Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Socket reported a Firefox add-on with no malicious code at review time that fetched a Google account takeover payload after install, aimed at Portuguese and Spanish speakers.
Aikido reports that GitLab's issue by email address carries a long lived token that can push branches and trigger CI as the account owner. GitLab treats it as intended behavior.
Socket reported that Twitch Enhanced Viewer, with about 30,000 Chrome users, sent live Twitch OAuth session tokens to third party proxy servers. Fixed builds followed in September.
Socket reported six Chrome and Firefox extensions linked to code that reads authenticated Axiom and Padre sessions and sends tokens out through browser navigation.
Falls from height were the top cause of worker deaths in Great Britain in 2025/26 at 31 of 126. Drones and robots can avoid some work at height, if their software holds up.
OSHA's underground construction rules set numeric gas limits, communication tests and check-in procedures. Software that automates tunneling must keep them intact.
OSHA requires a written engineering survey before demolition starts. Remote demolition machines add software that needs the same discipline.
Sellafield has run a robot arm inside an active glovebox and operated a robot from off site. Here is what the software behind remote nuclear work must get right.
A practical media literacy guide for security headlines: check the claim type, source, number and date, with worked examples from the Fed, the FBI and a 2012 speech.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
