Application Security
CWE-1323 Sensitive Trace Data on SoCs: Risk and Fixes
Debug trace blocks on a system-on-chip can capture secrets. If the traces are stored unprotected, an untrusted debugger can read them.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-1322 Blocking Code in a Single-Threaded, Non-Blocking Context
One blocking call in a Node.js or asyncio event loop can freeze every request. How attackers trigger it and how to keep the loop free.
Oct 18, 20263 min read
Application Security
CWE-1321 Prototype Pollution: How It Happens and How to Fix It
Prototype pollution lets attackers add or change properties on every JavaScript object in your app. Here is how merge functions cause it and what actually stops it.
Oct 18, 20265 min read
Application Security
CWE-1320 Unprotected Hardware Alert Signals: What Goes Wrong
When untrusted software can mask or forge thermal and power alerts, a device loses its safety net. Here is how the weakness works and how to close it.
Oct 18, 20262 min read
Application Security
CWE-1319 Electromagnetic Fault Injection: Causes and Defenses
How a pulse of magnetic field can flip bits in a chip, bypass secure boot and leak secrets, and which design and coding defenses MITRE lists for it.
Oct 18, 20263 min read
Application Security
CWE-1318 On-chip Buses Without Security Features: What to Do
Simple, low-power buses often cannot carry privilege or identity. CWE-1318 is the risk of hanging secure peripherals off them, and the two designs MITRE offers.
Oct 18, 20263 min read
Application Security
CWE-1317 Improper Access Control in a Fabric Bridge
A bridge that forwards transactions without checking privilege or identity erases the access control behind it. How CWE-1317 works and how to verify the bridge.
Oct 18, 20263 min read
Application Security
CWE-1316 Fabric Address Map Overlapping Protected and Unprotected Ranges
When protected and unprotected address ranges overlap on a chip fabric, the overlap becomes an unprotected path to the secret. How CWE-1316 happens and how to test for it.
Oct 18, 20263 min read
Application Security
CWE-1315 Improper Bus Controlling Capability in a Fabric End-point
One register bit left on can let a responder device control transactions on the fabric. A short guide to CWE-1315 and the default-off fix.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.