Application Security
CWE-1301 Incomplete Data Removal Within a Hardware Component
Erased is not always gone. CWE-1301 covers data that survives deletion in memory and media, and what a used device can leak to its next owner.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-1300 Improper Protection of Physical Side Channels
Power draw, electromagnetic emissions and sound can leak keys and PINs even when the digital interface is sealed. CWE-1300 with MITRE's examples and test methods.
Oct 18, 20265 min read
Application Security
CWE-130 Length Parameter Inconsistency: When the Header Lies
A length field that disagrees with the real data leads to over-reads, overflows and stalled servers. Learn how to parse length-prefixed data safely.
Oct 18, 20264 min read
Application Security
CWE-13 ASP.NET Password in Configuration File: Fixes That Stick
A plaintext password in a config file is readable by anyone who can read the file. How CWE-13 shows up in ASP.NET projects and where secrets should live instead.
Oct 18, 20263 min read
Application Security
CWE-1299 Missing Protection for an Alternate Hardware Interface
Guard the main path to a register and attackers use the shadow register or another port. CWE-1299 with the MITRE Verilog example, real CVEs and a fix.
Oct 18, 20265 min read
Application Security
CWE-1298 Hardware Logic Contains Race Conditions
A glitch in access control logic can open a window for an attacker. How race conditions in hardware create security gaps and how designers reduce them.
Oct 18, 20263 min read
Application Security
CWE-1297 Confidential Device Data Exposed to OSAT Vendors
Chips reach assembly and test houses with debug and test modes open. CWE-1297 is about what secrets are still on the part when it gets there.
Oct 18, 20263 min read
Application Security
CWE-1296 Incorrect Chaining or Granularity of Debug Components
Misconfigured debug hubs and test ports can hand out access to the wrong people. How CWE-1296 happens in chip debug design and how post-silicon tests catch it.
Oct 18, 20264 min read
Application Security
CWE-1295 Debug Messages That Reveal Too Much, and How to Trim Them
Verbose debug output hands attackers memory addresses, keys and system layout. CWE-1295 explained with real CVEs from the MITRE record and a logging fix in Python.
Oct 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.