software-updates
Safeguard articles tagged "software-updates" — guides, analysis, and best practices for software supply chain and application security.
4 articles
Notepad++'s Own Updater Had No Cryptographic Integrity Check
CVE-2025-15556 let an attacker who intercepts update traffic serve a malicious installer that Notepad++'s WinGUp updater would execute unverified — in one of the most widely installed Windows utilities.
TrueConf's Update Mechanism Had No Integrity Check, and a Nation-State Actor Found It
CVE-2026-3502, a separate TrueConf Client finding beyond this series' earlier coverage, let attackers substitute tampered update payloads, tied to Operation TrueChaos against Southeast Asian governments.
Lessons from CrowdStrike: Rethinking How We Deploy Software Updates
The CrowdStrike outage wasn't just an EDR problem. It exposed fundamental weaknesses in how the entire industry handles software updates, from kernel drivers to SaaS platforms.
Securing Software Update Mechanisms
Software updates are a double-edged sword: they deliver patches but also provide a trusted channel attackers can exploit. Securing the update mechanism itself is essential to supply chain integrity.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.