Application Security
Detecting and Mitigating Lua Scripting Abuse (T1059.011)
Lua is built for embedding, which also makes it easy to abuse. See what MITRE documents and how to inventory, restrict and watch Lua interpreters.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
Detecting and Mitigating AutoHotKey and AutoIT Abuse (T1059.010)
AutoIT and AutoHotkey scripts automate Windows tasks and can carry malware. Here is how MITRE describes the technique and the control that blocks it.
Oct 18, 20262 min read
Application Security
Detecting and Mitigating Cloud API Abuse (T1059.009)
Cloud APIs expose nearly every part of a tenant. See how MITRE describes their abuse for execution, what to watch in your audit logs, and how IAM limits the damage.
Oct 18, 20264 min read
Application Security
Detecting and Mitigating Network Device CLI Abuse (T1059.008)
The command line on routers and switches can reshape traffic and switch off logging. Here is how MITRE describes the risk and how AAA and TACACS+ help.
Oct 18, 20262 min read
Application Security
Detecting and Mitigating JavaScript Abuse (T1059.007)
JavaScript, JScript and macOS JXA can all run outside the browser. Learn what MITRE documents, what to monitor, and how to cut the exposure.
Oct 18, 20264 min read
Application Security
Detecting and Mitigating Python Abuse (T1059.006)
Python is installed almost everywhere, which makes it a handy execution tool for intruders. See how MITRE describes it and how to inventory, limit and watch it.
Oct 18, 20263 min read
Application Security
Detecting and Mitigating Visual Basic Abuse (T1059.005)
VBScript, VBA macros and HTA pages remain a common execution path. Here is what MITRE documents, what to log, and which controls cut the risk.
Oct 18, 20263 min read
Application Security
Detecting and Mitigating Unix Shell Abuse (T1059.004)
How adversaries abuse sh, bash, zsh and BusyBox for execution on Linux, macOS, ESXi and network devices, and how defenders can spot and limit it.
Oct 18, 20264 min read
Application Security
Detecting and Mitigating Windows Command Shell Abuse (T1059.003)
cmd.exe and batch files are on every Windows host. Here is how they get abused and how to log, baseline and restrict them.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.