Safeguard
Tag

2024

Safeguard articles tagged "2024" — guides, analysis, and best practices for software supply chain and application security.

5 articles

Vulnerability Analysis

CrowdStrike (2024): The Update Channel Failed With No Attacker Involved

A factual look at the July 2024 CrowdStrike Falcon content update that crashed millions of Windows hosts worldwide, and why an incident with no adversary belongs in any serious discussion of software supply chain risk.

Sep 17, 20263 min read
Vulnerability Analysis

The 2024 Snowflake Customer Attacks: A Breach With No Platform Vulnerability

A factual account of the 2024 campaign against Snowflake customer accounts, which used credentials harvested by infostealer malware against accounts lacking multi-factor authentication, with no vulnerability in Snowflake itself.

Sep 17, 20263 min read
Vulnerability Analysis

polyfill.io (2024): What Happens When a CDN Domain Changes Hands

A factual account of the 2024 polyfill.io incident, in which a widely embedded JavaScript CDN domain was acquired and began serving malicious code to a large number of websites.

Sep 17, 20262 min read
Industry Trends

Software Supply Chain Security in 2024: A Year in Review

From the CrowdStrike outage to state-sponsored npm campaigns and regulatory milestones, 2024 was the year supply chain security went from niche concern to operational necessity.

Mar 18, 20267 min read
Ransomware

Ransomware-as-a-Service in 2024: The Ecosystem That Won't Die

The RaaS ecosystem proved resilient through 2024 despite major law enforcement takedowns, with new groups filling every gap and affiliate models becoming more sophisticated.

Mar 11, 20267 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.