vulnerability-management
Safeguard articles tagged "vulnerability-management" — guides, analysis, and best practices for software supply chain and application security.
689 articles
PHP 7.3 to 7.4 Version Vulnerabilities: A Security Changelog
PHP 7.4 vulnerabilities span years of unsupported point releases; here is what changed security-wise across the 7.3 and 7.4 lines and why staying on either branch today is a standing risk.
Overcoming AppSec chaos: modes of ASPM adoption
ASPM adoption isn't one path. We break down point-tool, platform-consolidation (Prisma Cloud), and workflow-first modes — and why most stall after the pilot.
What is an Application Vulnerability
A flaw in code, config, or a dependency that attackers can exploit. Learn the types, scoring, and how vulnerabilities differ from risk and threats.
CVE Fatigue: How To Stop Drowning Engineers
CVE fatigue is a productivity tax disguised as a security control. Here is how reachability filtering, auto-PRs, and AI triage restore engineering focus.
What a Dependency Scanner Does and Which One to Pick
A dependency scanner reads your lockfiles, resolves the full dependency tree, and matches every package against known vulnerability data. Here is how that works and what separates a good one from a noisy one.
What is Attack Surface Management
Attack surface management explained: what it covers, how it differs from vulnerability management, and why CISA and Gartner now treat it as core AppSec.
What is a Zero-Day Vulnerability
A zero-day vulnerability is exploited before a patch exists. See real cases like Log4Shell and MOVEit, and how to cut response time.
What is a CVE (Common Vulnerabilities and Exposures)
A CVE is a unique ID for a known security flaw, but how it's assigned, scored, and disclosed is far messier than the name suggests.
Why EPSS scores matter for vulnerability management
EPSS scores predict real-world exploitation probability, something CVSS can't do. Here's why that matters for Prisma Cloud users, and how Safeguard uses it.
CISA KEV Catalog in 2025: What the Data Tells Us About Real-World Exploitation
The CISA Known Exploited Vulnerabilities catalog has become the definitive list of actively exploited flaws. An analysis of 2025 KEV trends reveals which products, vulnerability types, and attack patterns dominate.
OWASP Top 10 Vulnerabilities 2023: A Retrospective That Still Applies
There was no new web OWASP Top 10 in 2023 — but the OWASP Top 10 vulnerabilities 2023 story is really about the 2021 web list holding firm and the API Security Top 10 getting a major refresh.
How Reachability Cuts Your Vulnerability Backlog 80%
The 80% backlog reduction from reachability isn't marketing. It's a measurable property of how transitive dependency graphs actually expose risk to a specific application.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.