Application Security
Hijacked Email Accounts: Defending Against T1586.002
Adversaries compromise existing email accounts to hijack threads and evade reputation filters. MITRE T1586.002 explained, with practical defenses.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
Hijacked Social Media Accounts: Defending Against T1586.001
Adversaries take over existing social media accounts to reach targets through trusted connections. MITRE T1586.001 explained with defenses.
Oct 18, 20262 min read
Application Security
Compromised Accounts as Attack Infrastructure: T1586 Explained
MITRE T1586 covers adversaries taking over existing email, social media and cloud accounts to borrow trust. What to monitor and how to protect your accounts.
Oct 18, 20266 min read
Application Security
Attacker-Created Cloud Accounts: Defending Against T1585.003
Adversaries register cloud accounts for storage, exfiltration and compute. MITRE T1585.003 explained, with ways to see the data movement it enables.
Oct 18, 20263 min read
Application Security
Attacker-Created Email Accounts: Defending Against T1585.002
Adversaries create email accounts for phishing and to register other resources. MITRE T1585.002 explained, with practical mail defenses.
Oct 18, 20262 min read
Application Security
Fake Social Media Personas: Defending Against T1585.001
MITRE T1585.001 covers adversaries who create fake social media accounts to build trust with targets. What to watch for and how to respond.
Oct 18, 20262 min read
Application Security
Fake Accounts and Personas: Defending Against T1585
MITRE T1585 covers adversaries building fake personas and accounts for social engineering and infrastructure. Understand it and learn what to monitor.
Oct 18, 20266 min read
Application Security
Compromised Routers and Network Devices: T1584.008
Adversaries compromise third-party routers and edge devices to relay traffic and host payloads. MITRE T1584.008 explained, with checks for your own gear.
Oct 18, 20263 min read
Application Security
Compromised Serverless Functions: T1584.007 for Defenders
MITRE T1584.007 covers adversaries taking over serverless functions to relay traffic. See what it means for cloud owners and how to reduce exposure.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.