2022
Safeguard articles tagged "2022" — guides, analysis, and best practices for software supply chain and application security.
4 articles
LastPass (2022): Two Linked Intrusions and a Developer Home Machine
A factual retrospective on the 2022 LastPass breaches, where attackers used data from a first incident to target a DevOps engineer personal computer, ultimately obtaining encrypted customer vault backups.
Follina (CVE-2022-30190): The Office Attack That Needed No Macros
A factual look at Follina, a 2022 Windows vulnerability abusing the MSDT protocol handler, which allowed code execution from a Word document without macros and therefore bypassed the standard defensive advice.
Spring4Shell (CVE-2022-22965): Class Loader Manipulation in Spring Framework
A factual look at Spring4Shell, the March 2022 remote code execution vulnerability in Spring Framework, including why its real-world impact was narrower than the initial Log4Shell comparisons suggested.
Software Supply Chain Security in 2022: The Year Everything Changed
From LastPass to Log4j's aftermath to new regulations, 2022 was the year supply chain security went from niche concern to board-level priority.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.