Application Security
Disable Crypto Hardware on Network Devices (T1600.002)
Dedicated encryption hardware is faster and harder to tamper with. What T1600.002 means and how a fall back to software encryption can give it away.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
Reduce Key Space: Shrinking Encryption Strength on Devices (T1600.001)
A compromised network device can be told to use much smaller keys. What T1600.001 means and how to catch crypto configuration drift.
Oct 18, 20262 min read
Application Security
Detecting and Mitigating Weakened Encryption on Network Devices (T1600)
If a router or firewall is made to encrypt badly, your traffic is readable without anyone breaking the cipher. What T1600 means and what to monitor.
Oct 18, 20263 min read
Application Security
Network Address Translation Traversal on Network Devices (T1599.001)
A changed NAT rule can open a path between separated networks or hide traffic. What T1599.001 means and which changes and flows to watch for.
Oct 18, 20262 min read
Application Security
Detecting and Mitigating Network Boundary Bridging (T1599)
When a firewall or router is compromised, segmentation stops meaning anything. How MITRE describes T1599, what to watch for, and how to protect boundary devices.
Oct 18, 20265 min read
Application Security
Spearphishing by Voice: Vishing for Information (T1598.004)
Phone calls and callback numbers can pull credentials and details from staff. What T1598.004 covers, how to spot patterns, and how to train for it.
Oct 18, 20262 min read
Application Security
Detecting and Mitigating Spearphishing Links for Information (T1598.003)
Cloned login pages, obfuscated URLs, fake browser pop-ups, QR codes and session-stealing proxies. A defender's look at T1598.003 and the controls that help.
Oct 18, 20266 min read
Application Security
Spearphishing Attachments That Harvest Information (T1598.002)
Not every malicious attachment runs code. Some are forms to fill in or fake login pages. Here is how T1598.002 works and what to monitor and configure.
Oct 18, 20263 min read
Application Security
Spearphishing via Third-Party Services for Information (T1598.001)
Fake recruiters and social media messages can pull details out of your staff. What T1598.001 means and how to handle contact outside corporate email.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.