Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
localStorage Security: Why You Shouldn't Keep Tokens There
localStorage security comes down to one fact: any script on your page can read it. That makes it the wrong place for auth tokens and anything sensitive.
Regex DDoS (ReDoS): How Catastrophic Backtracking Takes Down a Service
A regex DDoS, or ReDoS, weaponizes a slow regular expression so a short input pins a CPU core for seconds or minutes. Here is why it happens and how to detect and fix it.
CVE-2023-34034 Explained: The Spring Security WebFlux Authorization Bypass
CVE-2023-34034 lets attackers slip past Spring Security rules in WebFlux apps because of a wildcard-matching mismatch. Here is exactly what breaks, who is affected, and how to fix it.
CVE-2021-43527: The NSS Heap Overflow Explained
CVE-2021-43527 is a critical heap buffer overflow in Mozilla NSS that can lead to remote code execution when verifying certain digital signatures.
Code Guide Buzzardcoding: How to Read and Review Code for Security
A good code guide teaches you to read code, not just write it. This walkthrough covers how to review code for the security flaws that automated tools and casual readers miss.
AWS Breach: How They Actually Happen and How to Prevent One
Most AWS breaches are not AWS failing — they are misconfiguration, leaked keys, and over-privileged roles. Here is how the real ones unfolded and how to stop yours.
Choosing a Code Analysis Tool: A Practical Security Guide
What a code analysis tool actually does, how static source code analysis differs from dependency scanning, and how to pick one that finds real bugs instead of noise.
What Is Checkmarx Used For? A Practical Overview
Checkmarx is used mainly for static application security testing (SAST): scanning source code for vulnerabilities early in development. Here is what it does and how teams actually use it.
How to Check Code for Security Bugs Before You Ship
Learning to check code for security issues means layering the right tools in the right order. Here is a practical workflow that catches real bugs without drowning you in noise.
CVE-2022-31160: Understanding the jQuery UI Checkboxradio XSS
CVE-2022-31160 is a cross-site scripting flaw in jQuery UI's checkboxradio widget, fixed in 1.13.2. Here is how it works and how to remediate it.
Adversarial Images: How They Fool ML Models
What adversarial images are, why a few invisible pixels can flip a model's prediction, and the defenses that reduce the risk in production.
Checkmarx Tutorial: A Practical Guide to Getting Started
A hands-on Checkmarx tutorial covering what the platform scans, how to run your first SAST scan, triaging results, and wiring the CLI into CI.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.