Cloud Security
Connect Safeguard to Google Cloud: connectors, registries and Pub/Sub
The documented ways Google Cloud connects to Safeguard: the GCP connector, Cloud Storage, the CLI cloud scan and Pub/Sub event delivery.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCloud Security
Yandex Cloud puts platform in emergency mode after data center strikes
Yandex reported drone attacks on three data centers between 8 and 11 Oct 2026 and told customers to use other disaster recovery plans. A physical outage case for dependency planning.
Oct 18, 20263 min read
Cloud Security
Google Cloud Storage writes failed in us-central1 for 18 hours
A load balancing change in Google Cloud Storage caused upload errors on 8 Oct 2026 and came back on 9 Oct after an incomplete rollback. What Google's final report says and what to test.
Oct 18, 20265 min read
Cloud Security
Vault 2.1.2: Four October Bulletins, From ACL Deny Bypass to ACME
HashiCorp's 7 October Vault bulletins fix a case-sensitivity bypass of deny rules, unverified ACME certificate identities and plugin code execution from snapshots.
Oct 18, 20266 min read
Cloud Security
Rancher CVE-2026-88804: Unauthenticated Writes to the Login Page
A request-parsing quirk let anyone who could reach Rancher rewrite public UI settings and plant script on the login page. Fixed 23 September in five release lines.
Oct 18, 20265 min read
Cloud Security
Consul 2.0.4: Intentions That Match Too Much and Catalog Takeovers
HashiCorp's 10 September Consul bulletins fix broad Envoy RBAC matching for intentions, two catalog authorization bypasses, an RPC memory DoS and a consul-template leak.
Oct 18, 20266 min read
Cloud Security
Audit Entra Enterprise Apps After the ConnectWise Cloud Backup Abuse
An attacker signed in as the ConnectWise Cloud Backup app across Microsoft 365 tenants on 15 October 2026. A step by step Graph PowerShell audit for any trusted third-party app.
Oct 18, 20266 min read
Cloud Security
Block New Client Secrets in Entra Before an Attacker Adds One
In the ConnectWise app abuse, a hijacked app added client secrets to other apps for persistence. Entra app management policies can block that. Here is how to roll them out safely.
Oct 18, 20266 min read
Cloud Security
Turn On Microsoft Graph Activity Logs Before the Next App Breach
When the ConnectWise backup app was abused in October 2026, tenants without Graph activity logs couldn't see what it read. How to enable them, keep them and query them.
Oct 18, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.