Application Security
Services File Permissions Weakness (T1574.010) Guide
MITRE T1574.010: weak permissions on Windows service binaries let users replace them and run code as the service. Detect, audit and harden.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
Unquoted Path Interception (T1574.009): Find and Fix
MITRE T1574.009: unquoted Windows service and shortcut paths with spaces can launch the wrong executable. How to find and fix them.
Oct 18, 20263 min read
Application Security
Search Order Hijacking (T1574.008): Detect and Prevent
MITRE T1574.008: Windows runs the wrong program when a caller omits the full path. How the search order is abused and what to do about it.
Oct 18, 20263 min read
Application Security
PATH Interception (T1574.007): Detection and Mitigation
MITRE T1574.007: a malicious program placed earlier in PATH runs instead of the real one. See how it works and how to harden Windows, Linux and macOS.
Oct 18, 20264 min read
Application Security
Dynamic Linker Hijacking (T1574.006): LD_PRELOAD and DYLD
MITRE T1574.006: abuse of LD_PRELOAD on Linux and DYLD_INSERT_LIBRARIES on macOS to load malicious libraries. Detection and hardening steps.
Oct 18, 20263 min read
Application Security
Installer File Permissions Weakness (T1574.005) Guide
MITRE T1574.005: weak permissions on installer binaries and temp folders let low-privilege users run code at higher privilege. Detection and fixes.
Oct 18, 20263 min read
Application Security
Dylib Hijacking on macOS (T1574.004) for Defenders
MITRE T1574.004: malicious dylibs placed where macOS apps search at runtime. See what to monitor and how to lock down search paths.
Oct 18, 20262 min read
Application Security
DLL Hijacking and Side-Loading (T1574.001) Defender Guide
DLL side-loading, search order hijacking and phantom DLLs let malicious code run inside trusted programs. Detection and fixes from MITRE T1574.001.
Oct 18, 20265 min read
Application Security
Hijack Execution Flow (T1574): A Defender Guide
MITRE T1574 covers hijacking how programs and libraries are found and run. Learn the sub-techniques, what to monitor, and how to harden Windows, Linux and macOS.
Oct 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.