-supply-chain-security-guide Sat, 05 Feb 2022 00:00:00 GMT Hardware Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/news-corp-china-espionage-breach https://safeguard.sh/resources/blog/news-corp-china-espionage-breach Fri, 04 Feb 2022 10:00:00 GMT Nation-State Threats hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/polkit-pkexec-cve-2022-0847-dirty-pipe https://safeguard.sh/resources/blog/polkit-pkexec-cve-2022-0847-dirty-pipe Fri, 28 Jan 2022 14:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/rust-crate-supply-chain-security https://safeguard.sh/resources/blog/rust-crate-supply-chain-security Thu, 20 Jan 2022 11:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/red-cross-data-breach-2022 https://safeguard.sh/resources/blog/red-cross-data-breach-2022 Thu, 20 Jan 2022 10:00:00 GMT Data Breach hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/log4j-maintainer-burnout-lessons https://safeguard.sh/resources/blog/log4j-maintainer-burnout-lessons Tue, 18 Jan 2022 00:00:00 GMT Open Source Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/crypto-com-hack-34-million https://safeguard.sh/resources/blog/crypto-com-hack-34-million Mon, 17 Jan 2022 10:00:00 GMT Cryptocurrency Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/typescript-strict-mode-security-benefits https://safeguard.sh/resources/blog/typescript-strict-mode-security-benefits Wed, 12 Jan 2022 10:00:00 GMT Secure Development hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/colors-js-faker-js-open-source-maintainer-burnout https://safeguard.sh/resources/blog/colors-js-faker-js-open-source-maintainer-burnout Mon, 10 Jan 2022 09:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/node-ipc-protestware-peacenotwar-supply-chain https://safeguard.sh/resources/blog/node-ipc-protestware-peacenotwar-supply-chain Sat, 08 Jan 2022 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/software-supply-chain-attacks-2021-timeline https://safeguard.sh/resources/blog/software-supply-chain-attacks-2021-timeline Tue, 28 Dec 2021 09:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/container-image-vulnerabilities-2021-year-in-review https://safeguard.sh/resources/blog/container-image-vulnerabilities-2021-year-in-review Wed, 22 Dec 2021 09:00:00 GMT Container Security hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/cisa-known-exploited-vulnerabilities-catalog-launched https://safeguard.sh/resources/blog/cisa-known-exploited-vulnerabilities-catalog-launched Mon, 20 Dec 2021 09:00:00 GMT Compliance & Regulations hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/detecting-log4shell-in-your-software-supply-chain https://safeguard.sh/resources/blog/detecting-log4shell-in-your-software-supply-chain Sat, 18 Dec 2021 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/log4shell-impact-assessment-and-remediation-guide https://safeguard.sh/resources/blog/log4shell-impact-assessment-and-remediation-guide Wed, 15 Dec 2021 08:00:00 GMT Incident Response hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/kronos-ransomware-attack-payroll https://safeguard.sh/resources/blog/kronos-ransomware-attack-payroll Tue, 14 Dec 2021 10:00:00 GMT Ransomware hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/log4shell-vulnerability-cve-2021-44228-explained https://safeguard.sh/resources/blog/log4shell-vulnerability-cve-2021-44228-explained Mon, 13 Dec 2021 08:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/grafana-cve-2021-43798-directory-traversal https://safeguard.sh/resources/blog/grafana-cve-2021-43798-directory-traversal Sun, 05 Dec 2021 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/grpc-security-considerations https://safeguard.sh/resources/blog/grpc-security-considerations Sun, 05 Dec 2021 10:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/vendor-concentration-risk-software-supply-chain https://safeguard.sh/resources/blog/vendor-concentration-risk-software-supply-chain Sun, 05 Dec 2021 10:00:00 GMT Risk Management hi@safeguard.sh (James) https://safeguard.sh/resources/blog/zero-day-vulnerabilities-in-open-source-2021 https://safeguard.sh/resources/blog/zero-day-vulnerabilities-in-open-source-2021 Sun, 28 Nov 2021 09:00:00 GMT Vulnerability Research hi@safeguard.sh (James) https://safeguard.sh/resources/blog/bgp-hijacking-software-distribution https://safeguard.sh/resources/blog/bgp-hijacking-software-distribution Sun, 28 Nov 2021 00:00:00 GMT Network Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/panasonic-data-breach-november-2021 https://safeguard.sh/resources/blog/panasonic-data-breach-november-2021 Fri, 26 Nov 2021 10:00:00 GMT Data Breach hi@safeguard.sh (James) https://safeguard.sh/resources/blog/zoho-managengine-cve-2021-44077-exploitation https://safeguard.sh/resources/blog/zoho-managengine-cve-2021-44077-exploitation Sat, 20 Nov 2021 10:00:00 GMT Zero-Day Exploits hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/software-composition-analysis-sca-buyers-guide https://safeguard.sh/resources/blog/software-composition-analysis-sca-buyers-guide Sat, 20 Nov 2021 09:00:00 GMT Tools & Techniques hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/apple-macos-supply-chain-xcode-ghost https://safeguard.sh/resources/blog/apple-macos-supply-chain-xcode-ghost Mon, 15 Nov 2021 10:00:00 GMT Supply Chain Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/robinhood-data-breach-2021 https://safeguard.sh/resources/blog/robinhood-data-breach-2021 Wed, 10 Nov 2021 10:00:00 GMT Data Breach hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ntia-sbom-minimum-elements-guide https://safeguard.sh/resources/blog/ntia-sbom-minimum-elements-guide Wed, 10 Nov 2021 09:00:00 GMT Compliance & Regulations hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/vulnerability-prioritization-beyond-cvss-scores https://safeguard.sh/resources/blog/vulnerability-prioritization-beyond-cvss-scores Mon, 01 Nov 2021 09:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/cream-finance-defi-hack-130-million https://safeguard.sh/resources/blog/cream-finance-defi-hack-130-million Thu, 28 Oct 2021 10:00:00 GMT DeFi Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ua-parser-js-npm-hijack-october-2021 https://safeguard.sh/resources/blog/ua-parser-js-npm-hijack-october-2021 Mon, 25 Oct 2021 12:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/sigstore-cosign-software-signing-explained https://safeguard.sh/resources/blog/sigstore-cosign-software-signing-explained Mon, 25 Oct 2021 09:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/revil-ransomware-shutdown-law-enforcement https://safeguard.sh/resources/blog/revil-ransomware-shutdown-law-enforcement Fri, 22 Oct 2021 10:00:00 GMT Ransomware hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/python-pypi-malware-campaigns-2021 https://safeguard.sh/resources/blog/python-pypi-malware-campaigns-2021 Fri, 15 Oct 2021 10:00:00 GMT Open Source Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/apache-http-server-cve-2021-41773-path-traversal https://safeguard.sh/resources/blog/apache-http-server-cve-2021-41773-path-traversal Tue, 12 Oct 2021 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/twitch-source-code-leak-october-2021 https://safeguard.sh/resources/blog/twitch-source-code-leak-october-2021 Fri, 08 Oct 2021 14:00:00 GMT Incident Analysis hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/docker-hub-malicious-images-cryptomining https://safeguard.sh/resources/blog/docker-hub-malicious-images-cryptomining Tue, 05 Oct 2021 09:00:00 GMT Container Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/binary-analysis-supply-chain-verification https://safeguard.sh/resources/blog/binary-analysis-supply-chain-verification Tue, 05 Oct 2021 00:00:00 GMT Application Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/github-actions-security-supply-chain-risks https://safeguard.sh/resources/blog/github-actions-security-supply-chain-risks Sat, 25 Sep 2021 10:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/apple-icloud-csam-privacy-security https://safeguard.sh/resources/blog/apple-icloud-csam-privacy-security Wed, 22 Sep 2021 10:00:00 GMT Privacy & Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/travis-ci-token-leak-retrospective-2021 https://safeguard.sh/resources/blog/travis-ci-token-leak-retrospective-2021 Mon, 20 Sep 2021 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/npm-colors-faker-sabotage-open-source-trust https://safeguard.sh/resources/blog/npm-colors-faker-sabotage-open-source-trust Wed, 15 Sep 2021 10:00:00 GMT Open Source Security hi@safeguard.sh (James) https://safeguard.sh/resources/blog/business-impact-analysis-dependency-failures https://safeguard.sh/resources/blog/business-impact-analysis-dependency-failures Fri, 10 Sep 2021 10:00:00 GMT Risk Management hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/graphql-api-security-best-practices https://safeguard.sh/resources/blog/graphql-api-security-best-practices Fri, 10 Sep 2021 10:00:00 GMT API Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/microsoft-cosmosdb-chaosdb-vulnerability https://safeguard.sh/resources/blog/microsoft-cosmosdb-chaosdb-vulnerability Fri, 10 Sep 2021 10:00:00 GMT Cloud Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/third-party-risk-management-software-vendors https://safeguard.sh/resources/blog/third-party-risk-management-software-vendors Wed, 08 Sep 2021 09:00:00 GMT Risk Management hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/pegasus-spyware-nso-group-supply-chain https://safeguard.sh/resources/blog/pegasus-spyware-nso-group-supply-chain Sun, 05 Sep 2021 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/slsa-framework-introduction-supply-chain-integrity https://safeguard.sh/resources/blog/slsa-framework-introduction-supply-chain-integrity Wed, 01 Sep 2021 09:00:00 GMT DevSecOps hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/devsecops-maturity-model-where-do-you-stand https://safeguard.sh/resources/blog/devsecops-maturity-model-where-do-you-stand Sat, 28 Aug 2021 09:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/redos-regular-expression-denial-of-service https://safeguard.sh/resources/blog/redos-regular-expression-denial-of-service Fri, 20 Aug 2021 10:00:00 GMT Application Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/securing-ci-cd-pipelines-from-supply-chain-attacks https://safeguard.sh/resources/blog/securing-ci-cd-pipelines-from-supply-chain-attacks Fri, 20 Aug 2021 09:00:00 GMT DevSecOps hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/accenture-lockbit-ransomware-attack https://safeguard.sh/resources/blog/accenture-lockbit-ransomware-attack Wed, 18 Aug 2021 10:00:00 GMT Ransomware hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/proxyshell-microsoft-exchange-exploitation https://safeguard.sh/resources/blog/proxyshell-microsoft-exchange-exploitation Thu, 12 Aug 2021 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (James) https://safeguard.sh/resources/blog/typosquatting-attacks-npm-pypi-explained https://safeguard.sh/resources/blog/typosquatting-attacks-npm-pypi-explained Tue, 10 Aug 2021 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (James) https://safeguard.sh/resources/blog/dns-hijacking-supply-chain-implications https://safeguard.sh/resources/blog/dns-hijacking-supply-chain-implications Thu, 05 Aug 2021 00:00:00 GMT Network Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/open-source-security-state-of-the-union-2021 https://safeguard.sh/resources/blog/open-source-security-state-of-the-union-2021 Sun, 01 Aug 2021 09:00:00 GMT Open Source Security hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/why-software-bill-of-materials-matter https://safeguard.sh/resources/blog/why-software-bill-of-materials-matter Sun, 25 Jul 2021 09:00:00 GMT DevSecOps hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/linkedin-data-scraping-700-million https://safeguard.sh/resources/blog/linkedin-data-scraping-700-million Tue, 20 Jul 2021 10:00:00 GMT Data Breach hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/npm-package-ua-parser-js-compromised https://safeguard.sh/resources/blog/npm-package-ua-parser-js-compromised Thu, 15 Jul 2021 10:00:00 GMT Open Source Security hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/kaseya-vsa-ransomware-supply-chain-analysis https://safeguard.sh/resources/blog/kaseya-vsa-ransomware-supply-chain-analysis Thu, 08 Jul 2021 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/printnightmare-cve-2021-34527-windows https://safeguard.sh/resources/blog/printnightmare-cve-2021-34527-windows Thu, 08 Jul 2021 10:00:00 GMT Vulnerability Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/kaseya-vsa-ransomware-supply-chain-attack https://safeguard.sh/resources/blog/kaseya-vsa-ransomware-supply-chain-attack Mon, 05 Jul 2021 08:00:00 GMT Incident Response hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/facebook-data-leak-533-million https://safeguard.sh/resources/blog/facebook-data-leak-533-million Fri, 02 Jul 2021 10:00:00 GMT Data Breach hi@safeguard.sh (James) https://safeguard.sh/resources/blog/messagepack-security-implications https://safeguard.sh/resources/blog/messagepack-security-implications Fri, 25 Jun 2021 10:00:00 GMT Application Security hi@safeguard.sh (Michael) https://safeguard.sh/resources/blog/disaster-recovery-software-supply-chain-incidents https://safeguard.sh/resources/blog/disaster-recovery-software-supply-chain-incidents Tue, 22 Jun 2021 10:00:00 GMT Risk Management hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/microsoft-exchange-hafnium-attack https://safeguard.sh/resources/blog/microsoft-exchange-hafnium-attack Sun, 20 Jun 2021 10:00:00 GMT Zero-Day Exploits hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/nist-ssdf-framework-practical-guide https://safeguard.sh/resources/blog/nist-ssdf-framework-practical-guide Fri, 18 Jun 2021 09:00:00 GMT Compliance & Regulations hi@safeguard.sh (Alex) https://safeguard.sh/resources/blog/pulse-secure-vpn-cve-2021-22893 https://safeguard.sh/resources/blog/pulse-secure-vpn-cve-2021-22893 Tue, 15 Jun 2021 10:00:00 GMT Zero-Day Exploits hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/dependency-confusion-attacks-explained https://safeguard.sh/resources/blog/dependency-confusion-attacks-explained Thu, 10 Jun 2021 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Bob) https://safeguard.sh/resources/blog/jbs-foods-ransomware-supply-chain https://safeguard.sh/resources/blog/jbs-foods-ransomware-supply-chain Sat, 05 Jun 2021 10:00:00 GMT Ransomware hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/understanding-sbom-requirements-under-eo-14028 https://safeguard.sh/resources/blog/understanding-sbom-requirements-under-eo-14028 Tue, 01 Jun 2021 09:00:00 GMT Compliance & Regulations hi@safeguard.sh (James) https://safeguard.sh/resources/blog/accellion-fta-breach-supply-chain https://safeguard.sh/resources/blog/accellion-fta-breach-supply-chain Tue, 25 May 2021 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/codecov-bash-uploader-compromise https://safeguard.sh/resources/blog/codecov-bash-uploader-compromise Thu, 20 May 2021 11:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/solarwinds-sunburst-lessons-for-supply-chain-security https://safeguard.sh/resources/blog/solarwinds-sunburst-lessons-for-supply-chain-security Sat, 15 May 2021 10:00:00 GMT Supply Chain Attacks hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/executive-order-14028-software-supply-chain-security https://safeguard.sh/resources/blog/executive-order-14028-software-supply-chain-security Wed, 12 May 2021 09:00:00 GMT Compliance & Regulations hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/colonial-pipeline-ransomware-attack-2021 https://safeguard.sh/resources/blog/colonial-pipeline-ransomware-attack-2021 Sat, 08 May 2021 10:00:00 GMT Ransomware hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/codecov-bash-uploader-compromise-retrospective https://safeguard.sh/resources/blog/codecov-bash-uploader-compromise-retrospective Thu, 15 Apr 2021 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/software-escrow-agreements-security-guide https://safeguard.sh/resources/blog/software-escrow-agreements-security-guide Mon, 15 Mar 2021 10:00:00 GMT Risk Management hi@safeguard.sh (Yukti Singhal) https://safeguard.sh/resources/blog/rust-foundation-formation-security-implications https://safeguard.sh/resources/blog/rust-foundation-formation-security-implications Wed, 10 Feb 2021 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/sunburst-supply-chain-attack-evolution-2020 https://safeguard.sh/resources/blog/sunburst-supply-chain-attack-evolution-2020 Fri, 18 Dec 2020 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/shellshock-bash-vulnerability-lessons https://safeguard.sh/resources/blog/shellshock-bash-vulnerability-lessons Tue, 24 Sep 2019 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/heartbleed-openssl-five-year-retrospective https://safeguard.sh/resources/blog/heartbleed-openssl-five-year-retrospective Sun, 07 Apr 2019 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/asus-live-update-backdoor-shadowhammer https://safeguard.sh/resources/blog/asus-live-update-backdoor-shadowhammer Thu, 28 Mar 2019 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/xcodeghost-ios-compiler-supply-chain-2015 https://safeguard.sh/resources/blog/xcodeghost-ios-compiler-supply-chain-2015 Mon, 18 Feb 2019 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/event-stream-npm-malicious-publish-2018 https://safeguard.sh/resources/blog/event-stream-npm-malicious-publish-2018 Tue, 27 Nov 2018 12:00:00 GMT Open Source Security hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/ccleaner-supply-chain-attack-2017-analysis https://safeguard.sh/resources/blog/ccleaner-supply-chain-attack-2017-analysis Tue, 19 Sep 2017 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/equifax-data-breach-supply-chain-angle https://safeguard.sh/resources/blog/equifax-data-breach-supply-chain-angle Fri, 15 Sep 2017 12:00:00 GMT Incident Analysis hi@safeguard.sh (Shadab Khan) https://safeguard.sh/resources/blog/ukrainian-m-e-doc-notpetya-origin-story https://safeguard.sh/resources/blog/ukrainian-m-e-doc-notpetya-origin-story Mon, 04 Sep 2017 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/notpetya-ukraine-supply-chain-origin https://safeguard.sh/resources/blog/notpetya-ukraine-supply-chain-origin Wed, 05 Jul 2017 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey) https://safeguard.sh/resources/blog/wannacry-ransomware-supply-chain-dimensions https://safeguard.sh/resources/blog/wannacry-ransomware-supply-chain-dimensions Sat, 20 May 2017 12:00:00 GMT Incident Analysis hi@safeguard.sh (Nayan Dey)